Privacy Policy

This Privacy Policy explains how Swanson Digital LLC ("Ceko," "we," "us," or "our") collects, uses, shares, and protects your information when you use the Ceko mobile app, the website at ceko.app, and related services (together, the "Service"). By using the Service, you agree to the practices described here.

1. Information we collect

We collect information you provide directly, information generated as you use the Service, and a limited amount of technical information needed to operate it.

1.1 Account & identity

• Email address — collected when you create an account with Google, Sign in with Apple, or an email address and password (via our authentication provider, Supabase). Used to create and identify your account.
• Profile information — name, username, profile photo, banner image, and bio that you enter or import from your Google profile.
• Birth year (required) — you enter your birth year during setup so we can confirm you are 18 or older. We store the year only, never a full date of birth, and it is not shown on your profile. Setup cannot be completed without it.
• Age and sex — if you choose to enter them (used for fitness calculators such as calorie estimates, and to place a lift on sex-stratified strength standards). Both are kept private, are not shown on your public profile, and “prefer not to say” is always an option.
• Authentication data — session tokens stored securely on your device to keep you signed in.

1.2 Fitness & nutrition data you log

This category may include health-related information, which we treat as sensitive:

• Workout history — exercises, sets, reps, weight, volume, and personal records (PRs).
• Body-weight log and body measurements.
• Nutrition and macros — food logs, recipes, macro/calorie goals, and water/hydration intake.
• Sleep log, "pump"/training logs, streaks, and derived statistics (level, XP, weekly sessions and volume).
• A one-time readiness questionnaire (the standard seven physical-activity readiness questions) answered before you start training. Your answers are kept on your device only — they are excluded from your cloud backup and never reach our servers, are never shared, and never appear on your profile. We store only a flag recording that you completed it, so you are not asked again on a new device.
• Progress photos you choose to upload to track your physique over time. These are stored privately in our cloud storage (Supabase), linked to your account, and are not shown to anyone else. If you add a photo to a post (a workout or a meal), that photo is part of the post you chose to share — you may also keep a copy in your progress photos, and that copy stays private. You can also choose one of your existing progress photos to include in a post; we never publish one automatically or without you selecting it.

1.3 Social activity

• Posts, comments, reactions, GIFs, and photos you attach to posts and share to feeds.
• Direct messages with other users.
• Friends, crews (including membership, roles, and join requests), and gym rivalries — the standings between your home gym and a rival gym.
• Gym check-ins, including gym name and timestamps, and your home/claimed gyms.
• Ceko does not share your location with anyone. A gym check-in shares which gym you are at, never a position. A live workout or run entry carries a distance, never a coordinate. Your recorded run route stays on your device, in Apple Health, and in your own private cloud backup — it is never shown to another person. An earlier version of this app offered run meet-ups, which could share an approximate start point (rounded to about 110 metres) with mutual friends; that feature is switched off and no such location is recorded or displayed. If it returns in a future update, this policy will describe it before it does.
• Live sets while you train (“Lift Together”). While a workout is in progress, Ceko publishes a single live entry showing the exercise, weight and reps of the working set you just finished, how many sets and how much volume you have done so far in that session, the name of the workout, and — only if you are checked in at your home gym — that gym. It is one entry per person, overwritten as you train, and deleted when the workout ends; warm-up sets are never published. This applies to a workout you start on your Apple Watch as well as one you start on your phone: since 12 August 2026 your phone picks up a watch workout while it is still running, so it becomes live in exactly the same way and under exactly the same setting. Your phone and your watch also pass the workout back and forth between themselves as you log each set — that exchange happens directly between your own two devices through Apple’s watch connection, and none of it reaches Ceko. You control this at Settings → Privacy → Lift Together, which has three settings: Friends (the default), Gym only (just people who joined your check-in, or whose check-in you joined), and Off. When it is Off, nothing is written at all. A run in progress works the same way, under this same setting: while a GPS run is active Ceko publishes one live entry showing that you are running and how far you have gone so far. It carries no location — a distance, never a coordinate — no gym, and it is deleted when the run ends. When it is Off, no entry is written for a run either.
• Training plans. Sessions you propose or are invited to — the time, the gym, and an optional short label for what you plan to train — together with who has said they are coming. A one-to-one plan is visible only to you and the person you invited. A plan you send to a crew is visible to that crew, and so is the list of crewmates who have said they will join.
• Weekly recaps you choose to post. If you post your week to your feed, that post carries your session count, total sets, total volume and number of personal records for the week, plus up to two highlights — which may name a lift and the weight and reps you did (for example a top set or a new record).
• Partner Board — if you opt in, your "open to a training partner" status and training preferences, which are shown to other users so you can find gym partners. You can leave the Partner Board at any time.
• The list of users you have blocked (kept in your private cloud backup so it follows you across devices).

