Privacy Policy
Effective date: April 7, 2026 · Last updated: August 12, 2026
This Privacy Policy explains how Gatluak D Tholbok ("we," "us," "our"), the provider of the BLES mobile application (the "App"), collects, uses, and shares information when you use the App. By using BLES, you agree to the practices described here.
BLES shows no advertising, does not sell your data, and does not track you across other companies' apps or websites. We do measure which of our own advertisements led to an install (Section 6). We do not use the advertising identifier (IDFA).
1. Information We Collect
We collect only what we need to run BLES and the features you use.
| Category | Examples | Why |
|---|---|---|
| Account information | Email address and display name, provided when you sign up with email, Google, or Apple. | To create and secure your account. |
| Health & fitness data | Workouts, exercises, sets and reps, cardio sessions, nutrition logs, body metrics, and onboarding details such as height, weight, and gender. With your permission, heart-rate data read from Apple Health / Google Health Connect. | To track your training and progress and personalize the experience. |
| Precise location | GPS location during an active run or cardio session, to record route, distance, and pace. We do not access location when no workout is active. | To provide GPS workout tracking. |
| Photos | Meal photos (for AI nutrition logging) and progress photos that you choose to take or upload. | To log nutrition and track visual progress. |
| Purchase information | Your subscription status and history. Payment is processed by Apple/Google — we never receive your card details. | To manage your premium access. |
| Usage data | App interactions and feature usage, and a unique app-instance identifier, collected via analytics. You can turn this off (see Section 6). | To understand what to improve. |
| Content you submit | Notes, community posts, comments, and messages you send to the AI coach. | To provide social and AI features. |
2. How We Use Your Information
- Provide, maintain, and secure the App and your account.
- Track your workouts, nutrition, and progress, and personalize recommendations.
- Provide AI coaching, AI program generation, and AI food recognition.
- Process your subscription and provide customer support.
- Understand usage and improve the App (analytics).
- Comply with legal obligations and prevent fraud or abuse.
We do not use your information for third-party advertising or cross-app tracking.
3. Apple Health & Google Health Connect
If you grant access, BLES reads activity data (such as heart rate) from Apple Health / Google Health Connect to enrich your workout data, and may write workout data back. Health data accessed through these services is used only to provide health and fitness features within BLES. We never use it for advertising or marketing, never sell it, never share it with third parties for their own purposes, and never store it in iCloud. You can revoke access at any time in your device's Health settings.
4. How Your Information Is Shared
We do not sell your personal information. We share information only with service providers who process it on our behalf to run BLES, and where required by law. Our key service providers ("sub-processors") are:
| Provider | Purpose | Their policy |
|---|---|---|
| Supabase, Inc. | Backend database, authentication, file storage, and serverless functions. | supabase.com |
| Google (Firebase Analytics) | Product analytics (feature usage). Not used for advertising; no IDFA. | firebase.google.com |
| Apple (Apple Search Ads) | If you installed the App after tapping an advertisement in the App Store, Apple tells us which advertising campaign, ad group and search keyword led to that install. Requested once, on first launch. No advertising identifier (IDFA) is used and no App Tracking Transparency permission is requested, because Apple provides this without either. | apple.com |
| RevenueCat, Inc. | Subscription management and entitlements. | revenuecat.com |
| Mapbox, Inc. | Maps and route visualization for activity tracking. | mapbox.com |
| OpenAI, L.L.C. | Processes meal images and prompts to power AI food recognition and coaching. Requests are sent through our secure backend. | openai.com |
| Anthropic, PBC | Processes your inputs to power AI coaching and program generation. Requests are sent through our secure backend. | anthropic.com |
| Apple / Google Sign-In | Authentication, if you choose those sign-in methods. | apple.com · google.com |
| Apple App Store / Google Play | Payment processing for subscriptions. | Apple · Google |
We may also disclose information to comply with the law, enforce our terms, or in connection with a merger or acquisition. If that happens, we will notify you and this policy will be updated.
5. AI Features
When you use AI features (coaching, program generation, food recognition), the relevant inputs — for example a meal photo, your workout data, or your message — are sent through our secure backend to the AI providers listed above to generate a response. We do not allow these providers to use your content to train their models where an opt-out is available, and we send only what is needed for the feature.
6. Your Choices, Analytics Consent and Install Measurement
- Usage analytics: if you are in the EEA, the United Kingdom or Switzerland, collection is off until you turn it on — we ask when you first open the App. Everywhere else it is on with this disclosure. Either way you can turn it off at any time in Settings → Privacy → Usage data.
- What usage analytics covers: app activity such as screens opened and features used; that a workout or meal was logged, and how many exercises a session included; and whether the account is on the free or premium plan. It does not include your name, email or password, progress photos or notes, the individual exercises, weights or foods you log, how much you lifted or your calorie counts, your location, or your contacts.
- Install measurement: we advertise the App, including on the Apple App Store and Google Play. When an advertisement leads to an install we record which advertisement it was, so we can tell which advertising is worth paying for. This is separate from the usage-analytics setting above and is recorded in all regions, for two reasons: Apple's attribution token exists only for the first 24 hours after installation, so it cannot wait for a decision made later; and it describes the origin of the install, not your activity inside the App. Legal basis: our legitimate interest in knowing which advertising actually brings people to the App. It is not shared with advertising networks for targeting and is not used to build a profile of you.
- No third-party ads in the App: the App itself shows no advertising, and there is no cross-app or cross-site ad tracking. We do not use the advertising identifier (IDFA) and never ask for App Tracking Transparency permission.
- Permissions: location, camera, photos, Bluetooth, and Health access can each be granted or revoked in your device settings.
7. Your Rights
Depending on where you live (including under GDPR and CCPA/CPRA), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can delete your account and associated data from within the App, or contact us at hello@blesapp.com. We will respond within the timeframe required by applicable law. We do not sell or "share" personal information as defined under California law.
8. Data Retention
We keep your information for as long as your account is active or as needed to provide BLES. If you delete your account, we will delete or de-identify your personal data within 30 days, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements.
9. Security
We use industry-standard safeguards to protect your information in transit and at rest, including encryption in transit (TLS/SSL) and at rest. No method of transmission or storage is 100% secure, but we work to protect your data and limit access to it.
10. International Transfers
Your information may be processed in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards for such transfers.
11. Children's Privacy
BLES is not directed to children under 13, or under the minimum age of digital consent in your country if that age is higher, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the new version here and update the "Last updated" date. Material changes will be communicated in the App or by email.
13. Contact Us
If you have questions about this Privacy Policy or your data, contact us at:
- Gatluak D Tholbok
- 26 Park Street, Footscray, VIC 3011, Australia
- Email: hello@blesapp.com
- Website: www.blesapp.com
This policy is governed by the laws of Victoria, Australia.