Privacy policy

Effective 21 October 2026

Your training data stays on your phone. It leaves only when you choose to back it up, or when you ask the AI coach something. Pondervo has no ads, no analytics and no tracking.

This policy covers the Pondervo app for Android and this website. Pondervo is made by Iman Edrisian, an individual developer, who is responsible for your data under this policy. Contact: support@pondervo.com.

Data on your phone

Everything you enter is stored in the app's private storage on your phone: workouts and sets, programs, your profile (such as age, body weight and training goals), the health screening answers, effort and pain notes, photos or files you import, and coach chats. It isn't sent to Pondervo. Your AI key, if you add one, is kept encrypted in the Android Keystore.

You can delete this data by clearing the app's storage or uninstalling it. The app opts out of Android's own device backup and phone-to-phone transfer, so its data is copied only by the backups you set up below.

Backups you choose

Backups are off until you set them up. You can pick any of these:

• A folder on your phone, picked by you. The file stays where you put it.
• Google Drive: the app saves backup files in a hidden app folder in your own Drive. It asks only for access to that folder (drive.appdata) and your email address, so it can show which account is connected. It can't see your other Drive files.
• OneDrive: the app saves backup files in its own app folder in your OneDrive and can't see your other files.

Backups go straight from your phone to the service you picked. Pondervo never receives them. You can disconnect in the app and delete the files from your Drive or OneDrive at any time.

Health Connect

If you turn it on, the app writes finished workouts and estimated calories to Health Connect, and reads your body weight from it. Health Connect is on your phone. The app uses this data only for those features, doesn't send it to Pondervo, and never uses it for advertising.

The AI coach

The coach is optional, and the app works fully without it. When you use it, the question you ask and the workout details the coach needs to answer are sent to an AI model. That can include your training history, effort and pain notes, profile details, and any photo or PDF you attach.

With your own key: the request goes straight from your phone to OpenRouter, then to the provider of the model you picked. Their own privacy policies apply. Pondervo doesn't see these requests.

With the Coach subscription: your question and the workout details the coach needs pass through Pondervo's relay (on Cloudflare) and OpenRouter to the AI model's provider. Providers that use data for training are excluded. Some keep requests briefly under their own policy, for example for abuse checks.

• The relay never stores what you ask or what the coach answers.
• For each request it keeps usage records (time, model, tokens and cost), linked to a pseudonymous subscription ID and your Google Play order ID. These are used to apply your allowance and answer support requests. They're kept for 90 days, and everything is deleted 90 days after your subscription ends. You can ask for earlier deletion through support.
• Cloudflare and OpenRouter see your IP address when the request passes through them. The relay doesn't store it.

Voice: speech recognition runs on your phone, so recordings don't leave it. If you pick a voice from your AI provider for reading replies aloud, the reply text is sent to OpenRouter to make the audio. The phone's own voice works offline.

Purchases

Google Play handles payment, under Google's privacy policy. Pondervo doesn't receive your card or billing details. For the Coach subscription, the relay checks your purchase with Google Play and keeps the order ID and a hash of the purchase token, linked to the pseudonymous subscription ID, as described above.

Downloads

Some content is downloaded when you first need it: exercise images and animations from GitHub, and the speech recognition model from Hugging Face. These services see your IP address, as with any download. The app sends them nothing else about you.

Support emails

If you email support, your message and anything you attach (such as diagnostics or a chat export) are used only to answer you. Attached chats and logs are deleted once your request is resolved.

What Pondervo doesn't do

• No ads, analytics or tracking SDKs, and no selling or sharing of your data for advertising.
• No Pondervo account and no Pondervo server holding your training data.
• Google Play may show the developer anonymous, aggregated statistics such as install counts and crash reports, depending on your phone's settings.

Your rights

Most of your data is only on your phone or in your own cloud storage, so you control it directly. For the relay's usage records, you can ask to see, correct or delete them by emailing support@pondervo.com with the support code from Settings. Depending on where you live, you may also be able to complain to your data protection authority.

Children

Pondervo isn't meant for children under 13 and doesn't knowingly collect their data.

Changes

If this policy changes, the new version will be posted here with a new effective date. Significant changes will also be noted in the app.