Privacy Policy

This Privacy Policy describes how Venex Labs (“we”, “us”, or “awekn”) collects, uses, and protects the information you provide when you use the awekn mobile app or visit awekn.com (collectively, the “Service”). The data controller is Venex Labs, registered in India, contact areeb@awekn.com.

1. Information We Collect

Account data. When you sign up, we collect your email address, chosen username, and (if you sign in with Apple or Google) the identifier your provider returns. If you sign in with Apple and choose to share your name, we store the name you return on first sign-in only.

Fitness and body data you enter. Workout sessions, exercises, sets, reps, weights, personal records, body measurements, body weight, body fat percentage, progress photos, cardio sessions, calorie and macro logs, water intake, journal notes, and any regimen entries you type. Regimen entries are free-text and never selected from a preset catalog. We store exactly what you type.

Camera and photo library. awekn uses your device camera when you tap “Take a photo” to capture a progress photo, a workout selfie, or a custom share-card background. awekn reads from your photo library when you tap “Choose from library” to pick one of those images. awekn writes to your photo library only when you tap “Save” on a finished share card. We never scan, enumerate, or upload photos you do not explicitly select.

Progress photos. If you choose to upload progress photos, the image file is stored in our Amazon Web Services (AWS S3) private bucket, keyed by your account identifier. Photos are never made public and are served only via short-lived signed links to you.

Apple HealthKit data (iOS only, optional). If you grant permission on iOS, awekn reads your step count and your walking and running distance from Apple Health in order to show daily activity in the Cardio section alongside your lifts. HealthKit data is processed on your device, surfaced in the awekn cardio log you control, and is never used for advertising, marketing, research, or sold to any third party. We read HealthKit only; awekn never writes to Apple Health. You can revoke HealthKit access at any time in iOS Settings, under Privacy & Security, Health.

Google Health Connect data (Android only, optional). If you grant permission on Android, awekn reads your steps, distance, and active calories burned from Google Health Connect to surface daily activity in the Cardio section alongside your lifts. Health Connect acts as an on-device hub that may aggregate data from other apps and devices you have connected on your phone (for example Samsung Health, Fitbit, Garmin Connect, Mi Fitness, or a Pixel Watch). The data is processed on your device, surfaced in the awekn cardio log you control, and is never used for advertising, marketing, research, or sold to any third party. awekn reads from Health Connect only and never writes back. You can revoke Health Connect access at any time in the Health Connect app or under Android Settings, Apps, Health Connect. Health Connect is not available on Huawei (HMS) devices and on Android versions below 13; on those devices awekn falls back to manual cardio entry.

Purchase data. When you subscribe to awekn Pro, we receive from the Apple App Store (on iOS) or the Google Play Store (on Android), relayed through our subscription-management provider (RevenueCat), a transaction identifier, the subscription product, renewal and expiration timestamps, trial and grace-period flags, and refund status. We do not receive your credit-card number, bank details, Apple ID password, or Google account password. Those stay with Apple or Google respectively.

Device and diagnostic data. When the app encounters an unexpected error, we send a crash report to Sentry, our error-monitoring provider. These reports contain the stack trace, the device model and OS version, the app version, and a pseudonymous account identifier. Before any report is uploaded we scrub authentication tokens, signed storage URLs, and similar sensitive values. Sentry does not receive your fitness, body, nutrition, health, or photo data. We use Sentry strictly to find and fix crashes and do not use it for advertising, marketing, or behavioral analytics.

Product analytics. awekn uses PostHog, a privacy-friendly analytics processor, to understand at an aggregate level how users move through the app. When you open the app, sign up, view the paywall, start a trial, subscribe, or complete a workout, we send PostHog an event name (for example app_opened, signup_completed, paywall_viewed, workout_completed) along with a pseudonymous account identifier (your Supabase user id) and a small number of non-personal context fields (such as workout duration in seconds, exercise count, or whether the trial flag was set). PostHog never receives the names of foods you log, the values of your body measurements, your progress photos, your personal records, your custom regimen text, your push token, or your email. PostHog data is hosted in the United States. We use PostHog strictly to improve product flow, conversion, and user experience; PostHog does not perform cross-site tracking, ad targeting, or profile-building, and we do not sell PostHog data to third parties.

