Privacy notice

Who is responsible

Jack Anthony Mosley trading as Turbo Shandy Labs is the controller for Paggered account and product data. Contact support@paggered.app about this notice or your data.

What we collect

Account and identity

Email address, authentication credentials held in protected form, username, display name, avatar, privacy choices, communication preferences, timezone and unit preferences.

Health and fitness data

Workouts and sets, personal records, bodyweight and measurements, recovery, nutrition, goals, injuries or limitations you choose to provide, coach conversations, memories you explicitly save, session feedback and historical form-check results. This can be special-category health data under UK GDPR.

For historical form checks, the submitted video was analysed for that one check and was not stored by Paggered. The resulting assessment stays with your account until you delete it.

Social, billing and technical data

Posts, comments, follows, challenges, blocks and reports; subscription tier and status; request metadata such as IP address and user agent; and stripped error diagnostics. Card details are entered with Stripe and are not stored by Paggered.

Why we use it

• Provide the service and paid features: to keep your account, log training, show progress and deliver features you request. The lawful basis is performance of our contract.
• Health and fitness data: to provide personalised logs, analysis and coaching. In addition to the contractual basis, we rely on your explicit consent under UK GDPR Article 9. Both confirmations are separate, unselected choices recorded with the wording version and a server timestamp.
• Payments and records: to administer access, refunds, disputes, tax and accounting. The bases are contract and legal obligation.
• Security and reliability: to detect abuse, enforce spend limits, investigate errors and moderate reports. The basis is our legitimate interest in keeping Paggered safe and working, balanced against your rights.
• Messages: to send necessary account notices and optional reminders or summaries you can disable in Settings. The bases are contract and, for optional messages, legitimate interests.
• TRENBot channel sharing: when you connect an eligible Discord channel, to disclose only the listed training summaries in response to public channel commands. We rely on your separate, explicit and recorded sharing consent. You can disconnect the channel without deleting your Paggered account.

AI and automated processing

Messages sent to Pags and relevant training context are routed through OpenRouter to third-party AI models. We currently use models from Google (Gemini) and OpenAI (GPT), listed with our other service providers, and we keep that list current. Paggered requests zero data retention and denies provider training or data collection on each request. The apps ask before Pags first sends anything, and you can change that choice in Settings → Privacy & Data. AI output can be wrong and is not medical advice.

A reply can show which categories of account context Pags used. Pags does not silently turn conversation into an account change. A memory is stored only after you explicitly ask for it and approve the proposed text and expiry. You can edit it, stop using it or delete it in Settings. Session feedback is stored as a positive or negative rating with only the listed reason tags; it does not save a free-text judgement.

The service profiles training history to personalise suggestions, but it does not currently make decisions that produce legal or similarly significant effects. If that changes, we will explain the logic and consequences and provide a way to challenge the result and obtain human review before relying on it.

Who receives data

We do not sell personal data or use it for third-party advertising.

Stripe acts as an independent controller and seller of record for payment data under its own notice. Discord handles messages and platform identifiers under its own terms and privacy notice after you choose to connect a channel. Other providers process data for the purposes above. We may also disclose data when law requires it or to establish, exercise or defend legal claims.

RevenueCat, Inc. (United States) processes your Paggered account ID and your App Store or Google Play purchase and subscription records so we can confirm, restore and end your Pro access. It does not receive your workouts, health, recovery or Pags chat data. When you delete your Paggered account, we ask RevenueCat to delete the records it holds about you.

Apple processes your payment and subscription when you subscribe through the App Store, under Apple's own privacy policy. If you use Sign in with Apple, Apple gives us a stable account identifier and either your email address or a private relay address that forwards to it.

When you use Sign in with Apple, we use Apple’s short-lived authorization code to obtain an authorization token. We store that token encrypted so we can revoke Paggered’s authorization when you delete your account.

