Privacy notice — Ghisa Pro app

The Ghisa Pro app, for people who train.

Italiano · English · Español · Français · Deutsch · Nederlands · Polski · Português (Brasil) · Português (Portugal) · 日本語

This page explains what data the Ghisa Pro app collects, why, where it ends up and what you can do about it. It's written under articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). It applies to the browser app (app.ghisapro.com) and to the apps for iPhone (App Store) and Android (Google Play). Ads, subscriptions, notifications and the connection with Apple Health and Health Connect exist only in the iPhone and Android apps.

1. Who processes your data

The data controller is Viola Fabrizio, sole proprietorship, VAT number (partita IVA) 03959520929, with registered office at Via Petrarca 24/E1, 09017 Sant'Antioco (SU). Contact: info@ghisapro.com.

There is no data protection officer (DPO): none of the cases in article 37 applies.

2. Who can use the app

To use Ghisa Pro you must be at least 16 years old. The app asks for your date of birth and, under 16, doesn't let sign-up continue. It first lets you correct the date, if it's wrong; when you confirm it's right, the account just created with your email address is deleted, and what you had entered isn't saved. If you close the app before confirming, only the account remains on our server, that is the email address, with no other data: to have it deleted write to info@ghisapro.com from the same address (as explained on the Deleting your account page), or reopen the app and confirm the date. If we find an account belonging to a younger person, we close it and delete the data. If you're a parent and think your child has signed up, write to us.

3. What we collect, why, and on what basis

What is mandatory. To sign up you need email, nickname, date of birth, sex, height, weight, area and the consent in paragraph 4: without them, sign-up isn't completed and the app can't be used. Everything else (photo, measurements, body fat percentage, friends, public programs, gyms, notifications) you add yourself, if you want.

4. Health data and consent

Weight, measurements and body composition, taken together, say something about your physical condition: the law treats them as data concerning health (art. 9 GDPR), the most protected category. We can process them only with your explicit consent, and the consent refers only to these: that's what the checkbox says. Sex, age, height, activity level and phase are also used for the calculations, but we process them to provide the service you ask for (“Nutrition and activity” row in paragraph 3).

Ghisa Pro is built around this data: energy needs, suggested weights, charts and progress all use it. That's why consent is required to use the app: right after “About you” you'll find a dialog with a summary of this notice and an unticked checkbox for you to tick. Without the tick you can't go on, and the weight you enter in “About you” is saved only after consent. We record the version of the consent text (the one in the checkbox), the date and the time on our server, in a consent register kept separate from your training data (which you can edit or import from a file instead): it's the proof that consent exists.

You can withdraw consent whenever you want. Since the app doesn't work without that data, you withdraw it by deleting your account from the app (Settings → Account → “Delete account and data”): the data is deleted from the server. Withdrawal doesn't make what was done before unlawful.

Nobody else sees this data: not friends, not the gym, not other users. And it never goes to Google for ads, to RevenueCat or to the stores for subscriptions, or into the text of notifications.

5. Friends

A friend can be added only with your link or your QR code. A linked friend sees your nickname, your photo and, if you choose to share it, one of your programs: names of the program and workouts, exercises, sets, reps, rest times, the instructions written in the program (suggested weight, note, intensity technique) and, if the program contains exercises you created, their name, muscle group, equipment and description. They don't see the weights you actually lift, your history, your max lifts or your body data. The note is free text: only write what you want them to read.

Nickname and profile photo aren't in a list that anyone can browse: they're seen by the friends you link, the gyms you give access to and, if you publish a program, whoever opens it. If you don't add a photo, a default drawing appears in its place, male or female according to the sex you entered in “About you”: whoever sees your nickname also sees that drawing. Friends can't be searched by name: you can only link with a link or a QR code. None of them sees your city.

The invite. If you send the invite link with WhatsApp or another program, the app opens that program with the text already written (the link) and you do the sending: from there that service's rules apply (for WhatsApp, Meta's privacy policy). The invite is valid for 24 hours and is deleted when it's used, when you create another one or when you delete your account.

6. Public programs

You can publish one program at a time in the public list. Publishing is always your choice.

What becomes public, for all registered users of the app: the program's name, the workouts with exercises, sets, reps, rest times, notes and intensity techniques, the exercises you created that the program uses (name, muscle group, equipment, description), the language, your nickname and your photo, the number of votes, the average star rating and the number of downloads. The published program is a snapshot: if you later edit your program, the public one doesn't change.