Transactional email. awekn uses Resend, an email delivery processor, to send only service-related emails tied to your account state: a welcome email shortly after you subscribe, a receipt at each successful renewal, an alert if your payment method has a billing issue, a reminder before your free trial ends, and a one-time offer to return if your subscription has expired. We send Resend your email address and a first-name token solely for delivery and personalization. Resend records the delivery status (delivered, bounced, deferred) for up to 90 days for diagnostic purposes and does not use the address for any other purpose. We do not send marketing newsletters, promotional broadcasts, or product announcements through Resend or any other channel.

2. How We Use Your Information

We use your data solely to operate awekn: to authenticate you, to display your progress in the app, to sync your data across your devices if you choose, to grant or revoke your subscription entitlement, and to respond to your support requests. We do not sell, rent, trade, or share your personal data with advertisers or data brokers. Your fitness and health data is never used to train any machine-learning model.

3. Special-Category Health Data — GDPR Article 9 Disclosure

Some of the data you enter into awekn — specifically your body weight, body fat percentage, body measurements, progress photos, calorie and macronutrient intake, and any step or distance figures we read from Apple HealthKit or Google Health Connect — reveals information about your physical health. Under Article 9 of the EU General Data Protection Regulation (GDPR) and the equivalent provisions of the UK GDPR and Swiss FADP, this is “special category” (sensitive) personal data and requires a stronger legal basis than ordinary personal data.

The legal basis we rely on for this special-category data is your explicit consent under Article 9(2)(a) GDPR. Before you create an account in the awekn app, we present a dedicated, unbundled consent screen that names the categories of health and body data we will process, the purposes (showing your progress to you, calculating maintenance calories, syncing across your devices), and the processors involved. We log this consent against your account with a timestamp and the policy version you accepted. You can withdraw this consent at any time from Settings > Account > Privacy & Consents, which will delete the relevant categories of data from our systems. Withdrawal does not affect the lawfulness of processing before the withdrawal.

Workout-only data (sets, reps, weights, exercises, RPE) is processed under contract (Article 6(1)(b) GDPR) and does not require Article 9 consent. We separate the two so that you can use the workout log without granting health-data consent, although several features (Maintenance Calculator, body composition charts, cardio strip) require Article 9 consent to function.

4. Legal Bases (GDPR, UK GDPR, Swiss FADP, India DPDP)

We process your data under the following legal bases:

• Performance of the contract (GDPR Article 6(1)(b)) when you create an account, log workouts, subscribe to awekn Pro, and we deliver the corresponding service.
• Explicit consent (GDPR Article 6(1)(a) and Article 9(2)(a)) when you grant the health-data consent described in Section 3, when you enable optional permissions such as Apple HealthKit, Google Health Connect, camera and photo library access, push notifications, or upload progress photos.
• Legitimate interests (GDPR Article 6(1)(f)) for keeping the Service secure, detecting and preventing abuse, fixing crashes via Sentry, and understanding aggregate product usage via PostHog. We have weighed these interests against your privacy rights; the data shared is pseudonymous, minimized, and never used to build a behavioral profile or target you with advertising.
• Compliance with legal obligations (GDPR Article 6(1)(c)) including Apple App Store and Google Play Store requirements, tax and accounting record-keeping for subscription transactions, and responses to lawful requests from public authorities.

5. Where Your Data Lives

Your data is stored in:

• Supabase (PostgreSQL, hosted on AWS in the US East region) for your account, fitness logs, body measurements, subscriptions state, and all structured data. Access is gated by Row-Level Security so only you can read or write your own rows.
• AWS S3 (private bucket, US East region) for progress photo files. Photos are keyed by your account identifier and served only via short-lived signed URLs.
• Your device (encrypted local SQLite) as a primary copy so awekn works offline. Local and cloud copies sync automatically when online.

