1. Overview
Nolan is a voice-first lifting tracker for iOS. This policy explains what we collect when you use the Nolan app and this website, why we collect it, who we share it with, and the control you have over it.
In this policy, "Nolan", "we", "us", and "our" mean [LEGAL ENTITY NAME], the operator of the Nolan app and nolanfitness.app. "You" means the person using Nolan.
The short version: we collect what we need to log your sets and keep your account working, we process your voice only to turn it into a logged set, we do not sell your data, and you can delete everything from inside the app.
2. Information we collect
Account information
When you create an account we collect your email address and, if you use Sign in with Apple, the identifier Apple returns to us (and the email address you choose to share, which may be a private relay address). You may optionally add a display name.
Workout data
This is the content you create in Nolan, and we store it so your history is available across sessions and devices:
- Exercises, weights, reps, sets, and rest timings
- Workout dates, durations, and session notes
- Derived training metrics such as estimated 1RM, personal records, volume, and streaks
- Corrections you make to a logged set (we use these to improve parsing accuracy)
Voice audio and transcripts
When you log a set by speaking, we capture a short audio recording and produce a text transcript from it. This is covered in detail in Section 3.
Purchase and subscription information
Subscriptions are sold through Apple's In-App Purchase system. Apple tells us your subscription status, plan, and renewal state. We never receive or store your payment card details. Apple's handling of your payment information is governed by Apple's own privacy policy.
Device and diagnostic information
We collect limited technical information to keep the app working: device model, iOS version, app version, language and region, coarse timezone, crash reports, and error logs. We also record basic usage events such as "a set was logged" or "a screen was opened" so we can see which features are used.
Website information
nolanfitness.app is a static marketing site. Our hosting provider records standard server request logs (IP address, user agent, requested page, timestamp) for security and reliability. The site does not set advertising cookies or run cross-site trackers.
What we do not collect
- We do not request or store your precise location
- We do not read your contacts, photos, calendar, or messages
- We do not read from or write to Apple Health unless you explicitly connect it, and you can disconnect it at any time in iOS Settings
- We do not buy data about you from data brokers
3. Voice and microphone
The important part, in plain terms
Nolan uses your microphone only while you are actively logging. Audio is sent to our backend to be converted into text, the text is parsed into a set, and the recording is then deleted. Nolan does not listen in the background, and your recordings are never sold or used for advertising.
When the microphone is on
iOS requires your explicit permission before Nolan can access the microphone, and shows a system indicator whenever it is in use. Nolan activates the microphone only during an active logging session that you start: when you open the logging screen or use the in-app voice control. Ending the session stops capture. You can revoke microphone access at any time in iOS Settings → Privacy & Security → Microphone; Nolan will still work, but you will need to enter sets manually.
How audio is processed
Captured audio is transmitted over an encrypted connection (TLS) to our backend, where it is passed to OpenAI, our speech-to-text provider, which returns a transcript. Our backend then parses that transcript into a structured set (exercise, weight, reps) and saves the set to your workout history. Your account and workout data are stored on Supabase.
What we keep
- Audio recordings are processed transiently and deleted after transcription. We do not retain a durable archive of your recordings.
- Transcripts may be retained for a limited period, linked to your account, so we can show you what Nolan heard, let you correct a misheard set, and debug parsing failures.
- Corrections you make are retained to improve how Nolan parses lifting language.
Limits on how we use voice data
- We do not use your recordings or transcripts for advertising, and we do not sell them
- We do not attempt to identify you by your voice, and we do not use voice for biometric identification
- We send audio to OpenAI through its API, where submissions are not used to train its models by default
- A small number of authorized personnel may review transcripts only where necessary to investigate a specific bug or a support request you have raised
4. How we use information
- To provide Nolan: transcribe your speech, log your sets, sync your history, and show your progress
- To maintain your account: authenticate you, manage your subscription, and restore purchases
- To improve the product: fix crashes, improve transcription and parsing accuracy, and understand which features are used
- To communicate with you: respond to support requests and send essential service notices (for example, a change to these terms or a billing problem). Marketing email, if any, is opt-in and can be unsubscribed at any time.
