Privacy Policy
Last updated 30 October 2026
Aunesti is a training app that fitness studios use with their trainers and clients. This policy explains what personal information we collect, why, who sees it, where it is kept, and the choices you have. It follows Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Who we are
Aunesti is run by [LEGAL NAME], [MAILING ADDRESS]. Our privacy officer is accountable for this policy and answers every privacy question and request: admin@aunesti.com.
Your studio invites you to Aunesti and has its own agreement with us. Where your studio collects information about you for its own purposes, it is responsible for that too.
What we collect
- Account: your name, email, password (stored only as a secure hash) and passkeys.
- Training: workouts, exercises, sets, weights, body weight, plans, session bookings and cancellations, and your progress.
- Intake answers: what you tell your studio when you join, such as goals, experience, injuries and health notes.
- Messages: chat with the AI coach, voice recordings and their transcripts.
- Session ratings: ratings you give after a session. Trainers see them without your name.
- Device: push notification subscriptions you turn on, and technical logs (IP address, browser, errors) kept for security.
Why we use it
- To run your training: plans, logging, scheduling and progress.
- So your trainer and studio can coach and manage you.
- To write plans and answer questions with AI, which your trainer reviews.
- To send the emails and notifications the app needs, such as invites and session changes.
- To keep the app secure, fix problems and meet legal duties.
We don't sell your information, show you ads, or use it for anything unrelated to the app.
Health information and your consent
Fitness, body and health details are sensitive. We collect them only with your express consent, which you give when you tick the box to agree to this policy. If your studio set up your account, the studio asks for your consent before entering these details. You can withdraw consent at any time by emailing admin@aunesti.com; we will then close your account, as the app can't work without this information.
Aunesti is not a health care provider and does not keep medical records.
Who can see your information
- Your trainer, and your studio's managers and admins.
- A small number of Aunesti staff, only to support you or keep the service running.
- The service providers below, only to do their job for us, under contracts that require them to protect it.
- Authorities, only where the law requires it.
AI
When you or your trainer use the AI coach or voice messages, the text or audio is sent to our AI providers in the United States to produce an answer or a transcript. Under our agreements with them, they don't use it to train their models. AI can make mistakes, which is why your trainer reviews plans before you train.
Where your information is kept
Our database and app run in Canada. Some providers process information outside Canada, mainly in the United States. There, it is protected by our contracts but is subject to local laws, and may be accessed by courts or authorities of that country.
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, accounts and stored files | Canada |
| Vercel | Runs the app | Canada (static files are cached worldwide) |
| OpenAI | The AI coach and plan writing | United States |
| AssemblyAI | Turning voice messages into text | United States |
| ElevenLabs | Turning voice messages into text | United States |
| Resend | Sending account and session emails | United States |
| Cloudflare Turnstile | Checking that a person, not a bot, is signing in | Worldwide |
| Plausible | Counting page visits, without cookies or tracking you | European Union |
| Apple, Google, Mozilla | Delivering push notifications you turned on | Worldwide |
How long we keep it
We keep your information while your account is open. When you ask us to delete your account, or your studio's agreement with us ends, we delete it within 90 days, unless the law requires us to keep part of it. Backups are overwritten within 30 days after that.
How we protect it
Information is encrypted in transit and at rest. Access is limited by role, and the database checks every request against who you are and which studio you belong to. No system is perfectly secure; if a breach creates a real risk of significant harm to you, we will tell you and the Office of the Privacy Commissioner of Canada as soon as we can.
Your rights
You can ask us to:
- tell you what information we hold about you and give you a copy,
- correct anything that is wrong,
- delete your account and your information,
- stop sending you emails you don't need.
Email admin@aunesti.com from the address on your account. We answer within 30 days, at no cost. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada.
Age
Aunesti is for people 16 and older. We don't knowingly collect information from anyone younger; if we learn we have, we delete it.
Cookies
We use only the cookies that keep you signed in. Our visit counter, Plausible, uses no cookies and doesn't track you across sites.
Changes
If we make a material change, we'll update the date above and ask you to agree again in the app. The Terms of Service explain the rules for using Aunesti.
Contact
[LEGAL NAME], [MAILING ADDRESS]. admin@aunesti.com