Effective Date: October 4, 2026
At Strongineering, we respect your privacy and are committed to protecting your personal information. This policy explains how we collect, use, and protect your data when you use our app. We do not sell your personal data to anyone, and we only collect data necessary to provide and improve our services.
Nestuary Wellness Inc. ("Strongineering," "we," "us," and "our") provides you with access to personalized workout and fitness resources through our mobile application. This Privacy Policy is designed to help you understand how we collect, use, and share your personal information and to help you understand and exercise your privacy rights.
This Privacy Policy applies to personal information processed by us through our Strongineering mobile application and related services (collectively, our "Services"). This Privacy Policy is incorporated by reference in the Strongineering Terms of Service, which govern your use of the Services.
We collect information that you provide to us directly, information we obtain automatically when you use our app, and information from third-party services that you choose to connect.
When you create an account with Strongineering, we collect basic information such as your name, email address, username, and password. You may also choose to provide additional profile information including a profile picture, date of birth, gender, and fitness profile data to help us provide more personalized fitness recommendations. This information helps us tailor your workout experience to your specific needs and preferences.
We collect workout data that you log in our app, including exercises performed, sets, reps, weights used, and workout duration. If you choose to connect our app with Apple HealthKit or Google Health Connect, we may collect health information such as heart rate data, movement activity, sleep patterns, body measurements, and other health metrics. This integration requires your explicit permission and you can revoke access at any time through your device settings.
For iOS users, we may collect HealthKit data including date of birth, heart rate, height, sex, weight, body measurements, movement activity, sleep patterns, and workouts. Strongineering also allows users to send workout and Active Energy data from Strongineering to be written to HealthKit, should they choose. We maintain all HealthKit Information in accordance with Apple's development guidelines.
For Android users, we may collect Health Connect Information including estimated active energy burned, body temperature, body fat percentage, exercise data, user height, lean body mass, and user weight. This integration requires your explicit permission and you can revoke access at any time through your device settings.
We automatically collect information about how you use our app and the device you use to access it. This includes device type, operating system, unique device identifiers, mobile advertising and other unique identifiers, IP address, and general location information inferred from your IP address. With your permission, we may use these identifiers to measure the effectiveness of our marketing campaigns. You can control this at any time through your device's privacy settings. We also collect crash reports and performance data to help us identify and fix technical issues.
When you use GPS-enabled conditioning features such as outdoor running, cycling, walking, or hiking, we collect precise location data from your device to track your route, distance, pace, and elevation. This data is collected only while you are actively recording a conditioning session and only with your explicit permission granted through your device settings.
We may also collect motion and activity data from your device's sensors to enhance elevation accuracy and estimate step count and distance when GPS is unavailable. You can revoke location or motion permissions at any time through your device settings. Location and motion data is stored as part of your workout history and is not used for advertising or shared with third parties.
When you make purchases through our app, we collect information related to your subscription status and purchase history. All payment processing is handled by Apple App Store or Google Play Store, and we do not store your payment card information.
When you contact us for support or send us messages through our contact forms, we collect the information you provide including your email address and the content of your communications.
We use the information we collect to:
When we send you communications, these may include important updates about your account, changes to our services, or security notices. We may also send you optional marketing communications about new features or promotions, which you can opt out of at any time.
We offer AI-powered assistance to help answer your fitness and health questions through various implementations. Currently, this feature is available as a custom GPT through OpenAI's ChatGPT GPT Store, which operates independently on OpenAI's platform. We may also provide AI assistance through integrated chatbot features within our web interface or app.
When you interact with our AI assistant features:
Our app lets you create your own exercise entries. When you do, we collect a small amount of classification metadata about that exercise so we can see which exercises our users are missing and decide which ones to research, film, and add to our public catalog.
What we collect when you create an exercise:
What we do not collect:
About the hash. We store a one-way hash of your account identifier rather than the identifier itself. Its only purpose is to count how many different people have created a similar exercise, so that one person creating the same entry on several devices does not distort our understanding of demand. We never use it to look you up, and it is never joined to any other record we hold about you. Because a hash derived from your identifier is stable over time, we treat it as pseudonymous rather than anonymous information.
