Privacy Policy

1. In short

Ordinary Apps store your content on your device and on a server of the provider, so that it is available on all your devices and, if you want, to your AI assistant.

• Sign-in with Apple only, no passwords.
• No ads, no tracking, no analytics or crash SDKs.
• No AI inside the apps. An assistant gets content only if you connect it, and only from the apps you allow.
• Your data is not sold or passed on for any other purpose.

2. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

3. Account

You sign in with “Sign in with Apple”. Apple passes on an identifier that is only valid for this provider, and an email address. You can ask Apple to hide your real address; we then receive only a relay address from Apple.

One account covers all Ordinary Apps. The legal basis is the performance of the contract of use (Art. 6(1)(b) GDPR).

4. Your content

What you create in the apps, such as tasks and lists, notes and folders, workouts, training plans and calendar entries, is stored on your device and synced with the server. That way it appears on your other devices and is reachable even while your iPhone is off.

Transmission is encrypted. On the server the content is not end-to-end encrypted; the provider could technically access it. The provider does so only as far as operation, security or a request from you requires.

The legal basis is the performance of the contract of use (Art. 6(1)(b) GDPR).

5. Server

Database and sign-in run at Supabase, Inc. (USA), in a data centre in Europe. Supabase processes the data as a processor under Art. 28 GDPR.

Because Supabase is a company based in the USA, access from a third country cannot be ruled out. Such a transfer is based on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).

6. Connecting an AI assistant

The connection is optional and off by default. You set it up in the connect portal and choose per assistant and per app whether it may read, create or change. An assistant cannot delete anything. You can withdraw access in the portal at any time; it ends with the next call.

When your assistant reads content, that content goes to the assistant's provider, for example Anthropic (Claude) or OpenAI (ChatGPT). Their terms and privacy policy, which you agreed to with that provider, apply there. We have no influence on that and receive no data about you from them.

The legal basis is your consent, given with the grant and revocable at any time (Art. 6(1)(a) GDPR).

7. Apple Watch and Apple

Ordinary Training hands the workouts of the next seven days to Apple's Workout app on your device. The app reads no health data.

Apple is independently responsible for the App Store, Sign in with Apple and the Apple Watch. Apple provides developers only with aggregated, non-personal statistics.

8. This website and the connect portal

This website sets no cookies, loads nothing from third parties and runs no analytics. The connect portal keeps your sign-in in your browser's storage while you are signed in; that is technically necessary.

Both are hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. On each visit Vercel processes technically necessary connection data such as IP address, time and requested address in server log files. The legal basis is the legitimate interest in secure operation (Art. 6(1)(f) GDPR). The transfer to the USA is based on the EU-US Data Privacy Framework and, in addition, the standard contractual clauses.

9. Retention and deletion

Your content stays stored until you delete it or have your account deleted. For now you can request deletion of your account by email; the account and all content on the server are then deleted. A delete function in the apps will follow.

10. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can withdraw consent at any time.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

11. Contact

Questions about privacy by email to the address above.

12. Changes

If the apps or the law change, this policy is updated. The version published here applies.