1.4 Location

• Gym finder — the gym finder does not use your location. It searches a list of gyms shipped inside the app together with gyms other people have already claimed, so nothing about you leaves the device when you look for a gym. (Location is used only by the GPS run tracker, described below. Checking in at a gym reads no location at all — you choose the gym from a list, and only its name is recorded.)
• GPS run tracking — if you start a run in the run tracker, we continuously read your device's precise location for the duration of that active run in order to draw and measure your route. The route's path coordinates, distance, pace, and duration are saved to your run history and, when you are signed in, to your private cloud backup. Tracking happens only while a run you started is active, and stops when you finish. Runs recorded on Apple Watch use the watch's own GPS and are handled the same way: the route is measured on the watch, saved to Apple Health on your device, and passed to your phone over Apple's watch connection — where it is saved to your run history and, when you are signed in, to your private cloud backup, along with the run's distance, time, average heart rate, and calories. Your route is never shown to anyone else and is never used for advertising. If you post a run to the Ceko feed, the post can include an outline of the run's shape — the path flattened into a small drawing, with the start and end trimmed and no location data of any kind: no coordinates, no scale, no map. Two identical routes in different cities produce the same drawing. Your actual route coordinates stay on your device and in your private backup.

1.5 Health data from your device (optional)

Ceko can read health and activity data from your device's health store — Apple Health on iOS and Health Connect on Android — only if you connect it. Whether a given health store is available depends on your device and your version of the app. If you connect one, we read workout, active-energy, and body-weight data on your device to display your activity in the app. Your daily active-energy total (used for calorie budgeting) is read on your device and is not stored on our servers. However, when you record an Apple Watch workout in Ceko, the workout summary — which includes Health-derived measurements such as average heart rate and active calories — syncs to your account like any other workout you log, so it is available across your devices. See Section 8 for details.

1.6 Payment information

If you subscribe to a paid plan in the app, payment is processed by Apple through In-App Purchase (iOS) or by Google through Google Play Billing (Android); we never receive your card details and retain only your subscription status. We use RevenueCat to manage subscriptions across both stores. RevenueCat receives your account identifier, your purchase and subscription events, and standard store and device information — it does not receive your payment or card details, your email, or your profile information.

1.7 AI features (optional)

If you use the AI food scan (a Ceko Pro feature), the meal photo you capture is sent through our server to Google (Gemini) to estimate its nutrition. If Google is unavailable or does not respond, that same photo is sent instead to Anthropic so the scanner keeps working; this happens only when Google fails, and the photo goes to one of them, never both. Barcode scanning is different and does not use AI: the barcode is read on your device, and only the resulting number is looked up against the Open Food Facts and USDA food databases — no photo of the barcode is sent to us or to Google. These photos are processed only to return an estimate and are not retained on our servers unless you separately choose to post that meal with its photo. A downscaled thumbnail of the photo may be saved locally on your device so you can review your past scans. That copy stays on your device and is not uploaded to us. If you choose to post that meal to your feed with its photo, a separate copy of the photo is uploaded and becomes part of the post you shared; the diary copy on your device is unaffected, and deleting one does not delete the other. Posting from your food diary never includes the photo unless you switch it on. If you use the optional AI Coach (a Ceko Pro feature, available only after you turn it on and agree to it), the messages you send together with relevant fitness context from your account (such as workouts, personal records, body weight, nutrition, and sleep) are sent to Anthropic to generate a response, and your coach chat history is stored on your device and, when signed in, in a private store in our database that only your account can read. Our AI providers process this data only to return your result and do not use it to train their models. We do not use these photos or conversations for advertising, and we do not sell them.

