Privacy Policy

WODIQ is a workout planning app. It helps you choose a training type, configure the session, generate a workout, save picked workouts, and optionally use connected training data.

This policy explains what data is used, why it is used, the legal bases WODIQ relies on, and what choices and rights you have.

WODIQ is operated by Tuinstra.DEV in Dronten, Netherlands. For privacy questions, access requests, deletion requests, or other data protection requests, contact marcel@tuinstra.dev.

WODIQ is a product of Tuinstra.DEV. This page will be updated if the responsible controller details change.

Account and session data: WODIQ may create an anonymous device session so the app can remember picked workouts, feedback, preferences, and usage limits. If you later link Apple or Google sign-in, account identifiers may be linked to the same app user.

Workout data: selected sport, duration preference, warm-up and cooldown choices, goal text and parsed goal details, optional guidance notes, generated workout content, picked workouts, public share links, execution notes, coach-style reviews, and workout feedback.

Manual log data: if supported in your build, WODIQ may process text or an optional training-log image you submit and create structured activity context from completed training. Review extracted fields before saving.

Connected provider data: if you connect Garmin or another enabled provider, WODIQ syncs recent activities and related training context such as activity type, duration, distance, heart-rate summaries, recovery, sleep, stress, HRV, or similar metrics when available from the provider. The Garmin section below describes exactly what WODIQ imports from Garmin.

Apple Health data: in the native iOS app, WODIQ can import workout summaries after you grant Apple Health read permission. WODIQ imports normalized workout fields such as type, date, duration, distance, calories, and heart-rate summaries when available.

AI content reports: if you report AI-generated content in the app, WODIQ stores the content reference, content type, reason, source surface, locale, status, timestamps, user or session ownership, and any optional capped note you submit.

Diagnostics and product events: WODIQ may collect technical diagnostics and first-party product events such as errors, app version, device/platform information, sync status, usage/access events, deletion-request status, and AI-report status. Product events use an allowlist and minimal metadata.

WODIQ processes app and session data to provide the app experience, remember selected workouts, enforce usage limits, and keep your training history available. The legal basis is performance of the service you request or WODIQ’s legitimate interest in operating the app.

WODIQ processes connected provider and Apple Health data only after you choose to connect that source or grant the relevant platform permission. The legal basis is your consent and the service request you make by connecting the provider.

WODIQ processes goal text, optional notes, coach-review inputs, execution notes, and optional training-log images only to provide the app features you request, such as goal parsing, workout generation, manual activity logging, or coach-style review.

WODIQ processes AI content reports so support can review reported generated workouts, reviews, or manual analysis results and limit abuse of the reporting flow.

WODIQ processes diagnostics and security logs based on legitimate interests in reliability, abuse prevention, and service security.

WODIQ processes website analytics only after you consent to analytics cookies or similar storage on wodiq.nl. You can reject analytics and still use the website.

WODIQ uses OpenAI as a processor to parse goals, generate workouts, analyze supported manual training logs, and create coach-style reviews. WODIQ sends structured workout context: selected workout settings, goal text, optional training-log images, and the free-text notes you type, such as guidance and execution notes.

When generating a workout, WODIQ can also send your heart-rate and power zone limits with their source and sensor type, the dates those zones were last updated, and up to 5 recent activities described only by sport, duration, and how many days ago they took place.

When reviewing a completed workout, WODIQ sends a summary of that activity: sport, relative day, duration, distance, heart rate, pace or power, training effect, intensity, and lap summaries.

WODIQ does not send GPS or location data, your name, your email address, Garmin activity IDs, or device IDs to OpenAI. Raw provider payloads are not sent. WODIQ calls the OpenAI API with storage of responses turned off (store: false), and OpenAI does not use API data to train its models.

If you report AI-generated content, the report stores a content reference and reason rather than the full generated content, prompt, raw provider payload, cookies, session token, or full health record. Optional report notes are capped and should not contain sensitive details.

Do not submit sensitive medical information, secrets, or information you do not have permission to use. WODIQ uses AI output for training guidance only, not for medical advice.

Connecting Garmin is optional. You can use WODIQ without it. You connect Garmin in the app with your Garmin account (email address and password). WODIQ uses your password only to set up the connection and does not store it. Your Garmin email address is stored encrypted, and WODIQ keeps the Garmin session data on its server only to maintain the connection.

When you connect, WODIQ imports your Garmin activities from the last 90 days and recovery data from the last 7 days. Each later sync fetches the most recent days. Per activity, WODIQ stores the activity summary as Garmin provides it, including activity type, start time, duration, distance, calories, average and maximum heart rate, pace, and training effect, plus power, speed, and cadence for cycling. Garmin activity summaries may also contain location coordinates; WODIQ stores them with the activity but does not use them for tracking or advertising and does not send them to OpenAI.

Per day, WODIQ stores recovery data: sleep score and duration, resting heart rate, Body Battery, stress, and HRV status. WODIQ also reads your heart-rate and power zones from Garmin.

WODIQ uses Garmin data only to show your training history, calculate your training profile and recommendations, and generate and review workouts. WODIQ does not sell Garmin data and does not use it for advertising or marketing.