Votes and downloads. Votes (from 1 to 4 stars) and saves are linked to your account, but others only see them as counts: nobody sees who voted or saved.

Reports. You can report a program you consider illegal or contrary to the Terms of use. A nickname is needed to report. We record who reports, which program, the reason and the date; if you report the same program again, the report is updated. The report isn't shown to the author with your name. When we decide, the outcome (program withdrawn or report rejected), the reason and the date are added to the report, in both cases. Reports are deleted automatically 24 months after their date, or earlier if the program is deleted.

The decision. Every report is examined by a person. If we withdraw a program, we record the date and the reason and write it to the author, at their account's email address. To those who reported from the app, the app can't reply yet today: the decision stays recorded and we'll tell you if you write to us at info@ghisapro.com indicating the program; if you report by email, we reply by email.

How long it stays. The program stays public until you remove it (“Remove from the list”), until you publish another one or until we withdraw it for moderation. A withdrawn program is no longer visible to anyone, but we keep it with its votes and downloads for 24 months from withdrawal, because they're used for leaderboards and recognitions for authors; then it's deleted by an automatic check that runs every night. If you delete your account, your public programs, including withdrawn ones, are deleted immediately.

6b. Career, Ghisa Points and leaderboard

The app keeps a career rank (Beginner, Consistent, Pro, Legend) and a points count, the Ghisa Points (GP). To calculate them the server records, for each workout you close, the date, which workout it was, how many exercises and how many sets it had (not the weights); it records the time of your first open of the day and of the later opens that earn points; and it keeps a rewards log (action, points, date). Downloads and votes your public program receives give you points, counted as numbers. The rank is calculated from the weeks in which you trained on at least two different days, not from how much you lift: it's permanent and says nothing about your health.

What others see. Your rank appears as a label next to your nickname wherever the nickname is already visible (public programs, friends). The leaderboard (week, month, year, all time) shows all registered users the top ten with nickname, profile photo, rank and points for the period; tapping a nickname opens a box with nickname, photo, rank, points for the year and in total, position for the year and the published program, if there is one. Email, body data, weights or workouts never appear. If you don't want to appear, just don't choose a nickname: without a nickname you don't enter the leaderboard.

Medals of the year. On 1 January the top three on the leaderboard of the year just ended receive a medal (gold, silver, bronze), with no economic value. The medal, nickname, profile photo, rank and points for the year of the three winners stay visible to all registered users (on the leaderboard, on the home page and next to the nickname) for the whole following year; the public box keeps the list of years in which you won. The server awards it by itself; the administrator can only revoke it for abuse, with the reason recorded.

Abuse. Points are calculated by the server with limits per day and per person, written in the guide inside the app (downloads and votes, for example, count once per person). If we detect points obtained by cheating we may reverse them, suspend points (you don't accumulate any and don't appear on the leaderboard) or, in serious cases, block the account: every action is recorded with the reason, and you can see it in the Points breakdown. Legal basis: the contract (art. 6(1)(b)) for the operation of the career and the leaderboard, which are part of the app; legitimate interest (art. 6(1)(f)) for checks against abuse.

7. Gyms

If your gym uses the Ghisa Pro panel, you can link to it. There are two separate steps.

Giving the gym access (from the app, with your consent). From that moment the gym sees your nickname, your photo, the date of consent, how many programs you have from it and the name of the one you share with it; it receives a dated notice when you give or withdraw consent, when you link to your membership with the personal link or unlink from it, and when you send back or delete a program; it sees the bookings you make for its classes (if you cancel, the booking disappears from its list) and the programs you send back to it (only the structure, not what you did). It can send you programs and notices about classes. Notices that reach the gym are deleted automatically 90 days after their date; the gym can delete the ones already read earlier, and they disappear immediately if you delete your account. Notices the gym sends you about classes (class moved or cancelled, booking made or removed by the gym) are deleted automatically after 12 months.

Being linked to your membership (with the personal link the gym gives you). The gym knows that your app account matches the person registered in its member records. In return, in the app you see your data that the gym keeps: membership plans and services, installments (amounts, due dates, whether they're paid), medical certificate handed in and its expiry date, classes and bookings, with the first name and surname of the trainer who teaches the class, wrote the program or supports you on the gym floor, and, if the gym uses it, your entry pass with the QR code. This data is processed by the gym as controller; in the app it reaches only you.

