Privacy Policy

Who we are

Sestava is made by SaaSForge s.r.o., IČO 24476137, with its registered office at Rybná 716/24, Staré Město, 110 00 Praha 1, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, file C 441757 (“we”, “us”). We are the controller for the little personal data described here. Contact: [email protected], or by data box (ID 8hbrwph). Website: saasforge.cz.

In short

• We do not run user accounts and do not store your workouts on our servers.
• We do not show ads, sell data or use third-party tracking or advertising SDKs.
• Health data is never used for advertising, marketing or data mining, and is never shared with us.

Data that stays on your device

Your plans, workout history, settings and purchase status are stored locally on your iPhone and Apple Watch. The weight, year of birth and maximum heart rate you enter in Settings → You stay on your iPhone. If iCloud Backup is on, Apple includes them in your device backup under Apple’s privacy policy.

Apple Health

With your permission, Sestava reads your body weight and date of birth (to estimate calories and heart-rate zones), your resting heart rate, heart rate recorded during workouts, and the workouts it saved (to list them in History). It writes workouts, active energy and heart rate. You can change these permissions at any time in the iOS Settings app: Apps → Health → Data Access & Devices → Sestava.

Health data is processed only on your devices. It is not sent to us or to any third party, and it is handled according to Apple’s HealthKit rules.

Plan links and QR codes

When you import a plan from a link, your device downloads the plan file from that address. The server that hosts the file (for example your coach’s website, or sestava.app for shared plans) can see your IP address, as with any web request. Plans hosted on sestava.app contain no personal data about the person who opens them.

Exercise images in plans

A plan’s author can link an exercise to an image on the web. When you open a workout with such an image in Sestava, or reach that exercise during a workout, your iPhone downloads the image from the address in the plan: a server the plan’s author chose, not ours. That server sees the request as it would any web request: your IP address, the time and the standard request headers, which include the app’s name and version and your iOS version. Sestava adds no account, device or advertising identifier, and we receive nothing from the request. As in a web browser, the app keeps a cookie that server sets and sends it back only to that server. The Apple Watch app and Sestava Studio on this website do not load these images, and a plan you review before importing it shows none.

Describe a workout

The workout description you type or dictate is processed by Apple Intelligence on your iPhone. It is not sent to us. Dictation is handled by Apple under Apple’s privacy policy.

Purchases

Sestava Pro is sold through the App Store. Apple processes the payment. We receive only anonymous sales reports from Apple and never see your name, Apple ID or payment details.

Diagnostics

If you choose to share analytics with app developers in iOS settings, Apple provides us with aggregated, anonymous usage and crash statistics. You can turn this off in Settings → Privacy & Security → Analytics & Improvements.

This website

The website sestava.app (not the app) uses Cloudflare Web Analytics to count visits and to see which sites people come from. It sets no cookies and stores nothing in your browser, and according to Cloudflare it does not collect visitors’ personal data or use their IP address to recognise or follow them. We see only totals: page views, the sites that link to us, browsers, operating systems, device types and countries.

It is not loaded on plan-link pages (/p/ and /w/ links) or on the 404 “page not found” page, so a shared plan never reaches it. The Sestava app collects nothing of this kind. Legal basis: our legitimate interest in knowing how people find the website (Art. 6(1)(f) GDPR).

The website sets no cookies. It keeps only what your own use of it needs, in your browser, and sends none of it anywhere:

• Your language choice, saved when you switch between English and Czech, so the site opens in that language next time.
• Your Sestava Studio plans and settings, saved by Studio in your browser’s storage (IndexedDB) so they are there when you come back. When Studio first opens, it moves plans saved by its early preview out of the browser’s older storage (localStorage) and deletes the old copy once they are stored.

You can delete all of it by clearing this site’s data in your browser.

Support emails

If you email us, we use your address and message only to reply. We keep support correspondence for up to 24 months and then delete it. Legal basis: our legitimate interest in answering your request (Art. 6(1)(f) GDPR).

Your rights

Under the GDPR you have the right to access, correct and delete your personal data, to restrict or object to processing, and to data portability. Write to [email protected]. You can also lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz).

To delete everything Sestava stores on your device, delete the app. Workouts already saved to Apple Health stay there until you delete them in the Health app.

Children

Sestava is not directed at children under 13 and we do not knowingly collect their data.

Changes

We will post any changes on this page and update the effective date. Significant changes will also be announced in the app’s release notes.