If you send a workout to Garmin, WODIQ creates that workout in your Garmin Connect account and schedules it on the date you choose. Workouts already sent remain in Garmin Connect until you remove them there.

You can disconnect Garmin in Settings at any time. Disconnecting immediately deletes your stored Garmin email address, the Garmin session data, the connection, imported Garmin activities, recovery and sleep data, and the training profile and recommendations derived from them. Your saved workouts remain, without their link to Garmin.

WODIQ keeps Garmin data for as long as Garmin is connected, until you disconnect or a deletion request for your account is processed. After that, the data only remains in backups until they rotate out, as described under Retention and deletion.

Provider credentials, tokens, and access data are sensitive. WODIQ uses them only to create or maintain the provider connection, stores provider access data with encryption where supported, and does not use them for marketing, website analytics, screenshots, or advertising.

Sign in with Apple and Apple Health are separate permissions. Apple login identifies your WODIQ account; Apple Health permission is requested locally on your iPhone before workouts are imported. WODIQ reads workout-related HealthKit data only and does not write to Apple Health in this release.

Provider accounts and platform permissions are also governed by the terms and privacy notices of the relevant provider or platform. Disconnecting a provider stops future sync where supported and removes associated imported provider data from WODIQ where the app supports removal.

The WODIQ marketing website uses necessary local storage to remember cookie preferences. This storage is required to respect your choice and does not require analytics consent.

WODIQ loads the self-hosted Umami analytics service on wodiq.nl only after you accept analytics in the cookie banner. Umami helps understand aggregate website traffic, page usage, language choice, and browser-app CTA clicks.

Website payloads contain only a canonical public path and, for agreed CTA clicks, a fixed CTA identifier. Query parameters, fragments, page titles, referrers and form contents are excluded. Umami may derive approximate location and device/browser information when receiving a request. CTA analytics events must not include free-text notes, workout prompts, health data, provider payloads, or sensitive app content. You can reject analytics in the cookie banner or reopen cookie preferences later to withdraw consent.

WODIQ does not use session replay, heatmaps, fingerprinting, ad pixels, or cross-site tracking identifiers on the marketing website.

If you create a share link, the workout linked to that URL can be viewed by anyone with the link. Treat share links as public URLs and do not create or share a link for a workout you want to keep private. Shared workout pages should not include your personal coach review.

WODIQ uses these processors: Hetzner for hosting and the database (EU, Germany); OpenAI for AI generation and reviews; and Sentry for technical error reports (EU region, Germany), which contain no Garmin activity data. The self-hosted Umami analytics service is used only after consent. Garmin, Apple, and Google receive data only when you connect them or sign in with them. App-store handling and payment processing apply only if paid plans are later active. These providers process data only for the relevant service purpose.

The WODIQ servers and database run at Hetzner in Germany, and Sentry processes error reports in its EU region in Germany. The self-hosted Umami instance is operated by Tuinstra.DEV at umami.tuinstra.dev. OpenAI and other providers used for diagnostics or AI generation may process data outside the European Economic Area. Where required, WODIQ relies on appropriate safeguards such as data processing agreements, standard contractual clauses, or provider transfer mechanisms.

WODIQ aims to minimize the data sent to external providers and to avoid sending raw connected-provider payloads to AI providers.

WODIQ keeps app data for as long as needed to provide the app experience, maintain workout history, operate the service, handle deletion or support requests, and meet security or legal obligations.

In Settings, WODIQ v1 offers an account and data deletion request flow. This records a request that support can review for the current account or anonymous device session; it is not an instant hard delete.

A deletion request covers the account or device session, app sessions, provider connections, imported activities, generated workouts, reviews, goals, and training context. Some records may be retained only where needed for legal, audit, fraud-prevention, or billing-evidence reasons.

Workout history, generated workouts, provider imports, and account-linked data are kept until they are removed in the app, disconnected where supported, or a deletion request is processed. Diagnostics, product events, AI content reports, and operational logs are kept only for the period needed for reliability, security, abuse prevention, support, or the limited evidence purposes above.

WODIQ makes encrypted backups on its own infrastructure and keeps 14 daily and 4 weekly copies. Deleted data can remain in those backups until they rotate out. Backups are isolated from normal product access; if disaster recovery restores an older copy, verified deletion requests must be reapplied. Shared links may remain available until the linked workout is removed or the link is otherwise disabled.

Depending on your location and the data involved, you may have the right to access, correct, delete, restrict, object to, or receive a portable copy of your personal data. You may also withdraw consent where processing is based on consent.

To exercise these rights, contact marcel@tuinstra.dev. WODIQ may need to verify that the request relates to your account or device session before acting on it.

If you are in the European Union or the Netherlands and believe your request was not handled properly, you can lodge a complaint with your local data protection authority, including the Dutch Autoriteit Persoonsgegevens.

WODIQ may update this policy when the product, providers, analytics setup, or legal requirements change. Material changes will be reflected by updating the date on this page and, where appropriate, by additional notice in the app or website.

For privacy questions or deletion requests, contact marcel@tuinstra.dev.