6. Subprocessors

awekn uses the following subprocessors strictly to operate the Service. Each row lists the data shared, the purpose, the country where the data is hosted, and the legal mechanism we rely on for any transfer outside the European Economic Area, United Kingdom, or Switzerland.

We do not integrate any advertising networks, behavioral analytics SDKs, or social-media pixels.

On-device data sources via Apple HealthKit and Google Health Connect. On iOS, HealthKit may relay data into awekn from other apps and devices you have separately connected on your phone (Apple Watch, third-party fitness trackers). On Android, Health Connect plays the same role for Samsung Health, Fitbit, Garmin Connect, Mi Fitness, Pixel Watch, and others. awekn does not have a direct integration or business relationship with any of these providers and only sees the data that you have permitted Apple Health or Health Connect to share, on your device.

7. Data Retention and Deletion

Your fitness, body, and account data is retained while your account is active. You may delete your account at any time from Settings > Account > Delete Account. Deletion permanently removes your profile, workout history, body logs, progress photos, regimen entries, and all other account-scoped rows from our database and from S3. This action is irreversible.

Username reservation after deletion. To prevent impersonation of returning users, we retain a one-way lowercase hash-equivalent of your chosen username in a reserved-usernames index after you delete your account. We do not retain the rest of your profile or any content. If you later return to the Service, you may reclaim your username by contacting us at areeb@awekn.com.

Subscription records. Even after you delete your account, we may retain a minimal record of the anonymized subscription event (event id, product, timestamps) for up to 7 years where required for tax and audit obligations. These records do not identify you personally.

Consent log. The record of consents you have granted under Article 9(2)(a) GDPR (Section 3 above), including timestamps and policy versions, is retained for the lifetime of your account plus a further three years following account deletion, solely to demonstrate compliance with our accountability obligations under Article 5(2) GDPR. The record contains only your user identifier and the consent metadata; it does not contain the health data itself.

8. Your Rights

Subject to the law in your country of residence, you have the following rights regarding your personal data:

• Right of access (GDPR Article 15): obtain a copy of the personal data we hold about you, with a description of how it is processed.
• Right to rectification (Article 16): correct inaccurate or incomplete data.
• Right to erasure (Article 17, the “right to be forgotten”): have your personal data deleted. Most of this is self-serve via Settings > Account > Delete Account.
• Right to restriction of processing (Article 18) and right to object (Article 21).
• Right to data portability (Article 20): receive your data in a structured, commonly used, machine-readable format. awekn provides a JSON export of your full account at Settings > Account > Export Data, in addition to a human-readable PDF report.
• Right to withdraw consent (Article 7(3)) at any time, equally easily as it was given. Settings > Account > Privacy & Consents lets you withdraw the Article 9(2)(a) explicit consent described in Section 3.
• Right to lodge a complaint with your local supervisory authority. EU users may complain to the data-protection authority of their habitual residence; a directory is available at edpb.europa.eu. UK users may complain to the Information Commissioner’s Office. Swiss users to the FDPIC.

To exercise any of these rights, email areeb@awekn.com from the address associated with your account. We respond within 30 days and may extend by a further 60 days for complex requests, telling you within the first 30 days if we need the extension. Exercising a right will not lead to any disadvantage in your use of the Service.

9. Subscription Auto-Renewal Disclosure

awekn Pro is a subscription purchased through the Apple App Store on iOS or the Google Play Store on Android. Payment is charged to your Apple ID or Google account respectively at confirmation of purchase and again at each renewal, unless you cancel at least 24 hours before the end of the current period. Prices are displayed in your local currency at the time of purchase. Your subscription automatically renews at the same price and period until cancelled.

