Privacy Policy
Last updated 23 October 2026
Effective 23 October 2026
Laterals is a fitness app: a workout log, nutrition and recipes, and an AI coach you can talk to. This policy explains what we collect, why, who processes it for us, how long we keep it, and your rights.
Who we are: Laterals is made by Mirza Aneeb Baig, an independent developer in Karachi, Pakistan (“we”, “us”). We are responsible for your data (the “controller”). Contact for anything about your data: support@laterals.app
The short version: we collect what the app needs to work. We don’t sell your data, don’t show ads, don’t use analytics or tracking tools, and don’t share your data with anyone except the services listed below that run Laterals for us. You can export your data and delete everything at any time.
What we collect
From your Google account, when you sign in: your email address, your name, a link to your profile picture and your Google account ID. We use them to create your account and recognise you when you sign in again. We never see your Google password.
What you enter in the app:
- Profile and onboarding answers: sex, age, height, weight, goal, activity level, training experience, style, days and session length, equipment, injuries or limitations, diet, religious diet (optional), foods you avoid, cuisines you like, meals a day, cooking time and skill, kitchen tools, budget and your country. Every answer is optional: you can skip the questions when you sign up and answer them later in Me → Your plan. Until you do, the coach gives general advice and your calorie and protein targets are left out.
- Training: routines, workouts, sets, weights, reps, times, distances and personal records, and exercises you create. If you import a file from another app (Hevy, Strong, FitNotes, Fitbod) or a Laterals backup, we read it to show you a preview, keep it for up to 24 hours until you import or leave it, and then store the workouts and body weights you chose, plus how you matched its exercise names (so the next file matches the same way).
- Body: body weight entries (and body fat, if you add it).
- Food: recipes, meal categories, meal plans and shopping lists.
- Coach: the messages you send to the AI coach and its replies, and the short notes the coach keeps about you (for example an injury), which you can see and delete in the app.
- Your phone’s app ID: when you sign in, the app sends Android’s ID for Laterals on your phone (it’s different for every app). We keep only a scrambled one-way fingerprint of it, never the ID itself, to give each phone the free coach offers (the welcome week and the free first message) once. See “Free offers, once per person” below.
- Crash and error reports, automatically: if the app crashes or hits an error, a report goes to Sentry (our error-reporting service) with the error, the app version, your phone model and Android version, and a random account number. It never includes your name, email, IP address, screenshots or what you entered. We use it only to find and fix bugs.
- Bug reports, if you send one: what you wrote, a screenshot of the screen you were on and a photo if you add one (you can remove either before sending), the screen’s name, the error it was opened from, the app’s recent log from this session (with sign-in tokens and email addresses taken out), and your app version, phone model, Android version and language. We use it only to find and fix the problem and to answer you in the app.
Messages from us: if you write to us or send a bug report, our reply (an email or the answer shown under Me → Your reports) is kept while your account exists, and deleted with it.
About your subscription: purchases (Laterals Pro and coach message packs) go through Google Play and RevenueCat, which manages them for us. RevenueCat receives a random ID for your account, your email (so we can find your purchases when you write to us) and your purchase history; we read your plan and its status (active, expired and so on) from it to unlock Pro. We never see your card or payment details; Google Play handles payment.
Technical data: our server keeps short logs of requests (time, the part of the app used, errors, and your IP address as received by our hosting) to keep Laterals working and secure.
On your phone only: your settings (units, haptics, sounds) and timers for workout rest and recipe steps. These stay on your device.
What we don’t collect: no advertising ID, no ads, no analytics or tracking tools (only the crash reports above), no contacts, no photos (except ones you add to a bug report or a form check), no precise location. Your country is the one you choose in the app.
Sensitive data
Some of what you can enter is sensitive: health-related data (body weight, injuries, training) and your religious diet, which can reveal your religion. We use it only to give you Laterals’ features: your targets, plans, recipes and coach advice. Your religious diet and foods to avoid are treated as rules the coach never breaks. Entering the optional answers is your choice; by entering them you give your explicit consent for this use. You can remove them any time in Me → Your plan, which withdraws that consent for the future.
Why we use it, and on what basis
| Use | Legal basis (where the law asks for one) |
|---|---|
| Run your account and the app: store and show your training, food and progress; sync it | Our contract with you (the Terms of Service) |
| Personalise targets, plans, recipes and coach replies | Contract; for sensitive data, your explicit consent |
| Provide Pro and the free plan’s limits; check purchases with RevenueCat and Google Play | Contract |
| Keep Laterals secure and working: logs, abuse protection, coach usage limits | Our legitimate interest in a safe, working service |
| Answer your emails and requests | Contract, or our legitimate interest |
| Keep records the law requires (for example about payments) | Legal obligation |
We don’t sell your data, don’t use it for advertising, and don’t use it to make decisions that have legal or similarly significant effects on you. The coach’s suggestions are only suggestions; nothing changes in your plan unless you tap Save.
