Privacy Policy

This is an English translation of the Arabic policy. If the two differ, the Arabic version applies.

Version: 2026-10-27-social-auth · Effective date: from the date the app is published in the stores

1. Who we are

The iPeak app is operated by BoHoBi Studio, which is the party responsible for your personal data (the controller) under the Personal Data Protection Law of the Kingdom of Saudi Arabia.

• Legal name of the entity: BoHoBi Studio (individual developer)
• Address: Al Khobar, Kingdom of Saudi Arabia
• Privacy contact email: [email protected]

2. Summary

• No ads, no third-party analytics or tracking tools, and we do not sell or rent your data.
• Your body, health and plan data are private to you and do not appear in the community. Only what you post yourself is visible to others.
• You can download a copy of your data and delete your account from inside the app at any time.

3. Using the app as a guest

Without an account, your data (workouts, plans, preferences and weight log) stays on your device only and is not sent to our servers. Deleting the app deletes it.

4. Data we collect when you create an account

A. Account data

• Name and email address; a password only when you choose email sign-in (stored with a hash function, never as plain text).
• Apple or Google sign-in is optional. We receive your provider identifier and the name and email you allow the provider to share, which may be an Apple private relay address. We never receive your Apple or Google password or request your contacts. Identity tokens are verified without being retained in our server database; Apple authorization grants are encrypted so we can revoke them when you delete your account.
• Login sessions: a session token in a secure (httpOnly) cookie; the IP address and device/browser type (User-Agent) are stored with the session for security purposes.
• The version of the Terms and Privacy Policy you accepted and the time you accepted them, and the time you confirmed that you are 13 years of age or older (no date of birth).
• If your account is suspended: the suspension record (the reason, duration, time, who carried it out and when it was lifted) for moderation purposes; it is deleted with the account.

Each account has a unique public username for discovery. You can change it in Edit profile. Previous usernames are reserved for their owner for 30 days to prevent impersonation; reservations are deleted with the account.

B. Training data and preferences (synced with your account)

• Your log of exercises, workouts, sets, weights and reps, as well as plans, drafts and saved items.
• Optional survey answers: age, sex, height, weight, activity level, goal, level, workout location, equipment, days and duration.
• Safety questions: whether you are pregnant or breastfeeding, and whether you have an injury or health limitation. This is sensitive health data; we use it only to decide whether the app suggests a plan or refers you to a professional, and we do not share it with anyone.
• Your body-weight log and optional body measurements (circumferences and body-fat percentage), your notes on exercises, and your settings for the timer, reminders, weight unit and health-app connection.
• A record of medals earned and workout receipts (the date each workout was first received) to prevent medal fraud.

C. Community content

• Posts, comments, likes, saved items, follows, follow requests and blocks, as well as your bio, avatar and private-account setting.
• Uploaded photos: we re-encode them on the server to WebP and strip all metadata from them (such as EXIF, geolocation and camera type) before storing them.
• Reports: the identity of the reporter, the reason, the note, a snapshot of the text of the reported content at the time of the report, and the moderator's decision.
• Private messages: the text of the messages (up to 1000 characters, no images), their time, the sender and the recipient, the conversation state for each participant (accepted or a request, read up to where, and deleted on their side), and your “Who can message me” setting. They are stored on our server in order to deliver them, and they are not end-to-end encrypted: they are protected by encrypted transport (HTTPS) and by server access controls. Moderators do not read conversations; if either participant reports a message, the moderator sees a snapshot of the text of that message alone with the report, and the snapshot remains even if the message is later unsent. The sender of a message request does not know whether you have read it, and we do not show read receipts.

D. Health app (Apple Health / Health Connect) — optional

• Only with your permission: we write workout sessions (type, time and, for cardio, distance) and body weight to the health app.
• We read body-weight measurements only. Imported weights are added to your weight log in the app and, if you are signed in, are synced with your account on our server like any weight you enter manually.
• We do not use health-app data for advertising and do not share it with any party.

