Privacy Policy

Last updated 5 October 2026

This policy explains what RekAi collects, why it collects it, who it is shared with, and what you can do about it. RekAi is developed and operated by Gal Blank, an individual residing in New Jersey, United States ("we", "us"), who is the controller of your personal information. RekAi is not a company; "we" is used for readability.

The short version: we collect what is needed to coach you and nothing to sell. There are no advertising identifiers, no analytics SDKs and no third-party trackers in the app. We do not sell personal information.

1. What we collect

Account information

A user identifier, and — if you register — your display name, profile photo URL and the sign-in method you used (Apple, Google, or an email address and password). You can use RekAi without registering at all, in which case the account is anonymous and tied to the app installation.

Leaderboard name and photo

If you register, the nickname you choose for the leaderboard and, if you upload one, a profile photo. The photo is cropped and shrunk on your phone before it is sent. Without a nickname or photo you are shown with a generated 8-bit animal avatar and a matching name, such as "Turbo Otter 27", which is derived from your account identifier and is not personal information about you.

Before a nickname or photo is shown to anyone, it is checked automatically by the AI service described in section 3, for sexual content, violence, hate and similar material. If it is rejected it is not stored. Other athletes can report a name or photo; reports are kept for review, and a name or photo reported by several athletes is hidden until you choose a new one.

Training profile

The things you tell the coach so it can programme for you: your training experience, the equipment you have access to, your preferred units, and — where you provide them — your age, bodyweight and sex. You also tell it about injuries or areas that are bothering you.

So that each session starts from the last one rather than from scratch, the coach also keeps how you usually train — the equipment, session format and length you tend to choose, goals and muscle groups you have mentioned — and a summary of your last session: its title, the day, its length, the muscle groups it worked, and how many of its sets you completed.

Coach notes

When you mention something worth remembering that fits nowhere else — an exercise you dislike, when you usually train, what you are training for — the coach may write it down as a short note, for example "Hates burpees." Notes are written automatically by the AI described in section 3 from what you told the coach, and are used only to plan your sessions. At most eight are kept. Every note is listed in the app under Profile, where you can remove any of them. Notes never include injuries, bodyweight, age or sex, which are kept separately above.

Health-related information. Injuries, bodyweight, age and sex are health-related. We treat them as sensitive: they are used to generate and adapt your training and for nothing else. They are never used for advertising and never sold.

Training activity

The sessions generated for you, the plans and programmes they belong to, what you logged against each set (reps, weight, time), how many workouts you have generated and completed, your active minutes, points, current and longest streak, and the date of your last workout.

Subscription information

If you subscribe, we store the product identifier, the expiry date, the store environment and the store's own transaction identifier, so we know whether your subscription is active. We never see or store your payment card. Payment is handled entirely by Apple or Google.

How you use the app

Events describing what you do in the app — which screens you open, starting, pausing, skipping or finishing a workout, swapping an exercise, signing in, and viewing or using the subscription screen — with the time, your platform (iOS or Android) and the app version. These are sent to our own backend and stored with your account, not to any analytics or advertising company. They never contain what you type to the coach, your injuries or your bodyweight. We use them only in aggregate, to see where the app works and where people get stuck. If the app crashes, the names of the last few of these events (never their details) are included in the crash report described below.

Crash reports

If the app crashes or hits an error, a crash report is sent to Firebase Crashlytics: what went wrong in the code, your device model and operating system version, the app version, a random installation identifier, your account's user ID, and the names of the last few things you did in the app. It does not include your name, email address, phone number, what you type to the coach or your training details. We use crash reports only to find and fix bugs.

Notifications

If you allow notifications, a device push token so reminders can reach you. You can revoke this in your device settings at any time.

Texting the coach

You can text the RekAi number to have the coach build you a workout, with or without the app. If you text it from a number we have not seen, we create a guest account for that number so the coach can remember your conversation and the workouts it builds, and we send the workout as a link to a web page only someone with the link can open. If you use the app, you can also link a number from your profile by typing back a code we text to it; linking a number that texted us before moves its workouts into your app account. Either way we keep the number, the texts you send to the RekAi number and the coach's replies. Your texts are used to build your sessions in the same way as a conversation in the app, including being sent to the AI service described below. You can unlink the number from your profile at any time, ask us to delete a texting-only account at the address below, or reply STOP to any text from us to stop receiving them; reply HELP for help. Message frequency varies with how often you text, and message and data rates may apply. Mobile information is not shared with third parties or affiliates for marketing or promotional purposes.

If you contact us

The name, email address, subject and message you submit through the contact form on this website, along with your browser's user-agent string and a one-way hash of your IP address. The hash exists only to rate-limit the form against automated abuse; we do not store the IP address itself and cannot recover it from the hash.

What we do not collect

• No advertising identifiers (IDFA / AAID) and no ad networks.
• No third-party analytics or attribution SDKs.
• No camera or microphone access, and no contacts, precise location or health-app data. The photo library is opened only when you choose a leaderboard photo, and only the photo you pick is read.
• No payment card details.

2. Why we collect it

• To generate your training. Equipment, time available, injuries, experience and history are what a session is built from.
• To make it progress. Past logged sets are what the next session's loads are calculated from.
• To run your account — signing you in, keeping your history across devices, and applying your free-session allowance or subscription.
• To operate and improve the service, including diagnosing faults from server logs and seeing, from app usage events, which parts of the app work and which do not.
• To meet legal obligations and enforce our Terms.