The gym never receives: the weights you lift, your history, max lifts, weight, measurements, body fat percentage, nutrition data, your date of birth or your email. The limit is enforced by the server, not by the app.

You can withdraw access and unlink from the app whenever you want. Programs received remain yours. The data the gym keeps in its member records stays with the gym: for that, contact the gym.

7b. The plan, ads and subscriptions

This part applies only to the iPhone (App Store) and Android (Google Play) apps. The browser app has no ads and no purchases.

The trial. For the first 30 days from sign-up you use everything with no ads (people who were already registered when the plans started get 30 days from that day). During the trial the app doesn't request ads and doesn't ask you for consent to ads. The trial isn't a subscription: no card is needed and no charge starts at the end.

The free plan with ads. After the trial, if you don't have a subscription or a gift, the app occasionally shows a full-screen ad when you enter a section, with frequency limits: never during a workout, with a timer running, in Settings or with a dialog open. Ads are chosen and shown by Google AdMob.

• What Google receives. When it's about to show an ad, the AdMob library in the app sends Google the data needed to choose, show and count it: the IP address (from which Google estimates the area), technical data about the device and the app, interactions with the ad (seen, tapped, closed), the library's diagnostic data and, if you allow it, the device's advertising identifier (the IDFA on iPhone, the advertising ID on Android). We give Google nothing else: not the email, not the nickname, not your account's identifier, not training or health data.
• Consent. If you're at least 18, before the first ad Google's consent dialog appears, which is mandatory in Europe. There you decide whether to accept personalized ads (chosen based on your interests) and the use of device data by Google and by the advertising partners the dialog lists. You can refuse: in that case the app asks Google for non-personalized ads, and the free plan stays the same. Refusing costs nothing. On iPhone, after that dialog, the system also asks whether to allow tracking (ATT): if you say no, the IDFA isn't given to anyone.
• If you're under 18 (or the app doesn't know your age), the app doesn't show you the consent dialog, doesn't ask for tracking on iPhone, tells Google you're under the age of consent and requests only non-personalized ads.
• Who decides. For ads Google is an independent controller (for European data, Google Ireland Limited, Dublin) and uses the data according to its own policy: How Google uses information from sites or apps that use our services. Personalized ads and the use of the advertising identifier are based on your consent (art. 6(1)(a) GDPR and art. 122 of the Italian Privacy Code). Our part — deciding when to show an ad, with the limits described above, counting the ads on your device — is part of the contract for the free plan (art. 6(1)(b)).
• How to change your mind. Whenever you want: Settings → Your plan → “Ad privacy” reopens Google's dialog, and there you withdraw or change your consent (the button is there as long as you're on the plan with ads: with the trial, a subscription or a gift the app doesn't request ads). On iPhone tracking can also be turned off from Settings → Privacy & Security → Tracking; on Android the advertising ID can be reset or deleted from the phone's settings, under ads. Withdrawal applies to the future.

Subscriptions. Two subscriptions remove ads, Monthly and Yearly, at the price shown in the store before purchase. They can only be bought inside the app, with the payment system of the App Store (on iPhone) or Google Play (on Android). The payment is collected by the store, as an independent controller, according to its own policy: we never see the card, the cardholder's name or the billing address, and the purchase receipt is sent to you by the store.

• RevenueCat (RevenueCat, Inc., United States) is our technical intermediary with the stores and works on our behalf, as processor (art. 28). Its library in the app only activates when you tap “Choose…” or “Restore purchases”. It receives: your account's technical identifier (a string of letters and digits, not the email), Apple's purchase receipt or Google's purchase token, which subscription, the dates and the status (active, cancelled, renewed, expired, refunded), the device type and operating system, the last time you opened the app and, like any online service, the IP address of the request. From then on it receives notices from the store about renewals, cancellations and refunds and passes them on to our server.
• Our server keeps only which subscription you have, until when it's paid, which store it comes from and a log of changes (purchase, renewal, cancellation, expiry, with the date). With these it decides your plan, which applies on all your devices.
• Health data and training data never go to RevenueCat, or to the stores.
• Legal basis: the subscription contract (art. 6(1)(b)). The subscription rules (price, renewal, cancellation, refunds, withdrawal) are in the Terms of use, and you'll also find the essential points on the “Your plan” page before buying.

The gift. We may give you the app as a gift for a period or with no end date: no ads and nothing to pay while it lasts. The server keeps the dates of the gift and the log of changes. Legal basis: the contract.

