This Privacy Policy explains how Swanson Digital LLC ("Ceko," "we," "us," or "our") collects, uses, shares, and protects your information when you use the Ceko mobile app, the website at ceko.app, and related services (together, the "Service"). By using the Service, you agree to the practices described here.
We collect information you provide directly, information generated as you use the Service, and a limited amount of technical information needed to operate it.
This category may include health-related information, which we treat as sensitive:
If you connect Apple Health, we read workout, active-energy, and body-weight data on your device to display your activity in the app. Your daily active-energy total (used for calorie budgeting) is read on your device and is not stored on our servers. However, when you record an Apple Watch workout in Ceko, the workout summary — which includes Health-derived measurements such as average heart rate and active calories — syncs to your account like any other workout you log, so it is available across your devices. See Section 8 for details.
If you subscribe to a paid plan in the app, payment is processed by Apple through In-App Purchase (iOS) or by Google through Google Play Billing (Android); we never receive your card details and retain only your subscription status. We use RevenueCat to manage subscriptions across both stores. RevenueCat receives your account identifier, your purchase and subscription events, and standard store and device information — it does not receive your payment or card details, your email, or your profile information.
If you use the AI food scan (a Ceko Pro feature), the meal or barcode photo you capture is sent through our server to Google (Gemini) to estimate its nutrition. These photos are processed only to return an estimate and are not retained on our servers. A downscaled thumbnail of the photo may be saved locally on your device so you can review your past scans; it stays on your device and is not uploaded to us. If you use the optional AI Coach (a Ceko Pro feature, available only after you turn it on and agree to it), the messages you send together with relevant fitness context from your account (such as workouts, personal records, body weight, nutrition, and sleep) are sent to Anthropic to generate a response, and your coach chat history is stored on your device and, when signed in, in your private cloud backup. Our AI providers process this data only to return your result and do not use it to train their models. We do not use these photos or conversations for advertising, and we do not sell them.
We do not sell your personal information. We never use your Apple Health data for advertising or marketing, and we do not sell it or disclose it to third parties for their own purposes. Health-derived values are processed only to power features you turn on — for example, an Apple Watch workout you record syncs to your own account through our hosting provider so it appears across your devices, and if you use the optional AI Coach, any fitness context you choose to share with it is sent to our AI provider solely to generate your reply.
If you are in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases: performance of a contract (to provide the Service you request), consent (for optional features such as the AI Coach, Apple Health, location, and notifications — which you may withdraw at any time), legitimate interests (to secure and improve the Service), and legal obligation. Where we process special-category (health) data, we rely on your explicit consent.
Some information is intentionally visible to other users so that social features work:
You control what is shared through in-app settings: you can hide your posts from your profile, block other users, and join or leave the Partner Board at any time.
We share information only as described below. We do not sell personal information.
| Provider | Data it receives | Purpose |
|---|---|---|
| Supabase | Account & app data, progress photos, private backups | Database, authentication, file storage, serverless functions |
| Anthropic (Claude) | AI Coach messages & fitness context — workouts, PRs, body weight, nutrition, sleep (only if you turn on the AI Coach) | Generate AI Coach replies and weekly reports. Not used to train models. |
| Email & basic profile (OAuth); AI food-scan meal/barcode photos (Gemini) | Sign-in (OAuth); estimate nutrition from a scanned photo. Photos are not retained or used to train models. | |
| Apple (In-App Purchase) | Subscription purchase & entitlement | Payment processing on iOS; we receive only your subscription status |
| Google Play Billing | Subscription purchase & entitlement | Payment processing on Android; we receive only your subscription status |
| RevenueCat | Your account identifier, subscription & purchase events, and store/device information. No payment or card details, email, or profile data. | Manages your Ceko Pro subscription across the Apple and Google stores and tells us whether it is active |
| Apple (APNs) | Device push token | Push notifications (iOS) |
| Apple HealthKit | On-device read/write; workout summaries you log sync to your account via Supabase | Display and record your health/activity |
| OpenFoodFacts | Food search terms / barcodes | Food lookup (no account data) |
| USDA FoodData Central | Food search terms | Food lookup (no account data) |
| Giphy | GIF search terms | GIFs in comments (no account data) |
| OpenStreetMap (Nominatim/Overpass) | Location / search queries | Find nearby gyms (no account data) |
| OpenStreetMap tile servers | IP address / approximate location | Map imagery for the gym map and run tracker |
| Open-Meteo | Typed city/place names | Backup geocoder for gym search |
| Overpass mirror (kumi.systems) | Location queries | Backup gym-data server |
| unpkg CDN | IP address / referrer | Map stylesheet and marker images |
| Spotify (optional) | OAuth token, playback commands; the playback SDK loads from Spotify's CDN | In-app music, only if you connect it |
| Google Fonts | IP / referrer | Web fonts on the website and app |
The app and website use local storage on your device to save your data and preferences and to keep you signed in. We do not run third-party analytics, advertising, or cross-site tracking technologies, and we do not use tracking cookies. Note that loading web fonts (Google Fonts) and map assets (unpkg, OpenStreetMap tiles) causes your browser or device to send its IP address and referrer to those providers as part of the standard request to fetch those files, as described in Section 6.
