Voraz is a training and nutrition app for iPhone and Apple Watch. It is published by Lucas Lopes, an individual developer based in Brazil (“we”, “us”). We decide what happens to the data described here: under the GDPR and Brazil’s LGPD we are its controller. As a small processing agent under ANPD Resolution 2/2022, the controller also acts as data protection officer (encarregado). To reach us about anything on this page, write to support@voraz.app.
This policy covers the Voraz app, its Apple Watch app, widgets and Live Activities, and this website. We wrote it from what the app and our servers actually do, not from what we intend them to do. If you live in Washington, Nevada or another US state with a consumer health data law, also read our Consumer Health Data Privacy Policy.
The short version
- Most of what you log stays on your iPhone. That includes meals and their photos, personal records, drafts and your widgets’ data.
- You sign in with Apple. Your plans, templates, finished workouts and settings are backed up to your account, so a new iPhone gets them back. You can turn this off.
- Health data is only backed up if you turn it on. That covers body measurements, water, Apple Watch heart rate and energy, and your profile answers. It’s off by default, and you can delete it from our servers at any time.
- AI features send data to Anthropic and OpenAI. You agree to this when you create your account, because Voraz’s program, meal and coach features run on them. When you scan a meal or a nutrition label, the photo (and any note you add) is sent to estimate the food. When your program is built, your training answers are sent too. When you talk to the coach, your message goes with a snapshot of your training and nutrition. We don’t keep the photos or the conversations.
- We don’t sell your data. We don’t show ads, track you across apps or websites, or use your data to train AI models.
- You can delete your account in the app. That removes everything we hold about you.
What we collect, and why
Your account
You sign in with Apple, and Voraz needs an account: it builds your program on our servers and ties your subscription and backup to you.
| What | Why |
|---|---|
| A random account ID | To key everything below to you |
| Your Apple ID token subject, and the tokens Apple issues | To sign you in, and to revoke Voraz’s access when you delete your account |
| Your email address, which can be an Apple private relay address if you hide yours | To identify your account and to reply when you contact us |
| Your name, if you let Apple share it the first time you sign in | Account record |
| Sign-in sessions: when each started and expires, plus the IP address and device type it came from | To keep you signed in and to protect your account |
| When you last used the app | Account housekeeping and abuse prevention |
Program and history backup (on by default)
When you’re signed in, Voraz backs up your training so it survives a reinstall or a new phone. You can turn it off in Settings › Backup › Program & History; new changes stop uploading right away.
| What | Detail |
|---|---|
| Plans | Name, icon, whether it’s active, rotation, order, the version of the generator that made it |
| Templates | Name, plan, weekdays, order |
| Template exercises and sets | Exercise, target reps or time, target load or distance, rest, set type, order |
| Finished workouts | Name, start and end time |
| Workout sets | Exercise and its name, set number, set type, target and actual reps, load, time, distance or steps, whether each set was done or skipped, when |
| App settings | Units, language, rest timer, sound and vibration, water quick-add amounts, whether onboarding is finished |
Names you type (“Upper / Lower”, “Push A”) are stored as you wrote them. A workout still in progress is never uploaded.
Health & Activity backup (off until you turn it on)
This is the more sensitive part, so it has its own switch in Settings › Backup › Health & Activity. Before you turn it on, the app shows exactly what it covers. Our servers refuse health uploads from anyone who hasn’t turned it on.
| What | Detail |
|---|---|
| Body measurements | Body weight and body fat over time, with your notes and dates |
| Water | Amounts and times |
| Workout vitals | Average and maximum heart rate, and active energy, measured by Apple Watch during a workout |
| Profile | Birth date, sex, height, current and goal weight, training experience, goals, schedule, equipment, muscle priorities, your bench press starting point, and your goal in your own words |
| Constraints | Injuries and physical limitations you selected |
| Nutrition targets | Daily calories, protein, carbohydrates, fat and water, calculated from your profile |
| Apple Health references | IDs of the Health samples involved, so restoring doesn’t duplicate data back into Health |
What we process but don’t store
Some features send data to our servers to do their job, then return the result and keep nothing.
-
Meal photos and notes. When you scan a meal, the app sends a reduced copy of the photo, which carries no location or camera metadata. If you ask to fix the result, it also sends your note and the current ingredients. Our server passes these to our AI provider, returns the estimate, and keeps neither the photo nor the result. Your meal log lives on your iPhone.
-
Nutrition label photos. If a scanned barcode isn’t in our food database, you can photograph its label. The photo goes to our AI provider to read the values, and is not stored. The values read from it are kept for up to 90 days, labelled with a tag that can’t be traced back to your account, so the next person who scans the product gets them.
-
Barcodes. We look the number up in our food database, then in Open Food Facts and the USDA’s FoodData Central. Only the barcode leaves our server, never your account. The products we find are cached for everyone, with no link to who looked them up.