Legal basis and your choice. For users in the European Economic Area and the United Kingdom, we rely on our legitimate interest in improving our exercise catalog. This collection is on by default, and you can turn it off at any time in Settings under Privacy — look for "Help improve the exercise catalog." Turning it off has no effect on your ability to create and use your own exercises, and no effect on any other part of the app.
Exercises we later add to our catalog are researched, written, filmed, and illustrated by us. Your own exercise entry and its training history are never altered, replaced, or deleted as a result, and any decision to move your history onto a catalog exercise requires your explicit confirmation.
We do not sell your personal information to third parties. We may share your information only in limited circumstances to provide our services, comply with legal obligations, or protect safety.
We work with trusted companies that help us operate our app, including Google Cloud Platform for secure data storage and app infrastructure, and Cloudflare for content delivery. These service providers are contractually required to protect your information and use it only for the specific services they provide to us.
When you choose to connect our app with Apple HealthKit or Google Health Connect, data sharing occurs according to your specific permissions and these platforms' privacy policies. You control what data is shared and can disconnect these integrations at any time.
Our app may display supplementary exercise videos from YouTube (e.g., as a fallback or in the Tips & Resources section). When you interact with these videos, YouTube may collect data according to their privacy policy. We do not control YouTube's data collection practices.
We may disclose your information if required by law, court order, or government request. We may also share information to protect our rights, property, or safety, or that of our users or the public.
If Strongineering is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy protections described in this policy.
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Your data is stored securely using Google Cloud Platform infrastructure, with data centers located worldwide and encryption both in transit and at rest.
We maintain security protocols including secure authentication systems, regular security assessments, and limiting employee access to personal data on a needto-know basis. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
You have several rights regarding your personal information. You can:
If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR). These include the right to data portability, the right to restrict processing, the right to object to processing based on legitimate interests, and the right to withdraw consent for processing based on consent. You also have the right to lodge a complaint with your local data protection authority.
Under the California Consumer Privacy Act (CCPA), California residents have the right to know what categories of personal information we collect and how it is used. You have the right to request deletion of your personal information and the right to opt-out of the sale of personal information. We do not sell personal information to third parties. You also have the right to non-discrimination for exercising your privacy rights.
Similar rights may apply under Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Utah (UCPA) privacy laws, including rights to access, delete, and opt-out of certain data processing activities.
We retain your personal information for as long as your account is active or as needed to provide you services. When you delete your account, we will remove your personal data within 30 days, except for information we are required to retain by law. Health and workout data is retained until you delete it or close your account. App usage analytics are typically retained for two years in anonymized form, and customer support records are kept for three years.
Your data is processed and stored using Google Cloud Platform infrastructure, with data centers located worldwide. If you are located outside of these regions, your information may be transferred to and processed in countries with different data protection laws than your own. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable privacy laws.
Our app has a 9+ age rating on app stores. For users under 13, we follow special protections under children's privacy laws. We do not knowingly collect personal information from children under 13 without parental consent. Parents or guardians can contact us to review, modify, or delete their child's information. Health data integration requires appropriate consent based on local laws and platform requirements.
Our app integrates with several third-party services, each with their own privacy practices:
We use minimal tracking technologies in our app. Essential cookies and similar technologies are necessary for app functionality, security, and authentication. We use analytics technologies to understand app usage and improve our features, which you can opt out of through your device settings. We also use performance monitoring to track app crashes and technical issues. We do not use cookies for personalized advertising within the app.
On our website, Google Analytics, PostHog (product analytics) and the Meta Pixel load only after you accept cookies. We use them to understand site traffic and how visitors move through sign-up, and to measure and retarget our advertising. Choose "Reject All" or "Necessary Only" to keep them off.
Strongineering's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. User consent is required for any sharing of user data with third-party AI services, and users can revoke consent at any time. Any thirdparty AI services adhere to data protection laws when processing Strongineering user data. AI providers are vetted for privacy and security standards.
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will notify you through our app or by email. We will also post the updated policy with a new effective date. Your continued use of our app after we make changes indicates your acceptance of the updated policy.
If you have questions about this privacy policy, want to exercise your privacy rights, or need to contact us about your personal information, please email us at:
Email: contact@strongineering.com
For European Union users with data protection questions:
Email: contact@strongineering.com (Attn: Data Protection Officer)
Nestuary Wellness Inc.
5th Floor-#5-5, 8, Gangnam-daero 53-gil
Seocho-gu, Seoul, Republic of Korea 06621