1.8 Contacts (optional, and it never leaves your phone)

If you choose “Invite from Contacts” and grant permission, Ceko reads contact names and phone numbers from your device’s address book to show you a list of people to pick from. Tapping a name opens your phone’s own Messages app, pre-addressed to them with your invite link, so you send the message — we do not send anything on your behalf. Contact data is never uploaded, transmitted, stored, or matched against our users. It is not saved on your device by Ceko either: it is held only for as long as the picker is open, and we keep no copy in our database. This permission is entirely optional — declining it leaves the ordinary share-link invite fully usable.

1.9 Device & technical data

• A push-notification token, if you enable notifications.
• Basic technical and diagnostic information necessary to operate, secure, and troubleshoot the Service.

1.10 Bug reports you send us

If you tap Settings → About → Report a bug, we receive what you type together with a small amount of context read from the app at that moment: your platform, your app build and version, the last screen you were on, and the last error the app recorded. The exact list is shown to you in the report sheet before you send, and none of it is collected unless you choose to send a report. If you are signed in, your account identifier is attached so we can follow up on the problem; if you later delete your account, that identifier is removed from the report rather than the report being deleted. Before your text leaves your device we attempt to strip credentials out of it — recovery links, sign-in tokens and similar — because the thing that failed is often exactly what you want to paste in.

An optional screenshot. You may attach one image from your photo library. It is never attached automatically: you pick the image, you see a thumbnail of it, and you can remove it before sending. It is downscaled on your device and stored in a private storage bucket with no read access for any app user — only we can open it. We cannot redact a screenshot. Unlike your typed text, an image cannot be scanned for secrets, so a screenshot may show anything that was on your screen at the time — another person’s name, a message, or a health answer. The app tells you this next to the attached thumbnail, and attaching one is always optional.

2. How we use information

• Provide, operate, and maintain the Service and sync your data across your devices.
• Power social features, leaderboards, friends, crews, and gym rivalries.
• Process subscriptions and manage billing (via Apple In-App Purchase or Google Play Billing, managed through RevenueCat).
• Send notifications you have enabled.
• Personalize your experience and remember your settings.
• Maintain safety and security, prevent fraud and abuse, and enforce our Terms.
• Investigate and fix problems you report to us, and follow up with you about a report you sent.
• Comply with legal obligations.

We do not sell your personal information. We never use your Apple Health data for advertising or marketing, and we do not sell it or disclose it to third parties for their own purposes. Health-derived values are processed only to power features you turn on — for example, an Apple Watch workout you record syncs to your own account through our hosting provider so it appears across your devices, and if you use the optional AI Coach, any fitness context you choose to share with it is sent to our AI provider solely to generate your reply.

3. Legal bases for processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases: performance of a contract (to provide the Service you request), consent (for optional features such as the AI Coach, Apple Health, location, and notifications — which you may withdraw at any time), legitimate interests (to secure and improve the Service), and legal obligation. Where we process special-category (health) data, we rely on your explicit consent.

4. What is public vs. private

Some information is intentionally visible to other users so that social features work:

• Public: your profile (name, username, photo, banner, bio) and aggregate stats (streak, total workouts, weekly activity, level/XP), your three heaviest lifts (exercise name and weight only — your "Trophy Case"), content you choose to post, your crew membership, and — if you opt into the Partner Board — your open-to-partner status and training preferences.
• Leaderboards and boards you appear on by name. Ceko is a competitive app, so some of your training numbers are ranked next to your name:
  • Your crew's "This Week" board — your training days and volume this week, your level and your streak, ranked against your crewmates.
  • Your gym's boards — if you set a home gym, you are ranked among other members of that gym on sessions, volume, PRs and sets for the week.
  • Crew wars — shown to the crew you are matched against. If your crew declares a war, your name, photo and your sessions, volume and PR count for that week are visible to the members of the opposing crew, including in a one-to-one head-to-head against one of their members. These are people you have no other connection to, so this is the one board that shows your numbers to strangers rather than to friends, crewmates or people at your gym. Taking part is a standing preference that defaults to on, so you can be entered into a war without having taken any action; your captain or a co-captain picks each week's lineup and may pick you even if you have switched the preference off, and a war you have been picked for cannot be left once it starts. You can change the preference at any time in Settings › Crew wars, and you may receive up to three push notifications about a war your crew is in.
  • Your gym's strength board — a single strength number derived from your heaviest squat, bench press and deadlift. This one is optional: you can turn it off at Settings → Show My Strength at My Gym, which removes you from the strength board only. Your body weight is never published or ranked.
  These numbers are readable by other signed-in Ceko users. Treat anything in this section as public.
• Live gym check-ins — two-way friends only. When you check in at a gym, your name, the gym and the time are visible only to people you and they have both added as friends — and those people get a notification. (We mean a two-way friendship: they added you and you added them. Not “friends you have in common”.) Following someone one-way does not let them see your check-ins. Everyone else sees at most an anonymous count of how many people are at a gym — never who. Checking in is always your choice, and you can check out at any time.
• Live sets — two-way friends only. While you are training, the set you just finished is visible to people you and they have both added as friends, and — on the “Gym only” setting — only to those friends who are training with you. A one-way follower sees nothing, and neither does anyone else. Nothing is kept after the workout ends. A workout started on your Apple Watch counts as a workout in progress here too. This is on by default; Settings → Privacy → Lift Together turns it down or off.
• Who you trained with — kept with the post. If you train a workout that a friend shared with you, or they join your session, the finished workout post records that the session was shared and the first name of the person you trained with. Anyone who can see that post can see that name, and it stays for as long as the post does — deleting your post removes it, and so does deleting your account. This is separate from the live set above: the live set is deleted when you finish, this is not. If two people who both follow you posted the same shared session, Ceko shows it as a single card naming both of you.
• Private: your raw logs — body weight, nutrition, sleep, your full workout and PR history (apart from the specific figures listed above, the live set described in this section, and anything you choose to put in a post such as a weekly recap), progress photos, GPS run routes, age, sex, readiness-questionnaire answers, direct messages, email address, blocked-user list, AI Coach conversations, and health data read from your device. These are not shown publicly. The only exception is a photo you deliberately attach to a post: that photo is shared as part of that post, and any copy kept in your progress photos remains private.

You control what is shared through in-app settings: you can hide your posts from your profile, block other users, and join or leave the Partner Board at any time.

5. How we share information

We share information only as described below. We do not sell personal information.

• With service providers who process data on our behalf (see Section 6).
• With other users, for the public information and content described in Section 4.
• For legal reasons — to comply with law, respond to lawful requests, or protect the rights, property, or safety of Ceko, our users, or the public.
• In a business transfer — if we are involved in a merger, acquisition, or sale of assets, subject to this Policy.

