Privacy Policy
Last updated 5 November 2026
The short version
- Your training, food, body measurements and photos are stored on your iPhone. You don't need an account to use Volot.
- Apple Health data is read on your phone and never leaves it, with one exception you switch on per post: a run's average heart rate.
- Data leaves your phone only when you use a feature that needs it: social, AI estimates and meal plans (you're asked first), the Volot API (you switch it on), Strava (you connect it), food search.
- No ads and no tracking. No analytics or crash-reporting tools in the app. This website sets no cookies and only counts visits.
- Questions or requests: privacy@volot.app.
Who we are
Volot and volot.app are made by Radov Studio, run by Andrej Radovanović, Serbia (“we”). We decide how the data described here is used. Contact: privacy@volot.app.
This website and the waitlist
When you join the waitlist we store:
- Your email address, to send you an email when Volot is available.
- Your optional answers: what you train, what you track with today, and your feature idea. We use them to decide what to build.
- Where you came from (for example a link with
?ref=), to know which links work. - A one-way hash of your IP address and the time, only to stop spam (at most 10 sign-ups an hour from one address). We can't turn the hash back into your address.
Legal basis: your consent, which you give by joining. You can take it back at any time by writing to privacy@volot.app or replying to any of our emails; we then delete your entry. We keep the waitlist until we've sent the launch email, and delete it no later than 12 months after launch.
The website sets no cookies. It's hosted by Cloudflare, which processes technical data such as IP addresses to deliver and protect the site. We count visits with Cloudflare Web Analytics, which Cloudflare says doesn't collect visitors' personal data: we only see totals such as pages viewed, the site you came from, country and device type, never who you are.
The Volot app
On your iPhone
Routines, workouts, sets, cardio, food, weigh-ins, measurements, mobility, meal plans, settings and progress photos are stored in Volot's database on your phone. Progress photos are re-drawn when saved (no location or other photo metadata), never added to your camera roll and never uploaded. Volot only sees photos you pick in the system photo picker.
Backups and exports (Settings › Your data) are files you save where you choose; Volot doesn't upload them. Like every app's data, Volot's database is also included in your phone's own iCloud or computer backup if you have that on.
Volot news (optional)
When you create an account you can tick “Email me training tips and Volot news”. It's off unless you tick it, and you can change it any time in Settings › Account or with the unsubscribe link in every email. If you tick it, we store that choice and when you made it, and use your sign-in email to send you news about Volot. Legal basis: your consent.
Apple Health
Only with your permission, Volot reads sleep, heart rate variability, resting heart rate, steps, workouts, heart rate, distances, body weight, height, VO2 max, age and sex. It uses them to set how hard today's training should be, adjust leg days after hard cardio, show your cardio and set calorie targets. With your permission it writes the workouts you record in Volot and the nutrition you log.
Health data is read live and kept in memory. It isn't saved in Volot's database or backups, isn't synced, isn't sent to our servers and is never used for advertising or marketing. Turn it off any time in iOS Settings › Health › Data Access & Devices › Volot.
Social (optional, needs an account)
If you sign in, our server stores your email address (to sign you in with a code), username, name, bio, profile photo, who you follow and block, your likes, comments, reports and club activity, and the posts you choose to make: a workout's title, duration, volume, sets, PRs and muscles, a share card or photo; a run's or ride's distance, time and pace, its average heart rate only if you switch that on for the post, and its route map only if you switch that on (simplified, with the first and last 200 m cut off). Each post is visible to everyone, your followers or only you, as you choose.
Never uploaded for social: sets you don't post, Apple Health readiness data, body weight, measurements, progress photos, food, and workouts or routes you don't post.
Legal basis: our contract with you (providing the features you sign up for). Delete your account in Settings › Account: this removes your profile, posts, photos, likes, comments, follows, club data, Volot API copy and keys from our server.
AI photo estimates and meal plans (Volot Pro)
Photo estimates try Apple Intelligence on your phone first, and then nothing leaves the phone. Otherwise, and for meal plans, Volot asks before the first time. If you agree, your photo (resized) and description, or for meal plans your targets, training, budget, country, diet, allergies, likes and dislikes, go through our server to Anthropic (Claude) to get an answer. Our server doesn't store the photo, text or answer. It records that a request happened and how large it was (for the daily limit and to know our costs). Anthropic handles requests under its commercial terms and privacy policy. Legal basis: your consent; switch it off in Settings › Your data.
Volot API (Volot Pro, off until you switch it on)
If you turn it on, a copy of your workouts, cardio summaries, food, body weight, measurements and mobility is kept on our server so you can read it with personal keys you create. It never includes Apple Health data, GPS routes or progress photos. Turning it off deletes the copy and every key at once. Legal basis: your consent.
Food search
When you search for a food or scan a barcode, your search text or the barcode is sent from your phone to Open Food Facts and the USDA FoodData Central database to look it up. Nothing that identifies you is sent with it.
Strava (optional)
If you connect Strava, Volot reads your activities. The sign-in tokens are kept in your phone's Keychain; our server only passes them to Strava and stores nothing. Disconnect in Settings › Import history › Strava.
Purchases
Volot Pro is bought through Apple; we never see your payment details. To unlock Pro features that run on our server, the app sends Apple's signed purchase record, which our server checks with Apple. We store whether Pro is active and until when.
Who receives data
| Service | What for | Where |
|---|---|---|
| Supabase | Our database and sign-in: social, Volot API, Pro status, the waitlist | USA |
| Resend | Sending sign-in code emails | USA |
| Cloudflare | Hosting this website, our domain and email forwarding | Global network |
| Anthropic | AI estimates and meal plans, only when you agree | USA |
| Apple | App Store, purchases, Sign in with Apple when available | Global |
| Strava | Your activities, only if you connect it | USA |
| Open Food Facts, USDA | Food search and barcodes, no personal data | France, USA |
Where data goes outside your country, it's protected by the provider's data processing terms, including the EU's Standard Contractual Clauses where they apply. We never sell your data or share it for advertising.
How long we keep it
- Account and social data: until you delete your account.
- Volot API copy: until you turn the API off or delete your account.
- Records of AI requests (time and size, no content): until you delete your account.
- Waitlist: until the launch email is sent, at most 12 months after launch, or earlier if you ask.
- Volot news choice: until you untick it or delete your account.
Your rights
You can ask to see, correct, delete or get a copy of your data, object to or restrict how it's used, and take back any consent, at privacy@volot.app. Most of it you can also do yourself in the app (export, account deletion, switches in Settings › Your data). You can also complain to your data protection authority; in Serbia that's the Commissioner for Information of Public Importance and Personal Data Protection.
Children
Volot isn't meant for children under 16. If you believe a child has given us personal data, write to us and we'll delete it.
Changes
If we change this policy, we'll update the date above, and tell you in the app for anything important.