Privacy policy
Carga is an app for logging strength training workouts, made by VN Data Solutions LTDA. This page explains what data the app uses, what for, who it is shared with and how to delete all of it.
Without an account
You can use Carga without creating an account. From version 2.2.2, the app keeps a copy of your workouts, plans, weights and measurements on our server, linked to an anonymous identifier the app creates itself, with no name, email or phone number. That way nothing is lost if something happens to your phone. When you create an account or sign in to one, the anonymous identifier is deleted and the data moves to your account. Progress photos and Apple Health data stay on your phone. Generating a workout, importing pasted text and reading a photo of a workout sheet work as before: what you type on those screens, or the photo of the sheet, goes to our server to be processed and is not stored there.
With an account
You can sign in with Apple or create an account with an email and password. We store:
- if you sign in with Apple: your Apple account identifier, your name and, if you share it, your email;
- if you create an account with email: your name, your email, your password, stored only as a hash (not even we can read the password), and your phone number, if you provide it;
- your workouts: plans, exercises, sets, weights, reps, the time of each set and each exercise, effort ratings and comments;
- measurements and body weight, if you log them (progress photos stay only on your phone and do not come to the server);
- if you are a trainer: professional name, CREF, state, specialties and your bio;
- the invite links and shared workout links you create.
We use this data to sync your workouts across devices and for the trainer features. If you provide a phone number, it is used to identify you and to contact you about your account, for example in support. We do not sell data, we do not show ads and we do not use your data to track you across other apps or websites.
Your trainer
When you connect a trainer, they see your workouts, sets, weights, records and comments, including live during a workout. They can only edit your plan if you allow it, and they only see your measurements if you turn that option on. Progress photos are not shared. You can change the permissions or disconnect your trainer at any time, in You → Your trainer.
Apple Health
If you turn on the Apple Health connection, Carga saves each finished workout to Health as a strength training workout, so that apps like WHOOP and Garmin can read it. If you allow it, Carga also reads your heart rate, heart rate variability, resting heart rate and sleep from Health, to show your heart rate on each exercise and the day's readiness. Health data stays on your iPhone: it is not sent to our server, it is not used for advertising and it is not shared with third parties.
Artificial intelligence
To generate a workout, understand a pasted workout or read a photo of your gym's workout sheet, we send what you wrote on those screens (goal, days, time, experience, place, the optional note or the pasted text) or the photo of the sheet to Anthropic, which provides the Claude model. The app asks for your permission before the first time it sends anything. We do not send your name or your email. The photo is not stored, and Anthropic does not use this data to train models.
Who processes data for us
- Railway (servers and database, in the United States);
- Anthropic (generating and reading workouts with AI, in the United States);
- Apple (sign-in).
Our server logs each request (IP address, device, what was requested and how long it took) and what happens in the app with your account, such as signing in, syncing, saving a workout or generating a workout with AI, linked to the account identifier. We use these logs to limit abuse, fix errors and understand how the app is used. They do not include your name, email, phone number, notes or the text of your workouts, and they are kept for up to 30 days.
Deleting your account
In You → Delete my account, the app deletes your account and all of your data from our server right away: workouts, measurements, invites, links and the connection with your trainer or clients. Whatever is only on your phone goes away when you delete the app. If you use Carga without an account, You → Delete my data deletes from our server and from your phone the data linked to the anonymous identifier. You can also export your workouts to a spreadsheet first, in You → Export my workouts.
Your rights
Under Brazil's General Data Protection Law (LGPD), you can request access to, correction, portability or deletion of your data, and find out who it has been shared with. You can do most of this in the app itself; for the rest, write to viniciusnunes.tavares@gmail.com.
Children
Carga is not made for children under 13.
Changes
If this policy changes, the date at the top changes with it. Changes that affect how we use your data are also shown in the app.