The AI coach
When you talk to the coach, your message and the parts of your data it needs to answer (your profile, recent workouts, records, body weight trend, coach notes and the conversation so far) are sent to Google (Gemini API) to write the reply. Google processes it to generate the answer and returns it to us. We use the paid API tier, under which Google doesn’t use your data to train its models.
If you add photos to a message for a form check (Pro), they are made smaller on your phone, sent to Google with that one message so the coach can see them, and not stored by us: the conversation keeps your words, not the photos.
Your conversation is stored on our server so the coach remembers it. You can clear it any time (Settings), and delete any coach note.
Health Connect (Android)
Only if you turn it on (Me → Health Connect), Laterals writes each workout you finish to Health Connect on your phone: its name and its start and end time, as a strength-training session. Other apps you allow in Health Connect, such as Google Fit, can then see it. Laterals reads nothing from Health Connect. Turn it off in Laterals, or remove Laterals’ access and its data in the Health Connect app, at any time. Laterals’ use of information received from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements.
Who processes your data for us
These companies process data only to provide their service to us, under their data-processing terms:
| Who | What for | Where |
|---|---|---|
| Google (Google Cloud) | Hosting our server; server logs | United States |
| Neon | Our database (managed PostgreSQL) | United States |
| Google (Sign-In, Play Billing) | Signing in; subscriptions and payments | Google’s global infrastructure |
| RevenueCat | Managing purchases: your account’s random ID, email and purchase history | United States |
| Google (Gemini API) | AI coach replies | Google’s global infrastructure |
| Resend | Sending the emails we send you, and delivering bug reports to our inbox | United States |
| Sentry | Receiving crash and error reports (no name, email or IP address) | United States |
| GitHub | Exercise images your phone loads from a public library (GitHub sees your IP address) | Global |
We may also share data if the law requires it (for example a valid court order), or to protect someone’s safety, and only as much as needed. If Laterals is ever transferred to someone else, your data would go with it under this policy, and we’d tell you first.
International transfers
Our servers are in the United States, so your data is processed there and wherever our providers operate. Where the law requires it (for example for users in the EU or UK), these transfers rely on the providers’ standard contractual clauses or equivalent safeguards.
How long we keep it
- While you have an account: what you entered, so the app can show it to you.
- When you delete your account: everything above is deleted from our database straight away. Copies in server logs (kept 30 days) and in the database’s restore history (never longer than that) expire on their own schedule, within 30 days.
- Bug reports: their screenshots and photos are deleted 60 days after we close the report; the rest stays while you have an account.
- Purchase records that the law requires us to keep may be kept longer, only for that purpose.
- Free offers, once per person: when a new account gets the free welcome week and first coach message, we record keyed one-way fingerprints (HMAC-SHA256) of your Google account ID and of your phone’s app ID. They can’t be turned back into the IDs, aren’t linked to your account, and hold nothing else. We keep them after you delete your account, only so that deleting and signing up again, or signing up more accounts on one phone, doesn’t get the free offers again (our legitimate interest in preventing abuse of free AI use, which costs us money per message).
Your rights
You can, at any time:
- See and correct your data in the app, or ask us for a copy.
- Export your data (Me → Export my data: a full Laterals backup, or your workouts as a CSV).
- Delete parts of it in the app (workout history, routines, coach chat, coach notes, answers in Your plan) or your whole account (below).
- Withdraw consent for sensitive answers by removing them.
- Object to or ask us to restrict a use of your data.
- Complain to your local data-protection authority.
Email support@laterals.app from your account’s email address. We answer within 30 days, and it’s free.
Deleting your account
- In the app: Me → Danger zone → Delete account. This deletes your account and all its data at once and can’t be undone.
- Without the app: email support@laterals.app from your account’s email address with the subject “Delete my Laterals account”. We’ll delete it within 7 days and confirm by email.
Deleting your account also deletes your purchase history at RevenueCat. It doesn’t cancel a Laterals Pro subscription: cancel it in the Play Store (Payments & subscriptions).
Security
All traffic between the app and our server is encrypted (HTTPS). Access to the server and database is limited to us, with strong credentials kept in a secrets manager. No system is perfectly secure; if a breach affects your data, we’ll tell you and the authorities as the law requires.
Children
Laterals is for people 16 and older. We don’t knowingly collect data from anyone younger. If you think a child under 16 has given us data, email us and we’ll delete it.
Changes
If we change this policy we’ll update the date at the top, and for important changes we’ll tell you in the app before they apply.