7c. Notifications

This part applies only to the iPhone and Android apps: no notifications arrive in the browser. The app sends them only if you allow them. It first asks with its own dialog, then the phone asks you for permission; if you say no, the app works just the same. You choose them one by one in Settings → Notifications, and the choices apply to all your devices.

Notifications prepared by the phone. End of rest, the reminder if you haven't trained for a few days (after the number of days you choose), the weekly weigh-in and the reminder one hour before a booked class are scheduled by the app on the phone, with the data it already has. Our server doesn't send them and doesn't know when they go off.

Notifications sent by our server, divided into groups:

• General: the trial, the gift or the cancelled subscription about to end, and our service messages (an app version to update, a change in price or terms). They contain no promotions. They concern the service you use, so they can only be turned off by turning off all notifications.
• Gym: only from the gym you've given access to. Classes moved or cancelled, bookings made or removed by the gym, a new or updated program; and, if you're also linked to your membership, from the data the gym keeps about you: the membership plan or service about to expire, with its name and date; and a notice when the medical certificate is about to expire or an installment is due. In these two cases the notification only says that you have a document or a payment due: which one, and the amount, you see by opening the app.
• Friends and leaderboard: a friend who accepts your invite, a program a friend shares with you, the votes and downloads of your public program in the last 24 hours, the medal of the year.
• News and offers: new features and offers on subscriptions. Off by default: they arrive only if you turn them on (see “On what basis”).

The server prepares them only for people with at least one registered phone, sends a limited number per day (general ones excluded) and the same notification doesn't arrive twice. A notification that arrives with the app open also appears in the bell.

What's needed to send them. When you allow notifications, the Firebase Cloud Messaging (Google) library in the app creates an installation identifier and receives a phone code (token), which the app sends to our server together with the type of system (iPhone or Android). The code is only used to deliver notifications to that phone; we keep at most ten per account. If you sign out of the account or delete it, the code is deleted from our server and the app asks Firebase to cancel it: that phone no longer receives the account's notifications.

What Google and Apple receive. For each notification our server sends Firebase the phone code, the title, the text, the group and the app page to open when you tap it. Firebase delivers it: on Android directly, on iPhone through Apple's notification service. They see the title and text too, as with any notification, and these may contain the name of your gym, a class, a program or a membership plan, the date the membership plan expires and a friend's nickname. They never contain your email, weights, weight, measurements or the other health data you keep in the app; for the medical certificate and installments they only say there's a due date, with no amounts and without the word “certificate”. A notification that can't be delivered within two days no longer arrives. Firebase works on our behalf (paragraph 9).

On the phone. Notifications may also appear on the lock screen, depending on the phone's settings. If you don't want others to read their text, hide the preview in the phone's notification settings.

On what basis. General notifications and those about training, the gym and friends are part of the service you use, and you turn the groups on and off yourself: contract, art. 6(1)(b). “News and offers” are promotional communications: we send them only with your consent, art. 6(1)(a) GDPR and art. 130 of the Italian Privacy Code. You give it by turning on the switch and confirming with “I agree”; our server keeps the date and the version of the text you accepted. You withdraw it whenever you want by turning off the same switch, with no consequence for the rest of the app; withdrawal applies to the future, and its date is recorded too. If you change your mind while offline, the choice waits on the phone and reaches the server as soon as you're connected again; until the server has received the consent, news isn't sent. We don't choose who to send it to based on what you do: the same message reaches everyone who has turned it on.

How to turn them off. Settings → Notifications: one switch for all and one per group; turning everything off means nothing arrives on the phone and the bell stays silent. The phone's settings still take precedence over the app (on Android group by group too).

7d. Apple Health and Health Connect

This part applies only to the iPhone and Android apps, and only if you connect the app yourself from Settings → Apple Health (iPhone) or Settings → Health Connect (Android). Without a connection the app doesn't read or write anything there.

What we read. Weigh-ins (weight, day and time) and, for each day, the total calories, protein, carbohydrates and fat eaten, which the scale or apps like YAZIO write to Apple Health or Health Connect. Nothing else: no steps, sleep, heart rate, workouts, cycle or other data. On the first connection we read the weigh-ins from the last year and meals from the last 30 days, if the phone lets you allow it; then, at each read, the last two weeks, because the scale and the other apps also write late.

What we write. Only the weigh-ins you log in Ghisa Pro.