International transfers

Some providers process data outside the UK. Where no UK adequacy decision applies, we use a provider agreement containing the UK International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK Addendum, and assess the transfer and available safeguards. A provider is not permitted to receive health data merely because it offers a zero-retention setting; its contractual scope must also permit that processing.

Cookies and device storage

Paggered does not set advertising or third-party analytics cookies. It uses authentication cookies needed to keep you signed in and local device storage for features such as unsent workout drafts and dismissed prompts. These are necessary for the service or used at your request.

How long we keep data

Pags provides general fitness coaching, not symptom assessment, diagnosis, treatment, rehabilitation or training and diets for medical conditions. Pags can acknowledge a volunteered injury and explain general exercise differences, without recommending an exercise for that injury. Recognized clinical requests receive a bounded response without sending the request to an AI provider or saving its text. Detection is imperfect; free text can still contain health information.

A 90-day limit for each Pags message and deletion of expired saved preferences are planned. Automatic cleanup is currently held. The in-app notice will show the start date at least 30 days before the first purge, with an export option in Settings. Saved workouts, fitness records and unexpired explicitly saved preferences are separate from chat history.

• Core account, training and fitness data: while the account exists, then deleted with it, except for the limited Apple authorization records described below.
• Unfinished server workout drafts: 24 hours.
• Workout recovery snapshots: 7 days.
• Agent-approved batch recovery: 30 days after saving. Uncommitted proposal payloads: 30 days after creation. Minimal batch receipts and replay protection remain with the connection or account; old health values are removed when recovery expires.
• AI replay records and local preview artefacts: 24 hours.
• Pags memories: used in replies only until their selected expiry or until you stop using them; the saved record remains available for review until you delete it or the account.
• Nutrition AI and action-event receipts: 90 days.
• Unsafe-advice reports copy only the reply you select and minimal handling metadata, for 90 days from reporting. This separate safety-review copy can outlive chat deletion; the whole conversation is not attached. Automatic report cleanup shares the held rollout.
• Conversation feedback: until its conversation or the account is deleted.
• Raw product analytics: 12 months, then deleted or irreversibly aggregated.
• Billing, refund, dispute and tax records: 6 years, or longer only while an inquiry or claim remains open.
• Deleted database data may remain in restricted rolling backups. The intended maximum is 7 days; provider configuration must be verified before cleanup is activated. Restores must reapply deletions before serving data.

When you delete your account, we ask Apple to revoke that authorization. If the request fails, your account deletion still proceeds. We retain the encrypted token, a pseudonymous reference and the details needed to retry, solely to complete revocation. We delete the retained token and retry records as soon as revocation succeeds, or no later than 30 days after account deletion, whichever comes first. We delete unusable credentials sooner if revocation cannot be completed. Encrypted technical response records used to diagnose failures are kept for no more than 24 hours.

Necessary anonymised moderation evidence or data under a legal hold may be kept separately, with periodic review, for as long as the relevant safety or legal reason continues.

Export, withdrawal and deletion

Settings lets you download a machine-readable export, including your recorded consent history. You can then withdraw health-data consent by choosing Withdraw consent & delete. This deletes your account and live health and fitness data without a fee. Withdrawal does not make processing before withdrawal unlawful. Minimal billing, dispute or legal records remain only where another lawful basis requires them. Restricted backup retention is described above.

TRENBot sharing consent is separate. Settings lets you disconnect a channel in one step, which blocks new Paggered reads. Messages already posted in Discord remain subject to that platform and cannot be recalled by Paggered.

Your rights

Depending on the circumstances, you can ask for access, correction, deletion, restriction, objection and portability, and can withdraw consent at any time. Self-service export and deletion are in Settings; for anything else contact support@paggered.app. You can complain to the UK Information Commissioner at ico.org.uk.

Age

Paggered is for adults aged 18 and over. We do not knowingly accept accounts from children.

Changes

We will update the date above and tell you before a material change. If a new purpose needs fresh consent, we will ask rather than treating continued use as consent.

See also the Terms and Refunds & cancellation.