Workonaut Privacy Policy
This policy explains what Workonaut ("the App", "we", "us") collects, why, who processes it, and what you can do about it. Workonaut builds and runs training plans. It is a sibling app to Macronaut and uses the same account.
1. Who we are
Workonaut is published by HFP Consulting AB, Sweden, the data controller for the processing described here. Contact: [email protected].
2. Using the App without an account
The training features work without an account. Your plan, workouts, sets, rest timers and goals are then stored only on your device and never leave it.
3. What we collect when you sign in
3.1 Account
Your email address, or the identifier supplied by Google or Apple if you use those sign-in options. Workonaut and Macronaut share one account (a "Naut account"), so signing in with an existing Macronaut account uses that account.
3.2 Training data
Your training plans and their versions, workout sessions, logged sets (exercise, weight, repetitions, effort rating) and personal records. They are synced so they are backed up and can be shown together with your Macronaut data.
3.3 Information you give the AI plan builder
Your goal in your own words, your answers to follow-up questions, training experience, available days, session length, equipment and, if you choose to enter them, injuries or pain in your own words. If you also use Macronaut, your age, height, weight and nutrition goal from your Macronaut profile are added so the plan fits you. This includes information about your health. It is only used to build and change your plan, and only after you accept the AI notice in the App.
3.4 Usage of AI features
For each AI request we record the type of request, the model used, token counts and credits charged, to run the shared credit balance and to prevent abuse.
3.5 What we do not collect
No advertising identifiers, no location, no contacts, and no third-party analytics or advertising SDKs. Goals you set in the calendar stay on your device.
4. Why we process it
To provide the App (contract); to build plans with AI when you ask for it (your explicit consent for health information, which you can withdraw by not using AI features or by deleting your account); and to keep the service secure (legitimate interest).
5. Who processes it for us
Supabase stores account and training data in the EU. Anthropic runs the AI models that build and change plans; requests contain the information in 3.3 but never your name or email, and are not used to train models. Expo delivers app updates. Google and Apple handle sign-in if you choose them, and hCaptcha protects sign-in from abuse. We do not sell your data or share it for advertising.
6. How long we keep it
Until you delete your account. Deleting it removes your account and all associated Workonaut and Macronaut data from our servers immediately.
7. Deleting your account and data
In the App: Profile → Delete account. You can also email [email protected] from the address on your account. Because the account is shared, deletion removes your Macronaut data as well. See how to delete your Workonaut account.
8. Your rights
Under the GDPR you can request access to, correction, export or deletion of your data, object to processing, and complain to the Swedish Authority for Privacy Protection (IMY). Email [email protected].
9. Health and safety
Workonaut gives training suggestions, not medical advice. If you have pain or an injury, talk to a doctor or physiotherapist before training.
10. Children
The App is not directed at children under 16.
11. Changes
If this policy changes materially we will say so in the App before the change takes effect.