E. Notifications

GPS tracking for runs, walks and rides uses your location only while tracking and on your device (it continues with the screen locked until you tap Finish, and Android shows an ongoing notification while tracking): we compute distance and pace from it and save only the activity (duration and distance). The route itself is not saved or sent to our servers.

Push notifications (reactions, comments, follows, messages, games) are optional and set in Settings: we store your device token and language only to deliver them through Apple (APNs) or Google (Firebase Cloud Messaging). A notification carries the other person's name and the event type; messages show “New message from …” without the text. The token is deleted when you turn them off, sign out or delete your account.

If you turn on "Import my workouts", we read each workout's type, time, duration and distance (and calories on iPhone) from the last 30 days, from Apple Health on iPhone or Health Connect on Android and add them to your iPeak activities. This workout import does not read heart rate. If you separately enable the Readiness card, we read average heart-rate variability and resting heart rate for the last day and 30 days. These readings are processed on your phone and are not sent to our servers. You can turn these options off in settings.

If you turn on "Write water and food to Health", we write your daily totals only: water, and calories and protein of food you marked as eaten. We don't read them from the Health app.

Email: we email you if your account is signed in on a new device (at most once a day, with no device or location details). If you turn on the "we miss you" email, we send one reminder after two weeks without a workout, at most once a month; turn it off in reminder settings.

Period tracking (optional): if you use the period tool, we store only the start and end dates of your periods with your data, and they sync with your account like the rest of your log. They're never shown in the community or to anyone, and you can delete them in the tool or by deleting your account.

"Need players" requests (the sport, time, place you type and your note) are visible to your followers, or to any user who opens the request if your account is public, and everyone can see who joined. They are deleted from our servers a month after the game time, or whenever you cancel them.

Stories (a photo or short text) are visible to your followers, or to any user if your account is public, and they and their photo are deleted from our servers automatically after 24 hours or whenever you delete them. We keep who viewed your story to show only you, and it is deleted with the story.

Voice notes on exercises are recorded and stored on your device only when you tap record (with microphone permission); they are not uploaded to our servers or copied to your account, and deleting the app or clearing your data deletes them.

Workout reminders (including the two-day absence and water reminders, if you turn them on) and the rest timer are local notifications scheduled on your device only; we do not use push notifications from the server. Community notifications inside the app are derived from interactions, and we store which ones you have read.

F. Technical logs

Server error logs contain only the generic route and the error type, with no personal data. We use the IP address temporarily in memory to rate-limit requests and prevent abuse.

Crash reports: if an error occurs in the app, it sends our server a technical description of it (the error text and its location in the code, the platform type: iPhone, Android or web, the version number, and the screen), without your name, account or IP address, so that we can fix it. We remove any email addresses or long numbers from them, keep only the latest 500, and do not share them with any party.

The same way: the name of a feature you used (like "Meals" or "Interval timer") at most once a day, and the app launch time rounded to a quarter second with only the platform (iPhone/Android/web). Aggregated daily counts with no identifier.

First-use measurement: the app sends, only once, the name of a step you reached for the first time (first opened the app, reached each survey question, finished the survey, applied a plan, finished a first workout, added a first meal), and if you come back a day, a week or a month after first opening it we send that once with only the day of first opening. We keep only a daily count per step, without your name, account, a device identifier or IP address, so we can see where people get stuck and improve the app. We do not link these counts to anyone and do not share them with any party.

Account activity: for account holders only, we use the sign-up date, the time the app was last opened, the last sync, the number of logged workouts, the platform and the app version, and the app owner can see them with the account name and email, so we can learn who stopped using the app and when, and improve it. We do not share them with any party, and they are deleted with the account. Guest use is not covered by this.