How we use them. Weigh-ins go into the weight chart like those entered by hand (on the same day, the last one counts); meals go into the food log, the boxes on the Today page and the calculation of real energy needs. They're saved in your account and synced like your other data. We use them only for these features: never for advertising, never to profile you, never sold or given to anyone — not to Google AdMob, not to RevenueCat, not to the gym, not to friends or other users — and never in the text of notifications. The app doesn't put them in iCloud. We follow Apple's rules on HealthKit and Google's rules on Health Connect data (“limited use”).

On what basis. This is health data: we read it only with your explicit consent, art. 9(2)(a) GDPR, which you give in the connection dialog by ticking an unticked checkbox; we record the date and version of the text. Then the phone asks you which data to allow and from how long ago.

When. Only with the app open: at launch, when you return to the app, when you pull down the page and with “Refresh now”. Never in the background.

How to stop. In Settings you turn off the connection: the app stops reading and writing, and the date you turned it off is recorded. You can also remove the permissions from the Apple Health or Health Connect settings. Data already received stays in the app until you delete it (one weigh-in, all weigh-ins from Settings → Reset data, one day of the food log) or delete your account. Weigh-ins the app wrote to Apple Health or Health Connect stay there: remove them from those apps.

8. What we don't do

• No analytics or statistics tools, from any provider.
• No advertising in the browser, during the trial, with a subscription or with a gift. On the free plan of the iPhone and Android apps, ads are shown by Google AdMob (paragraph 7b): we never give Google your email, nickname, account identifier, training data or health data.
• No profiling of our own for commercial or advertising purposes. If you consent to personalized ads, advertising profiling is done by Google, as controller, on the data its library collects (paragraph 7b). The app calculates energy needs, weights and progress for you from your data: these calculations are only for you and we don't use them for anything else. No automated decision-making with legal effects on you (art. 22).
• No sale or transfer of your data.
• No promotional notifications without your consent, and no counting of the notifications you open: the server only knows whether the notification service accepted to deliver them.
• No access to contacts or location. Camera, photo library and microphone only when you choose to upload a photo or a video (the profile photo; photos and videos of exercises are uploaded only by whoever curates the catalog): on iPhone the system asks you the first time they're needed, and the microphone is only used for the audio of a video you record; on Android the photo or video is taken or picked by the system app, and Ghisa Pro doesn't ask for these permissions.

9. Our providers

They work on our behalf. Supabase, Cloudflare, Resend and RevenueCat, and Google for notifications (Firebase Cloud Messaging), are processors (art. 28) under a contract that binds them: their data processing agreement (for Firebase, the Firebase Data Processing and Security Terms). Not Google for Drive and Gmail: see below.

Google, plainly. We use Drive and Gmail with a personal Google account, and for that type of account Google doesn't sign a data processing agreement (art. 28): it only offers one with its business services. That's why backup copies leave already encrypted with AES-256 and the key never leaves our devices: Google stores files it can't read. The mail you write to us, on the other hand, is readable on Gmail like any email: don't write health data to us. It's something we intend to regularize (with Google's business service and its agreement, or with another provider); when that happens, we'll update this page.

Apple, on iPhone, delivers notifications with its notification service (Apple Push Notification service), which is part of the iPhone's system: Firebase passes it the phone code, the title and the text of the notification, and Apple processes them according to its own rules.

Independent controllers, each with its own privacy policy, are instead: Google, for AdMob ads on the free plan of the store apps (paragraph 7b); Apple and Google, as stores, for subscription payments.

They come into play only if you choose, and according to their own policies: Google or Apple, if you sign in with their account (when these options are active); YouTube, when you tap “Watch video” on an exercise: before the video loads the app warns you that YouTube (Google) will open, which may save data on your device; if you confirm, the video opens from youtube-nocookie.com and from that moment Google's rules apply. Until you confirm, nothing is sent. WhatsApp or your email program, if you use them to send an invite: the app opens them with the text already written, and you do the sending.

The fonts are hosted on our own servers: no request goes to third parties when you open the app.