Where the GDPR or UK GDPR applies to you, our legal bases are performance of a contract (providing the app), your consent (health-related details, notifications, text messages, leaderboard participation), and our legitimate interests (security, abuse prevention, service improvement). Where we rely on consent you can withdraw it at any time.

3. How AI is used

RekAi generates sessions and coaching using Google's Gemini models through Google Cloud Vertex AI. To do that, the relevant parts of your training profile and history — your equipment, available time, experience, injuries, recent sessions and logged loads, and the coach's notes — are sent to that service as part of the request. What you type to the coach is sent too, both to write its replies and, at the end of the conversation, to write any coach notes. The conversation itself is not stored. If you set a leaderboard nickname or photo, it is sent to the same service to be checked before it is shown to anyone.

We do not send your name, email address or any payment information to the model. Google processes this data as our service provider under its enterprise terms and, under those terms, does not use it to train its general-purpose models.

Generated training is produced by an automated system. It is general fitness guidance, not medical advice, and it can be wrong — see the Terms.

4. Who it is shared with

We do not sell personal information and we do not share it for cross-context behavioural advertising. We use these service providers:

• Google Firebase (authentication, database, cloud functions, file storage, hosting, crash reporting through Crashlytics) — stores and processes your account and training data on our behalf, in the United States.
• Google Cloud Vertex AI — generates training content, as described above.
• Apple — processes purchases and provides the signed receipt we verify. Where you use Sign in with Apple, Apple provides the identifier and, if you allow it, your name and an email address (which may be a private relay address).
• Google Play billing — processes purchases on Android.
• Twilio and Telnyx — send and receive the text messages between you and your coach, if you text the RekAi number. They receive your phone number and the content of those messages.

We may also disclose information where we are legally required to, or to establish, exercise or defend legal claims. If RekAi is transferred to another person or to a company — including one formed to run it — information may transfer with it; you would be told before it became subject to a different policy.

5. What other users can see

RekAi has a leaderboard. If you take part, your nickname and profile photo (or your 8-bit avatar and its name, if you have not chosen them), your points, your workout count and your streak are visible to other users. Your real name, email address and the photo on your Apple or Google account are never shown.

Participation is on by default. You can turn it off in the app at any time, which removes you from the board. Nothing else about your training — your injuries, your bodyweight, your logged weights or your sessions — is ever visible to another user.

6. How long it is kept

• Account and training data, including app usage events — for as long as your account exists. Delete your account and it is removed.
• Leaderboard nickname and photo — until you change or remove them, or delete your account. A replaced photo is deleted.
• Reports of another athlete's name or photo — kept for as long as needed to review them.
• Coach notes — until you remove them in the app, until newer notes replace them (at most eight are kept), or until you delete your account.
• Subscription records — retained while the subscription is live and afterwards as long as needed for tax, accounting and dispute purposes.
• Contact form messages — up to 24 months, so we have the history of a conversation if you come back to it.
• Server logs — typically 30 days.
• Rate-limiting hashes — one hour.

7. Your rights and choices

Whoever and wherever you are, you can ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything that is wrong;
• delete your account and the data attached to it;
• stop using your data for a particular purpose, or withdraw a consent.

To delete your account and everything attached to it, use www.rekaicoach.com/delete-account — you sign in there and it happens immediately, with no need to install the app. It is also in the app under Profile. Note that deleting your account does not cancel an App Store or Google Play subscription; that has to be done in your store account settings.

For anything else, use the contact form or write to galblank@gmail.com. We will verify that the request comes from the account holder before acting, and we respond within the time the applicable law allows — 45 days under the CCPA, one month under the GDPR.

California

If you are a California resident, the CCPA as amended by the CPRA gives you rights to know, delete, correct, and to opt out of "sale" or "sharing" of personal information and to limit use of sensitive personal information. We do not sell or share personal information as those terms are defined, and we use sensitive personal information only to provide the service you asked for — so there is nothing to opt out of, but you may still exercise the other rights above. We will not discriminate against you for doing so.

EEA, UK and Switzerland

You additionally have rights to restrict or object to processing and to data portability, and the right to complain to your local supervisory authority.

In-app controls

• Leave the leaderboard in the app's profile screen.
• Remove any coach note, and change your equipment and training details, in the app's profile screen.
• Turn off notifications in your device settings.
• Manage or cancel a subscription in your App Store or Google Play account.

8. Children

RekAi is not directed to children. You must be at least 13 years old to use it, and older where your country requires it. We do not knowingly collect personal information from children under 13; if we learn that we have, we delete it. A parent or guardian who believes a child has given us information should contact us.

9. Security

Data is encrypted in transit and at rest by our infrastructure provider. Access to production data is limited to those who need it. Subscription entitlements are verified server-side against Apple's signed receipts, so a modified app cannot grant itself access. No system is perfectly secure, and we cannot guarantee absolute security.

10. International transfers

We are based in the United States and our infrastructure is hosted there. If you use RekAi from outside the United States, your information is transferred to and processed in the United States. Where required, those transfers rely on the European Commission's Standard Contractual Clauses or an equivalent mechanism.

11. Changes

We will update this page when what we do changes, and move the "last updated" date. If a change materially affects your rights we will give notice in the app before it takes effect.

12. Contact

Gal Blank
New Jersey, United States
galblank@gmail.com

Or use the contact form.