Notra Privacy Policy

Last updated: ⟦date it goes live⟧

Who we are

Notra is made by Acey Ventures Ltd, a company registered in England and Wales (company number 17376567), at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ. We decide how your data is used, which makes us the “controller” under UK data protection law. ICO registration number: ⟦add once registered⟧. Contact: [email protected]

The short version

• You write workout notes. AI from Anthropic reads them and turns them into sessions, sets and progress.
• Your notes can include health details like injuries or soreness. We only use those with your consent, which you give before Notra first reads your notes.
• We don't sell your data and we don't use it for ads.
• You can delete your account and everything in it from our database at any time in Settings.

What we collect

Your account: your email address and password, or your Sign in with Apple identity (if you use “Hide My Email”, we get an Apple relay address). Your first name, if you give it or share it through Sign in with Apple. Your settings (units, date format, training frequency, plan). When you sign in, our sign-in provider (Supabase) may record your IP address and device type for security.

What you write: your workout notes in full; copies of individual note lines, kept with the workouts they describe so we can show and fix them; your Coach messages and Coach's replies; names you give your lifts and choices you make in the app (like merging or moving lifts).

What we work out from your notes: sessions, exercises, sets, weights, reps, personal bests, trends and insights. Sessions you've removed from your notes are kept in the background so your history stays consistent; they're deleted with your account.

Technical and usage data:

• Usage events (like “session saved” or “paywall viewed”), linked to your account id. They never include your notes, lift names or Coach messages. You can turn this off.
• Crash and error reports, linked to your account id. We design these not to include your notes or Coach messages, though rarely an error message from our database or payment provider might include a stored value.
• Technical logs on our servers (errors, timings, lift names, account id).
• A push notification token, if you allow notifications, so we can tell you when an import has finished.
• Records of how much AI each account uses (counts and costs only, never text), so we can control costs and enforce daily limits.

Subscriptions: Apple handles payment; we never see your card details. RevenueCat tells us whether you have Pro, linked to your account id.

If you email us: your email and what you write, held in our support inbox.

Do you have to give us this data?

You need an email address or Apple ID to have an account. Notra can't work without reading your notes, and it can't read them without your consent. Everything else is optional or can be turned off.

Health details in your notes

Workout notes often mention injuries, pain or soreness. UK law treats this as health data (“special category” data), which needs extra protection. We only process it with your explicit consent, which you give before Notra first reads your notes. We use it to read your notes, work out your progress and answer you in Coach.

Withdrawing consent: delete your account in Settings or email us. Editing a note doesn't remove earlier copies, so deleting your account is the way to remove everything. Withdrawing doesn't affect what we did before you withdrew. Notra can't work without reading your notes, so withdrawing means closing your account.

Coach chats

Coach chats are deleted automatically after 30 days. We only read them if you turn on Settings → Help improve Coach (off by default; turn it off any time), or if you ask us to look into a problem with a Coach reply.

How we use AI (Anthropic)

We send data to Anthropic, a US company, in three places:

• Reading your notes: the text of your notes and today's date.
• Coach: your first name, your last 8 weeks of training (including the free text in your notes), recent Coach messages and your new message.
• Your first progress summary: your lift names, sets and the free text from your sessions.

We don't send your email or account id. Under its commercial terms, Anthropic acts as our service provider and doesn't train its AI on this data. It deletes it within 30 days, unless its safety systems flag something as breaking its usage rules, in which case it may keep that for up to 2 years.

AI can make mistakes. Notra's insights and Coach replies are generated automatically and aren't medical advice. We don't use AI to make decisions about you that have legal or similarly significant effects.

Why we're allowed to use your data

• To provide the service you signed up for: your account, reading notes, insights, Coach, notifications and subscriptions.
• Your explicit consent: health details in your notes and Coach chats; and reading your Coach chats to improve Coach, if you turn that on.
• Our legitimate interests (balanced against your rights): keeping Notra secure and working (crash reports, logs, abuse and cost limits), understanding which features get used (with an off switch), and handling support emails. We never rely on legitimate interests for health details.

Who else gets your data

These companies process data for us and may only use it to provide their service to us:

Apple handles Sign in with Apple, payments and app distribution under its own privacy policy, as a separate company rather than on our behalf.

We'd only share data with anyone else if the law requires it, or as part of selling or merging the business (in which case this policy would continue to apply).

Transfers outside the UK

When data goes to the USA, it's protected either by the UK–US “data bridge” (for companies certified under it) or by the UK's International Data Transfer Agreement or UK Addendum to the EU standard contractual clauses. Email us for details of the safeguard used for each company.

How long we keep things

• Account, notes and training data: until you delete your account.
• Coach chats: deleted automatically after 30 days.
• Note text used during an import: deleted when the import finishes.
• Choices about individual note lines: deleted about a week after they stop applying to your notes.
• Abuse-limit records: about 25 hours.
• Server logs: about 7 days, kept by Supabase.
• Push token: until you sign out or delete your account.
• AI cost records: kept up to 6 years as business records. When you delete your account, your account id is removed, so they no longer link to you.
• Usage analytics: ⟦check PostHog retention⟧.
• Crash reports: ⟦check Sentry retention⟧.
• Support emails: up to 2 years after the conversation ends.
• Backups: our database is backed up daily and backups are kept for 7 days, so deleted data can stay in a backup for up to 7 days.

On your phone

Notra stores a copy of your notes and recent data on your phone so the app works offline, plus an analytics id and any usage events waiting to be sent. Signing out doesn't delete your notes (so an unsaved note isn't lost). Deleting your account removes them, and so does deleting the app.

Analytics and your choices

Usage analytics are on by default. We tell you about them on the welcome screen, where you can turn them off straight away, or turn them off any time in Settings → Share usage data; that stops both the app and our servers sending usage events for your account. Crash reports stay on because we need them to keep the app working; they're allowed without consent because they detect technical faults.

Your rights

You can ask us to: give you a copy of your data; correct it; delete it; send it to you in a format you can reuse; stop or limit some uses of it; or stop using it where we rely on legitimate interests. You can withdraw consent at any time. Email [email protected] and we'll reply within one month.

Deleting your account

Settings → Delete account permanently deletes your account, notes, training data and Coach chats from our database, tells RevenueCat to delete your subscription record, and removes Notra's Sign in with Apple access. Analytics and crash reports already sent stay with PostHog and Sentry until they expire, linked only to your old account id; email us if you'd like those deleted too. Deleting your account doesn't cancel an Apple subscription — cancel that in your App Store settings.

Complaints

If you're unhappy with how we've handled your data, email [email protected]. We'll acknowledge your complaint within 30 days, look into it, and tell you the outcome without undue delay. You can also complain to the Information Commissioner's Office (ico.org.uk (opens in a new tab), 0303 123 1113).

If you live in the US

Our Health Data Policy (notra.fit/health-data) explains your extra rights over health-related data.

Age

Notra is for people aged 18 and over. If we learn someone under 18 is using it, we'll delete their account.

Security

Data is encrypted in transit, each person can only access their own data, our service accounts are protected with two-step sign-in, and your sign-in details on your phone are stored encrypted.

Changes to this policy

If we make significant changes, we'll tell you in the app before they take effect. The date at the top shows when it was last updated.