- To keep Nolan safe: detect abuse, prevent fraud, and enforce our Terms of Service
- To meet legal obligations: comply with applicable law and respond to valid legal process
We do not use your workout data or voice data to make automated decisions that produce legal or similarly significant effects about you.
5. Legal bases
If you are in the UK, EEA, or Switzerland, we rely on the following legal bases under the UK GDPR and EU GDPR:
- Performance of a contract: to provide the app, transcribe your voice, store your workouts, and manage your subscription
- Legitimate interests: to secure the service, prevent abuse, and improve accuracy and reliability, balanced against your rights
- Consent: for microphone access, optional Apple Health integration, and any marketing communications. You can withdraw consent at any time.
- Legal obligation: where we must retain or disclose information to comply with law
6. How we share information
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share information only with service providers who process it on our behalf under contract, and only for the purposes below:
| Category | Purpose | Data involved |
|---|---|---|
| OpenAI Speech-to-text | Convert your recordings into text | Voice audio, transcripts |
| Supabase Hosting & database | Run our backend and store your account and workout data | Account info, workout data, transcripts |
| Apple | App distribution, Sign in with Apple, In-App Purchase billing | Account identifier, subscription status |
We may also disclose information where we believe in good faith that it is required to comply with a law, regulation, or valid legal process; to enforce our terms; or to protect the rights, safety, or property of our users, the public, or us. If Nolan is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction, and we will notify you before it becomes subject to a different privacy policy.
7. Data retention
- Account and workout data: kept for as long as your account is active
- Voice recordings: deleted after transcription completes; not retained as an archive
- Transcripts: retained for a limited period linked to your account, then deleted or de-identified
- Diagnostic logs: typically retained for up to 90 days
- Billing and tax records: retained as long as required by law, even after account deletion
8. Deleting your account
Delete your account from inside the app
Open Nolan and go to Settings → Account → Delete Account. You will be asked to confirm. Deletion removes your account and your workout history. It cannot be undone, so export anything you want to keep first.
If you cannot access the app, email help@nolanfitness.app from your account email address and we will delete your account for you.
When you delete your account, we remove your account record, workout history, and any retained transcripts from our live systems promptly. Residual copies may persist in encrypted backups for up to 30 days before those backups age out. We may retain a minimal record of the deletion itself, plus any billing records we are legally required to keep.
Deleting your account does not cancel your subscription. Subscriptions are managed by Apple. Cancel in iOS Settings → your name → Subscriptions, or you may continue to be billed.
9. Your privacy rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you, and receive a copy in a portable format
- Correct information that is inaccurate or incomplete
- Delete your personal information
- Object to or restrict certain processing, including processing based on legitimate interests
- Withdraw consent you previously gave, without affecting processing already carried out
- Not be discriminated against for exercising any of these rights
Most of these are available directly in the app. For anything else, email help@nolanfitness.app. We will respond within the time required by applicable law (generally 30 days), and we may need to verify your identity first, usually by confirming control of your account email.
California residents: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not offer financial incentives for personal information. You may exercise your rights through the app or by emailing us, and you may use an authorized agent.
UK/EEA residents: you also have the right to lodge a complaint with your local supervisory authority. We would appreciate the chance to address your concern first.
10. Security
We protect your information with encryption in transit (TLS) and encryption at rest, access controls that limit which personnel can reach production data, and audit logging. Authentication is handled through Sign in with Apple or an email-based flow, so we do not store passwords you have reused elsewhere.
No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and any relevant regulator as required by law.
11. Children
Nolan is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email help@nolanfitness.app and we will delete it. Where local law sets a higher age of digital consent, that age applies instead.
12. International transfers
We operate from [COUNTRY] and our service providers may process your information in other countries, including the United States. Where we transfer personal information out of the UK or EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. Contact us if you would like more detail about these safeguards.
13. Changes to this policy
We may update this policy as Nolan changes. When we do, we will revise the "Last updated" date at the top of this page. If a change materially affects how we handle your information, we will give you notice in the app or by email before it takes effect. Continuing to use Nolan after a change takes effect means you accept the updated policy.
14. Contact us
Questions, requests, or concerns about privacy: email help@nolanfitness.app. We read every message.
[LEGAL ENTITY NAME]
[POSTAL ADDRESS]
help@nolanfitness.app
See also our Terms of Service.