-
Program answers. To build your program, the app sends your experience, goals, build style, muscle priorities, training days, session length, equipment and injuries. We use injuries and equipment to pick safe, available exercises; they are never sent to our AI provider. The rest goes to it to draft the program. We keep only a record that a program was generated and when, so we can apply limits.
-
Coach messages. When you talk to the coach, the app sends your message, typed or turned into text by your iPhone or by Apple, and any meal photo you attach. It also sends up to 12 earlier messages of the conversation and a snapshot of what the coach can talk about: your profile and nutrition goals, today’s meals, recent days’ totals, water and weigh-ins, your active plan, your next and last workouts, and your strength trend for up to 12 lifts. Our server passes them to our AI provider and streams the reply back. It keeps neither the messages nor the snapshot, only a daily count of messages and AI usage to apply limits. The conversation is stored on your iPhone.
Purchases
Your Gym Pro subscription is sold and billed by Apple. We never see your payment details. RevenueCat manages the subscription for us, using your account ID. From RevenueCat we receive and store the subscription’s status: product, store, whether it’s active and renewing, trial or paid, expiry date, and the latest event.
Technical data
- Server logs. Each request is logged with its time, route, result and duration, and a one-way hash of your account ID. Our logs don’t contain request contents, photos, email addresses or IP addresses. Our host, Cloudflare, also sees the IP address of every connection, as any web host does, and keeps its own request logs briefly.
- Rate limits and AI quota. We count requests per account (per IP address for sign-in) to stop abuse, and count your AI requests and coach messages per day to apply the daily limits.
- This website has no cookies, analytics or trackers.
What stays on your iPhone
Meal logs and meal photos, coach conversations, personal records, training logs, drafts, your monthly report, rest timers and notifications, and the image cache never leave your devices. Neither does whether you gave Voraz access to Apple Health. Widgets and Live Activities show your data on your Home Screen and Lock Screen, from a store on your iPhone that only Voraz can read. Anyone holding your unlocked phone can see them.
Export Data in Settings writes a file with your plans, workouts, sets, records, body measurements and settings. It goes wherever you choose to send it, not to us.
AI processing
Voraz uses the APIs of Anthropic (the maker of Claude) and OpenAI to estimate meals from photos, read nutrition labels, draft training programs and run the coach. Each request goes to Anthropic, or to OpenAI if Anthropic can’t answer it. What’s sent is listed above. It can include health data, such as what you eat, your body weight and your training goals, and it’s processed in the United States.
We ask for your consent before you create your account, in a box you tick yourself. Voraz is built around these features, so you can’t use it without this consent. You can withdraw it at any time by deleting your account in Settings › Account › Delete Account; after that, nothing more is sent to Anthropic or OpenAI.
Both process this data on our behalf. Under their API terms, neither uses it to train its models, and each may keep it for up to 30 days to monitor abuse before deleting it. We never send them your name or email address. Each request carries only a one-way hash of your account ID, so abuse can be traced to one account without the provider learning who you are. AI estimates and coach replies can be wrong, sometimes confidently so; check them before you rely on them.
Apple Health
Voraz asks iOS for permission for each kind of data, and you can change your answer at any time in the Health app.
- On iPhone, Voraz reads body weight, body fat and water, and writes finished workouts, body weight, body fat and water.
- On Apple Watch, it reads heart rate and active energy during a workout, and saves the workout.
Data from Apple Health is never used for advertising or marketing, and never sold or shared with data brokers. It’s uploaded to our servers only through Health & Activity backup, which is off unless you turn it on.
Who processes your data
We share data only with the providers that run Voraz for us, and only what each one needs:
| Provider | What for | What it gets |
|---|---|---|
| Cloudflare | Hosting our servers, database and exercise images | Everything we store, encrypted at rest; connection IP addresses |
| Anthropic | AI meal, label, program and coach features | The data listed under AI processing |
| OpenAI | The same features, when Anthropic can’t answer | The same data |
| RevenueCat | Managing subscriptions | Your account ID and purchase history from Apple |
| Apple | Sign in with Apple, payments, Apple Health | What you share with Apple directly |
| Open Food Facts, USDA FoodData Central | Food lookups | Barcode numbers only |
We don’t sell or rent personal data, and we don’t share it for advertising. We’d disclose data only if the law required it, or to protect people’s safety. If Voraz is ever sold or transferred, this policy and your choices move with it, and we’ll tell you in the app first.