6. Service providers & sub-processors

Provider	Data it receives	Purpose
Supabase	Account & app data, progress photos, private backups	Database, authentication, file storage, serverless functions
Anthropic (Claude)	AI Coach messages & fitness context — workouts, PRs, body weight, nutrition, sleep (only if you turn on the AI Coach); AI food-scan meal photos, but only when Google is unavailable	Generate AI Coach replies and weekly reports; act as the backup food scanner if Google fails, so the feature keeps working during an outage. Not used to train models.
Google	Email & basic profile (OAuth); AI food-scan meal photos (Gemini); IP address and referrer when a profile photo hosted by Google is loaded	Sign-in (OAuth); estimate nutrition from a scanned meal photo. Barcode scanning does not use Google. Not used to train models. We do not keep the photo; Google may hold it for a limited period to monitor for abuse.
Apple (In-App Purchase)	Subscription purchase & entitlement	Payment processing on iOS; we receive only your subscription status
Google Play Billing	Subscription purchase & entitlement	Payment processing on Android; we receive only your subscription status
RevenueCat	Your account identifier, subscription & purchase events, and store/device information. No payment or card details, email, or profile data.	Manages your Ceko Pro subscription across the Apple and Google stores and tells us whether it is active
Apple (APNs)	Device push token	Push notifications (iOS)
Google (Firebase Cloud Messaging)	Device push token, and the title and body of each notification we send you	Push notifications (Android). FCM is the only way to deliver a notification to an Android device, so the message text passes through Google on its way to your phone. We do not send it your name, email, or profile data, and it is not used for advertising.
Apple HealthKit (iOS)	On-device read/write; workout summaries you log sync to your account via Supabase	Display and record your health/activity
Health Connect (Android)	On-device read where available; workout summaries you log sync to your account via Supabase	Display and record your health/activity
OpenFoodFacts	Food search terms / barcodes	Food lookup (no account data)
USDA FoodData Central	Food search terms	Food lookup (no account data)
Giphy	GIF search terms	GIFs in comments (no account data)
OpenStreetMap (map tiles)	Map area being viewed	Draw the map in the GPS run tracker (no account data)
OpenStreetMap tile servers	IP address / approximate location	Map imagery for the gym map and run tracker
unpkg CDN	IP address / referrer	Map stylesheet and marker images
Spotify (optional)	OAuth token, playback commands; the playback SDK loads from Spotify's CDN	In-app music, only if you connect it
Google Fonts	IP / referrer	Web fonts on the website and app

7. Cookies & analytics

The app and website use local storage on your device to save your data and preferences and to keep you signed in. We do not run third-party analytics, advertising, or cross-site tracking technologies, and we do not use tracking cookies. Note that loading web fonts (Google Fonts) and map assets (unpkg, OpenStreetMap tiles) causes your browser or device to send its IP address and referrer to those providers as part of the standard request to fetch those files, as described in Section 6.

8. Health data from your device

Ceko accesses Apple Health data to display your workouts and activity within the app and to power features you use. Ceko also writes workouts you record on Apple Watch to Apple Health, including — for outdoor runs recorded on the watch — the run's route. That route is also passed to your phone over Apple's watch connection and kept with your run history and private cloud backup, exactly as a run recorded on your phone is; it is not shown to anyone else. Workouts you record on Apple Watch include Health-derived measurements (average heart rate and active calories); when you are signed in, those workout summaries sync to your account like any other workout you log, and if you share a workout to the feed those summary stats are visible to your friends. Daily active-energy totals used for calorie budgeting are read on your device and are not stored on our servers. We do not use Apple Health data for advertising or marketing, and we never sell it. You can revoke Health access at any time in iOS Settings.

Android (Health Connect). Where the integration is available in your version of the app, Ceko reads health and activity data from Health Connect — such as workouts, active energy, and body weight — solely to display and record your activity within the app and to power features you turn on. We do not use Health Connect data for advertising or marketing, we do not sell it, and we do not share it with third parties for their own purposes. Data read for on-device display, such as your daily active-energy total, stays on your device; a workout you record in Ceko syncs to your own account like any other workout you log. You can review or revoke Ceko's access at any time in the Health Connect settings on your device.

9. Data retention & deletion

We keep your information for as long as your account is active or as needed to provide the Service. You can delete your account and associated data at any time in Settings → Delete Account, which permanently removes your account and associated data from our systems. Copies may persist in encrypted backups for up to 30 days after deletion, and we may retain limited information where required by law or for legitimate purposes such as fraud prevention.

Clearing your data without closing your account. Settings → Reset All Data is a second, narrower control: it clears the progress stored on this device, deletes your private cloud backup (your training, nutrition, body-weight and sleep logs and your progress check-ins), deletes your uploaded progress photos from our storage, and resets your public stats — streak, workouts, level and XP, and your Trophy Case — to their starting values, so what other people see matches the fresh start. Your account itself, your username and profile, and anything you already posted to a feed remain; use Delete Account if you want those gone too. Resetting cannot be undone and does not recover anything you cleared.

