Privacy Policy
The short version. DTM Fitness works fully on your phone without an account. If you choose to sign in, we back up your training so you don’t lose it. We never sell your data, show ads or track you across other apps. Progress photos never leave your phone. You can delete your account and everything in it from inside the app at any time.
Who we are
DTM Fitness (“DTM”, “we”, “us”) is a strength-training app operated by Dylan Schwartz. We are responsible for your personal information under the EU General Data Protection Regulation (GDPR) and South Africa’s Protection of Personal Information Act (POPIA). You can reach us at [email protected].
What we collect
Without an account
Everything you enter (your profile, workouts, lifts, body measurements and progress photos) is stored only on your phone. We don’t receive any of it.
If you sign in to back up
| Information | Why we use it |
|---|---|
| Your email address | To send you a sign-in code and identify your account. We don’t send marketing emails. |
| Your training profile: age, sex, height, body weight, experience, goals, training days, equipment | To back up and restore the plan the app builds for you. |
| Injuries and joints to protect, readiness check-ins | To keep your plan safe for you when it’s restored on another device. |
| Workouts, lift records, routines, weigh-ins and tape measurements | To back up your history and sync it between your devices. |
| Basic technical logs (such as IP address and time of a request) | To keep the service secure and fix problems. Kept for a short period only. |
We never upload your progress photos or a workout that’s still in progress. They stay on your phone.
If you use the AI coach
When you ask the coach a question, the app sends your question and a short summary of your training (plan, recent workouts, lift estimates, age range and any joints to protect) to our AI provider so it can answer. The summary never includes your name, email address or photos. We don’t store your conversations: they live on your screen until you close the coach. We keep a count of how many questions you ask each day, to keep the service fair and affordable. The coach is for adults only.
Health information and your consent
Some of what you log, like injuries and body weight, counts as health information, which the law protects more strictly. We only store it in the cloud if you tick the consent box when you sign in. You can withdraw that consent at any time by deleting your account, and your data stays on your phone either way.
Our legal basis
We back up your data because you ask us to (performing our agreement with you), store health details on the basis of your explicit consent, and keep the service secure because we have a legitimate interest in doing so.
Who we share it with
We don’t sell or rent your information, and we don’t share it with advertisers. We use a small number of trusted service providers who process it only on our instructions:
| Provider | What they do | Where |
|---|---|---|
| Supabase | Stores your backup and runs sign-in | Frankfurt, Germany (EU) |
| Resend | Delivers the sign-in code email | EU (Ireland) |
| Anthropic | Answers AI coach questions. Under its commercial terms it doesn’t use this data to train its models, and it keeps it only for a limited time for safety monitoring. | United States |
| Cloudflare | Hosts this website | Global |
Where information is processed outside South Africa or the EU, we rely on the provider’s standard contractual safeguards. We may also disclose information if the law requires it.
How long we keep it
Your backup stays until you delete your account. When you do, your account and everything in the cloud are deleted straight away, apart from short-lived technical logs and backups that expire on their own schedule.
Security
Your data is encrypted in transit and at rest. Each person’s records are locked so that only they can read them, and our AI provider’s key lives on our server, never in the app.
Children
You can use DTM Fitness from age 14, but cloud backup and the AI coach are for people aged 18 and over. Under-18s keep everything on their own phone and we collect nothing from them.
Your rights
You can ask to see, correct, export or delete your information, object to how we use it, or withdraw your consent. The quickest way to delete everything is Profile → Account & backup → Delete account in the app. For anything else, email [email protected] and we’ll reply within 30 days. If you’re unhappy with our answer, you can complain to your data protection authority: the Information Regulator in South Africa, or the supervisory authority where you live in the EU.
Changes
If we change this policy in a way that matters, we’ll tell you in the app before it takes effect.