How long we keep it
| Data | Kept |
|---|---|
| Account and backups | Until you delete your account |
| Health & Activity backup | Until you delete it in Settings or delete your account |
| Workouts and plans you delete on your iPhone | Marked deleted in the backup at once; their contents are erased when you delete your account |
| Meal and label photos, notes, coach messages, AI results | Not stored |
| Nutrition label values | Up to 90 days, not linked to you |
| AI request and coach message counts | The current day |
| Program generation records | Until you delete your account |
| What you agreed to at sign-up: the documents version, the boxes you ticked, and when | Until you delete your account |
| Subscription status | Until you delete your account; Apple and RevenueCat keep purchase records as billing and tax law requires |
| Server logs | A short period for troubleshooting and security |
| Database backups | Our provider keeps automatic point-in-time backups. Something deleted can remain in them, unused, for up to 30 days, until they expire |
Security
Data travels over encrypted connections, and Cloudflare encrypts it at rest. Every stored row is keyed to your account, and access is restricted to what running Voraz requires. Your backup is not end-to-end encrypted: we could technically read it. We’d rather tell you plainly than imply otherwise.
If a security incident could put you at risk or cause you harm, we’ll contain it, notify you and the authorities that the law requires (in Brazil, the ANPD, under Resolution 15/2024), keep a record of it, and fix what caused it. To report a security problem, email support@voraz.app with “Security” in the subject.
Legal bases
| Purpose | Brazil (LGPD) | EU and UK (GDPR) |
|---|---|---|
| Your account, program and history backup, and subscription | Performing our contract, art. 7, V | Contract, art. 6(1)(b) |
| Health & Activity backup | Specific consent, art. 11, I | Explicit consent, art. 9(2)(a) |
| AI features, and sending that data to the United States | Specific consent, arts. 11, I and 33, VIII | Explicit consent, arts. 9(2)(a) and 49(1)(a) |
| Using your injuries and equipment to choose exercises | Specific consent, art. 11, I, given at sign-up with the AI consent | Explicit consent, art. 9(2)(a) |
| Barcode lookups and shared label values | Performing our contract, art. 7, V | Contract, art. 6(1)(b) |
| Security, abuse prevention and server logs | Legitimate interest, art. 7, IX | Legitimate interests, art. 6(1)(f) |
| Billing and tax records | Legal obligation, art. 7, II | Legal obligation, art. 6(1)(c) |
When we rely on consent, we record which version of the disclosure you saw and when you agreed.
Your choices and rights
Wherever you live, you can:
- Pause a backup. Turn off either backup in Settings. New uploads stop; what’s stored stays, so turning it back on picks up where you left off.
- Delete your health data. Settings › Backup › Health & Activity › Delete health data from our servers removes your body measurements, water, vitals and profile answers, and turns health backup off. Your workouts and plans aren’t affected.
- Delete your account. Settings › Account › Delete Account erases your account and everything above, and asks Apple to revoke Voraz’s access to your Apple Account. Data on your iPhone stays until you delete the app. Deleting your account doesn’t cancel your subscription: cancel it in the App Store.
- Get a copy, or a correction. Use Export Data in the app, or email us for a copy of everything our servers hold about you. Most of it you can correct in the app; for anything else, email us.
- Withdraw consent. Turn off health backup in Settings or decline Apple Health at any time. To withdraw your consent to AI processing, delete your account. Withdrawing doesn’t undo processing that already happened.
Email support@voraz.app for anything the app doesn’t do itself. We’ll answer within 30 days, sooner where the law requires it, and may ask you to confirm the request from the email on your account. We won’t treat you differently for exercising a right.
United States
We don’t sell or share personal information as California and other state laws define those terms. We don’t use or disclose sensitive personal information except to provide the service you asked for. If your state gives you rights to know, correct, delete or appeal, use the contact above. If we turn down a request, you can appeal by replying to our answer. Health-related data is covered in more detail in our Consumer Health Data Privacy Policy.
European Union and United Kingdom
Our legal bases are in the table above. You can object to processing based on legitimate interests, and you can complain to your data protection authority.
Brazil
Under the LGPD (Law 13.709/2018) you can confirm and access your data, correct it, have it anonymised, blocked or deleted, port it, learn who it’s shared with, and withdraw consent. You can also object to processing based on legitimate interest. Health data is sensitive data, and we process it only on the bases in the table above. We answer requests within 15 days, and you can also complain to the ANPD at gov.br/anpd. Our contact for data protection matters is support@voraz.app.
International transfers
Our providers are based in the United States and run infrastructure around the world, so your data may be processed outside your country. Data sent to Anthropic or OpenAI goes to the United States on the basis of your specific consent (LGPD art. 33, VIII). For the rest, we rely on our providers’ contractual data protection commitments, including standard contractual clauses where the law requires them (LGPD art. 33, II).
Children and teens
Voraz is for adults aged 18 and over, and isn’t directed at children or teens. We don’t knowingly collect data from anyone under 18. If you think someone under 18 has given us data, email us and we’ll close the account and delete it.
Changes
If we change what we collect or how we use it, we’ll update this page and its date. If the change is material, we’ll tell you in the app before it takes effect, and ask for your consent again where the law requires it.
Contact
Lucas Lopes (Voraz) · support@voraz.app