How long we keep each kind of data. Because your logs are the product — a training history is only useful if it goes back — we keep most categories for as long as your account exists, and the criteria we apply are set out below rather than as fixed calendar periods:

• Account & profile (email, username, name, photo, bio) — while your account exists; removed when you delete it.
• Training, nutrition, body-weight, sleep and readiness logs — while your account exists, because the history is the feature. You can delete individual entries in the app at any time.
• Progress photos — while your account exists. You can delete an individual check-in and its photo in the app, and they are removed from our storage when you use Reset All Data or delete your account.
• Posts, comments and reactions — until you delete them, or until you delete your account.
• Direct and crew messages — until your account is deleted.
• AI Coach reports and chat — until you clear them in the app, or until you delete your account.
• Push notification tokens — until you sign out or delete your account, or until the token expires.
• Abuse and safety reports — kept after deletion so a pattern of abuse can still be acted on, but your identifiers are stripped from the report when you delete your account, leaving it unlinked to you.
• Bug reports (what you typed, the app context listed above, and any screenshot you attached) — kept while we investigate and for a reasonable period afterwards, so that a problem which comes back can be recognised as the same one. If you delete your account, your identifier is removed from the report and it is left unlinked to you, rather than the report being deleted.
• Anti-abuse counters (AI-scan and coach usage limits) — short rolling windows, only long enough to enforce the limit.
• Backups — up to 30 days after deletion, then overwritten.

Your device's own backup. Ceko stores your logs on your device so the app works offline. If you use your phone's built-in backup — iCloud Backup on iOS, or Android Auto Backup on Android — a copy of that on-device app data, including your workout, nutrition, body-weight and readiness-questionnaire entries, is included in your own device backup. That backup belongs to your Apple or Google account and is encrypted with your device credentials; it is not sent to Ceko and we cannot read it. You can turn it off in your device settings (iOS: Settings → your name → iCloud → Manage Storage → Backups; Android: Settings → Google → Backup), and deleting your Ceko account does not delete a copy already inside your personal device backup.

10. Security

We use technical and organizational measures designed to protect your information, including encryption in transit, access controls, and database row-level security. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal data, and to object to certain processing or withdraw consent. Two of those you can exercise yourself, immediately, without contacting anyone: Settings → Download my data exports your on-device logs plus your profile, posts, comments, direct messages, notifications, follows, crew memberships and gym check-ins from our servers, as a machine-readable JSON file. That export does not yet include your AI Coach conversations and reports or your uploaded photos; ask us at the address below and we will send you those too, and deleting your account removes them either way. Separately, Settings → Delete Account deletes your account and data. For anything else — correction, restriction, objection, or withdrawing consent — contact us at jon@swansondigital.net. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data-protection authority.

12. U.S. state privacy rights (California & others)

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, to request deletion or correction, and to opt out of "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under California law, and we do not use or disclose sensitive personal information for purposes other than those permitted. Residents of other U.S. states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Texas, and others) may have similar rights. To exercise these rights, contact jon@swansondigital.net. We will not discriminate against you for exercising your rights.

Verification and authorized agents. So that we do not hand your data to someone else, we verify requests against the email address on your Ceko account; we may ask you to confirm from that address or to sign in. An authorized agent may submit a request on your behalf with written permission, and we may ask you to verify it directly.

Appeals. If we decline your privacy request, you may appeal by replying to our decision or writing to jon@swansondigital.net with "Privacy Appeal" in the subject. We will review and respond in writing, with our reasons, within the time your state allows (generally 45 or 60 days). If we deny the appeal, you may contact your state Attorney General to submit a complaint.

13. Children's & minors' privacy

The Service is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us personal information, contact us and we will delete it and close the account.

14. International data transfers

We and our service providers process your information in the United States and, for some providers, other countries that may have data-protection laws different from those in your country. Where required for transfers of personal data out of the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

15. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here with a new effective date and, for material changes, provide additional notice through the Service.

16. Contact us

Questions about this Policy or your data? Contact Swanson Digital LLC at jon@swansondigital.net.