5. What others see

• Your display name and avatar in the community. Your email address is not shown to anyone.
• What you post: the text, the photo and the workout card (title, exercise names, muscles and counts) or the medal. With a private account, only your accepted followers can see your posts and bio.
• Friends leaderboard: your accepted followers see only your aggregated weekly numbers (number of workouts, active days and challenge completion) with your name and photo, without workout details.
• Private messages are visible only to the two participants in the conversation. “Unsend” erases the text from the server and shows “Message deleted” to both participants, and “Delete conversation” hides it on your side only (it is deleted from the server if both participants delete it). A block in either direction prevents messaging and hides the conversation.
• Never shown: survey answers, health and safety, weight, plan, detailed history.
• Shareable “Story” images are created on your device and are sent only if you share them yourself.

6. Why we use your data (legal basis)

• Providing the service you requested: the account, syncing, plans and the community.
• Your explicit consent: optional health data, health-app connection and notifications. You can withdraw it by turning off the connection or notifications in the app or device settings, or by resetting or deleting your account.
• Security, abuse prevention and content moderation, and legal obligations.

We do not make automated decisions that have a legal effect on you. The plan suggestion is a simple rule, and it refers you to a professional in case of pregnancy, injury or an unconfirmed condition.

7. Who we share data with

• We do not sell data or share it for marketing.
• Our hosting provider is Oracle Cloud Infrastructure, in Jeddah, Saudi Arabia.
• Email: verification and password-recovery messages are delivered through Zoho Mail (SMTP), which receives your address and message content to deliver them.
• iOS Plus payments are processed by Apple. We send a random app-account token and verify signed transactions and subscription status with Apple. We retain transaction, product, environment, renewal, expiry and refund metadata, never card details.
• Food barcodes (optional): when you scan a product barcode or type its number, our server queries the open Open Food Facts database with the barcode number only, without your name, account or any data about you. The camera image is read on your device and is neither stored nor sent.
• Official authorities where there is a legal obligation.

8. Storage location and transfer outside the Kingdom

Account data is hosted in Jeddah, Saudi Arabia. Third-party authentication and email services may process data outside Saudi Arabia as described above, subject to applicable safeguards.

9. Retention period and deletion

• We keep account data for as long as the account exists. Deletion removes provider links and revokes and deletes encrypted Apple authorization grants.
• When you delete your account from the app (with a password for password accounts, or a recent sign-in for social-only accounts, plus explicit confirmation), we immediately delete from the server: the account and sessions; training data, preferences, the weight log and measurements; medals and receipts; your posts, comments, likes, follows and blocks; all of your private conversations (so they also disappear for the other participant); your uploaded photos; the reports you filed or that were filed against your content; and the local subscription link. Unlinked Apple transaction identifiers and an opaque purchase token may remain solely to prevent replay or reassignment to another account; they no longer reference your deleted iPeak user.
• Other people's reports on comments that were under your posts are closed and their text is erased; their record remains without content.
• Downloading your data includes the messages you sent (not other people's messages).
• “Reset” erases your private data and medals, and does not delete your shared posts unless you request that.
• Backups: a copy of your data may remain in backups protected by restricted access controls for a maximum of 30 days, after which it is deleted.
• If you have a record with the payment provider, the provider keeps it in accordance with its own policies and legal obligations.

10. Your rights

Under the Personal Data Protection Law, you have the right to: be informed of how your data is processed, access it and obtain a copy of it (“Download my data” exports a JSON file), correct it, request its destruction (account deletion), and withdraw your consent. For other requests or complaints, write to us at the email address above. You also have the right to file a complaint with the competent authority (the Saudi Data and Artificial Intelligence Authority, “SDAIA”).

11. Cookies

We use essential cookies for sessions and security checks, including optional two-factor authentication. No advertising or analytics cookies. The website page does not use cookies.

12. Security

We use an encrypted connection (HTTPS), password hashing and limited access permissions. No system is completely secure; notify us immediately of any suspected issue.

13. Children and age

The app is not directed at anyone under 13 years of age, and we do not knowingly collect their data. If you are 13 to 17 (under 18), use the app with the consent and supervision of your parent or guardian. Personalized plans and calculators are for adults aged 18 to 80 only.

14. Changes

When there is a material change, we will update the version and date above and notify you inside the app, and we may ask for your consent again.