Who we are
STRNTH is operated by Next Big Leap Ltd, registered in England and Wales, acting as the data controller. Contact us at info [at] strnthapp [dot] com.
Data we collect
- Account: name, email, password (stored as a secure hash), optional profile details (age, biological sex, bodyweight)
- Training: workouts, sets, reps, weights, HIIT sessions, body measurements, heart rate from paired Bluetooth devices during sessions
- User content: custom exercises, notes and programmes you create
- Identifiers: internal user and device IDs used for sync, subscription, analytics and crash reports
- Purchases: subscription status from Apple or Google. We never see your payment details
- Usage and diagnostics: product analytics events, crash reports and performance data
How we use it
- Run your account and sync your data across devices
- Personalise programming, progress tracking and coaching
- Process subscriptions and restore purchases
- Understand how the app is used and fix bugs
- Respond when you contact us
Feedback form
When you submit our feedback form from the app or the website, we collect the message you write, the category you choose and the optional reply email you supply. The app prefills technical context so we can investigate: app name, app version, build numbers, operating system and version, locale, subscription tier, and the names of any Bluetooth trainer or heart rate device currently paired. We also store your browser user agent and a one-way hash of your IP address for spam triage. We do not collect your name, profile details or training data through this form. You can review every prefilled field in the "What we're sending" disclosure on the form before you submit.
Lawful basis (UK and EU GDPR)
- Contract for your account, training data and subscription
- Legitimate interests for analytics and crash reporting. You can opt out in Settings
- Consent where required
- Legal obligation for records we must keep
Who we share data with
We use a small set of processors. Each receives only what it needs.
- A cloud database and authentication provider (EU-hosted) for your account and training data
- A subscription management service for purchase status
- A product analytics provider (EU-hosted) for usage events
- A crash reporting provider (EU-hosted) for diagnostics
- An AI provider for the optional AI coaching features
- Apple and Google for app distribution and payments
We will provide the full list of named processors on request.
AI features
The AI coach, weekly summaries and related features send your question and relevant training context to an external AI provider. We do not include your name, email or account identifiers. The provider does not use API data to train their models.
International transfers
We keep data in the EU where we can. Where data leaves the UK or EU, we rely on one of the approved transfer mechanisms: the UK International Data Transfer Addendum, the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework when transferring to certified US providers.
Retention
We keep your data while your account is active. Delete your account in Settings or email us and we will remove your personal data within 30 days. Backups are overwritten on a normal rotation.
Your rights
Under UK and EU GDPR you can access, correct, delete, export, restrict or object to our processing of your data, and withdraw consent where it applies. To exercise any of these, use our feedback form or write to us at info [at] strnthapp [dot] com. You can also complain to the ICO.
Children
STRNTH is rated 17+ and not intended for children under 13. If you believe a child has given us their data, email us and we will remove it.
Security
Data is encrypted in transit. Passwords are stored only as secure hashes. Your training data is only accessible from your account.
Changes
We will update this page and change the effective date if we make material changes.
Contact
Use our feedback form or write to us at info [at] strnthapp [dot] com.