To manage or cancel your subscription at any time:

• iOS: iPhone Settings, your Apple ID, Subscriptions.
• Android: Google Play app, profile icon, Payments & subscriptions, Subscriptions, awekn, Manage.

10. Children

awekn is rated 4+ and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us data, please contact us and we will delete it.

11. Security

All data transmission uses HTTPS/TLS. Database access is gated server-side by Row-Level Security. Photo uploads and downloads are routed through signed URLs generated by a privileged server function. Your phone never holds long-lived cloud credentials. We work to protect your data but cannot guarantee absolute security on the internet.

12. International Data Transfers

Your data is processed on infrastructure located in the United States (primarily AWS us-east-1, hosting Supabase and S3). The data controller, Venex Labs, is based in India. Where personal data of users located in the European Economic Area, the United Kingdom, or Switzerland is transferred outside their jurisdiction, we rely on the transfer mechanisms listed in the Subprocessors table in Section 6.

For transfers from the EEA, UK, or Switzerland to the United States, we rely on each subprocessor’s certification under the EU–US Data Privacy Framework (DPF) where available (AWS, Sentry, PostHog, Resend, Vercel) and on Standard Contractual Clauses with published Transfer Impact Assessments for the remainder (Supabase, RevenueCat). For data accessed by Venex Labs from India (a third country with no current EU adequacy decision), we apply the same Standard Contractual Clauses through our contracts with our US-hosted subprocessors, and we limit such access to the minimum necessary to operate the Service and respond to user support requests.

You may obtain a copy of the relevant safeguards for any specific transfer by emailing areeb@awekn.com.

13. Contacting Us as an EU, UK, or Swiss User

awekn is offered to users in the European Economic Area, the United Kingdom, and Switzerland, while the controller (Venex Labs) is established in India. GDPR Article 27, UK GDPR Article 27, and the Swiss FADP each contemplate an appointed local representative for non-domestic controllers in our position. We are a one-person independent studio and have not yet appointed a paid external representative. We will do so once subscription revenue supports it, and we will update this section with the representative’s name, postal address, and email at that time.

In the meantime, all rights described in Section 8 above remain fully available to you. Email areeb@awekn.com from any address and we will respond within 30 days. You are also entitled at any time to lodge a complaint directly with the supervisory authority of your country of residence; we have linked the directories in Section 8. We commit to cooperating fully with any supervisory-authority enquiry.

14. Service Continuity and Wind-Down Commitment

We recognize that awekn holds months or years of your training data, that you pay for Pro access, and that you deserve confidence in what happens if we ever have to step away from a specific market or shut down the Service entirely. We commit to the following:

• 30-day notice. We will give you at least 30 days’ notice via in-app banner and email before any planned wind-down of the Service in your market.
• Export remains available. The full data export (Settings > Account > Export Data) will remain available throughout the notice window and for at least 90 days after the Service ends, by emailing areeb@awekn.com if the app itself is no longer reachable.
• Pro-rated refunds for EU subscribers. If a wind-down happens during a paid period and your store (Apple or Google) declines to refund the unused portion, we will personally process a pro-rated refund outside the store for EEA, UK, and Swiss subscribers who request one within 60 days of the wind-down notice.
• No silent transfers. We will not transfer your data to any acquirer or successor without notifying you first and giving you the chance to delete instead. Any transfer will preserve the protections in this Policy or use better ones.
• Final deletion. 12 months after a final shutdown, we will permanently delete all remaining user data from our systems and instruct each subprocessor to do the same, subject only to retention required by tax law for anonymized subscription records.

15. Changes to This Policy

We may update this policy from time to time. We will change the “Last updated” date above and, if the changes are material, notify you in the app or by email. Material changes that affect the basis on which we process your health data will additionally trigger a fresh in-app consent prompt before processing continues under the new terms.

16. Contact

For any privacy question, data-subject request, or complaint, contact us at areeb@awekn.com. The Service is operated by Venex Labs (India).