Ceko accesses Apple Health data to display your workouts and activity within the app and to power features you use. Workouts you record on Apple Watch include Health-derived measurements (average heart rate and active calories); when you are signed in, those workout summaries sync to your account like any other workout you log, and if you share a workout to the feed those summary stats are visible to your friends. Daily active-energy totals used for calorie budgeting are read on your device and are not stored on our servers. We do not use Apple Health data for advertising or marketing, and we never sell it. You can revoke Health access at any time in iOS Settings.
We keep your information for as long as your account is active or as needed to provide the Service. You can delete your account and associated data at any time in Settings → Delete Account, which permanently removes your account and associated data from our systems. Copies may persist in encrypted backups for up to 30 days after deletion, and we may retain limited information where required by law or for legitimate purposes such as fraud prevention.
How long we keep each kind of data. Because your logs are the product — a training history is only useful if it goes back — we keep most categories for as long as your account exists, and the criteria we apply are set out below rather than as fixed calendar periods:
Your device's own backup. Ceko stores your logs on your device so the app works offline. If you use your phone's built-in backup — iCloud Backup on iOS, or Android Auto Backup on Android — a copy of that on-device app data, including your workout, nutrition, body-weight and readiness-questionnaire entries, is included in your own device backup. That backup belongs to your Apple or Google account and is encrypted with your device credentials; it is not sent to Ceko and we cannot read it. You can turn it off in your device settings (iOS: Settings → your name → iCloud → Manage Storage → Backups; Android: Settings → Google → Backup), and deleting your Ceko account does not delete a copy already inside your personal device backup.
We use technical and organizational measures designed to protect your information, including encryption in transit, access controls, and database row-level security. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal data, and to object to certain processing or withdraw consent. Two of those you can exercise yourself, immediately, without contacting anyone: Settings → Download my data exports everything Ceko holds about you — your on-device logs plus your profile, posts, comments, messages, follows, crew memberships and gym check-ins from our servers — as a machine-readable JSON file, and Settings → Delete Account deletes your account and data. For anything else — correction, restriction, objection, or withdrawing consent — contact us at jon@swansondigital.net. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data-protection authority.
If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, to request deletion or correction, and to opt out of "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under California law, and we do not use or disclose sensitive personal information for purposes other than those permitted. Residents of other U.S. states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Texas, and others) may have similar rights. To exercise these rights, contact jon@swansondigital.net. We will not discriminate against you for exercising your rights.
Verification and authorized agents. So that we do not hand your data to someone else, we verify requests against the email address on your Ceko account; we may ask you to confirm from that address or to sign in. An authorized agent may submit a request on your behalf with written permission, and we may ask you to verify it directly.
Appeals. If we decline your privacy request, you may appeal by replying to our decision or writing to jon@swansondigital.net with "Privacy Appeal" in the subject. We will review and respond in writing, with our reasons, within the time your state allows (generally 45 or 60 days). If we deny the appeal, you may contact your state Attorney General to submit a complaint.
The Service is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us personal information, contact us and we will delete it and close the account.
We and our service providers process your information in the United States and, for some providers, other countries that may have data-protection laws different from those in your country. Where required for transfers of personal data out of the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
We may update this Policy from time to time. We will post the updated version here with a new effective date and, for material changes, provide additional notice through the Service.
Questions about this Policy or your data? Contact Swanson Digital LLC at jon@swansondigital.net.