10. Transfers outside the European Union

The data is in Europe, but some of the companies that provide our services aren't, and access from outside the European Economic Area (support, maintenance) can't be ruled out. Supabase Pte. Ltd. (Singapore): standard contractual clauses, Decision (EU) 2021/914. Cloudflare, Inc. and Plus Five Five, Inc. (Resend) (United States): certification under the EU-US framework, Decision (EU) 2023/1795, and the standard clauses of their agreements. Google LLC (United States): certification under the EU-US framework; for notifications (Firebase Cloud Messaging) also the standard contractual clauses provided for by Firebase's data processing terms; for Drive and Gmail, as said in paragraph 9, there's no data processing agreement. RevenueCat, Inc. (United States): standard contractual clauses, Decision (EU) 2021/914, provided for by its data processing agreement. For ads the controller of European data is Google Ireland Limited, within the Union; for transfers to Google LLC, in the United States, Google uses certification under the EU-US framework and, where needed, the standard clauses. On iPhone, notifications also pass through Apple's service, with the safeguards Apple applies to its own transfers. We'll send you a copy of the safeguards if you ask.

11. What stays on your device

The app works offline too, so a copy of your data lives on the phone or in the browser: programs, workouts, preferences, the last copies of your data replaced by a sync, photos of exercises already downloaded, stopwatch and timers in progress, the bell's messages, a technical log, and the identifier of the account (with the email in shortened form, for example “ma***@domain”) that the data saved on this device belongs to: if another account signs in, the app doesn't mix its data with this. In the store apps, on the plan with ads, the device also keeps the day's ad count (how many and the time of the last one) and the choices made in Google's consent dialog, which its library saves on the phone. If you allow notifications, in the store apps the device also keeps the phone code for notifications (with the identifier the Firebase library saves there), the mark that the app has already asked whether you want them, the date of the next “if you don't train” reminder, your consent to or withdrawal from “News and offers” not yet received by the server, and the notifications the phone has scheduled (end of rest, reminders, weigh-in, booked classes); if you connect Apple Health or Health Connect, the connection status, the time of the last read and the days of the Apple Health weigh-ins you deleted in the app (so they don't come back); your notification choices are kept with the other preferences and, like those, sync with the server. The bell's messages, the technical log, the ad count and the notifications scheduled by the phone never leave the device. The details are on the Cookies page.

12. How long we keep data

Backup copies are complete, dated files: deleted data stays in copies already taken until those copies are deleted.

13. Your rights

You can ask us to access your data, to correct it, to delete it, to restrict its use, to object to processing based on legitimate interest, and to receive it in a machine-readable format. You can withdraw consent whenever you want.

Some things you can do yourself, from the app:

• Export: Settings → Backup → Export. You get a file with the app's whole archive, including programs received from the gym or saved from friends and from the public list. It doesn't contain the account email, access given to gyms, friendships and the consent register: we'll send you those if you ask.
• Delete the account: Settings → Account → “Delete account and data”. It really deletes from the server, it doesn't deactivate. If you no longer have the app, follow the Deleting your account page. If you're the owner of a gym, the account can't be closed from the app: write to us, because the gym's data has to be exported and closed first. Deleting the account does not cancel a subscription: that's managed by the store and must be cancelled from its settings (from the app: Settings → Your plan → “Manage subscription”).
• Withdraw access from a gym or stop sharing a program: from the gym's and the program's pages.
• Withdraw or change consent to personalized ads: Settings → Your plan → “Ad privacy” (paragraph 7b).
• Turn off notifications or withdraw consent to “News and offers”: Settings → Notifications (paragraph 7c), or from the phone's settings.

For anything else write to info@ghisapro.com: we reply within one month.

Deleting the account does not delete your record in the gym's member records (there the gym is the controller) or the settings left on the device (removed by uninstalling the app or clearing the site data).

You can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Roma, www.garanteprivacy.it, or go to court.

14. How we protect data

Communications are encrypted (HTTPS). Each row of the database can only be read by the user it belongs to, by a rule of the database itself. The app tells the browser the only allowed destinations and the browser blocks the others. Backup copies are encrypted with AES-256. If a breach that puts your rights at risk ever happened, we would tell you, as well as notifying the Italian Data Protection Authority as the law requires.

15. The app is not a medical device

Ghisa Pro is for training and keeping track of your training. It doesn't diagnose, treat or monitor any disease. Before starting a program or changing your diet, talk to a doctor.

16. If this notice changes

We'll point out substantial changes in the app before they take effect; if they concern consent, we'll ask you for it again. Version 1.4 adds language (paragraph 3) and refers to the store for subscription prices; consent on health data doesn't change and you won't be asked for it again. We'll send you previous versions if you ask.

Version 1.6 — 25 October 2026 (replaces 1.5 of 24 October 2026)