Aspera is a strength-training app made by Aspera Forge Ltd. This page says what the app collects, why, who else receives it, and how to delete it. Questions go to privacy@asperaforge.com.
The short version
- You can use Aspera without creating an account. Your training then stays on your phone.
- If you create an account, your training is copied to our server so it survives a new phone.
- When you ask the coach something, or it writes your plan, the training details it needs are sent to an AI model run by another company. Your name and email are not.
- We record a small set of usage events (which screens were opened, whether a workout was finished). They never contain a weight, your bodyweight or anything you typed.
- We do not sell your data and the app shows no advertising.
01Who we are
Aspera is published by Aspera Forge Ltd, a company registered in England and Wales (company number 17531113), registered office 66 Paul Street, London EC2A 4NA, United Kingdom ("we"). We are the data controller for the information described here.
For anything about your data, write to privacy@asperaforge.com.
02Data we collect
What you tell the app. Your training goal, how many days a week you train, session length, the equipment you have, a push-up count, your bodyweight, and anything you tell the coach about yourself (for example an injury or a preference).
What you log. Your plan, each workout, each set with its weight and repetitions, skipped or moved sessions, and your strength goals.
Coach conversations. Messages you send to the coach and its replies are stored on your phone. A record of each change the coach made or proposed is kept so you can undo it; for an account, that record is also stored on our server.
Account details, if you create an account. Your email address and a password. The password is stored in hashed form by our hosting provider; we cannot read it.
Usage events. Which screens are opened, that the app was installed, opened or put in the background, and a few product events: setup started and completed (with your goal and days per week), a plan accepted, a workout started and finished (with how many sets it had and how many were logged), a coach message sent (its type and whether it succeeded), and the feedback link opened. Each is tied to a random identifier, or to your account identifier once you have an account. These events also carry your device model, operating system version, app version, language, and an approximate location (city level) derived from your IP address.
Crash and error reports. When something fails, a technical report: the error, the device model, the operating system and app version, and timing information for a sample of app sessions. These are built not to include your weights, your bodyweight or the text of your messages.
We do not collect your contacts, photos, precise location, microphone or camera, and the app does not record your screen.
03How we use it
- To build and adjust your training plan and show your progress.
- To let the coach answer with knowledge of your training.
- To keep your training safe across phones, if you have an account.
- To see where people get stuck in the app and to fix faults.
- To limit how many coach requests one user can make in a day.
Legal basis (UK and EU)
We process your training data and coach requests to provide the service you asked for (contract). Bodyweight and anything you tell the coach about your health are processed with your consent, which you give by entering them and can withdraw by deleting them. Usage events and error reports are processed under our legitimate interest in keeping the app working and understanding how it is used.
04AI coach and third parties
We use these companies to run the app. Each receives only what its job needs.
| Company | What it does | What it receives |
|---|---|---|
| Supabase | Hosts our database, accounts and the coach's server code | Account email and hashed password; for accounts, your training data; coach requests in transit |
| DeepInfra | Runs the AI model behind the coach | The contents of a coach request (below). No name, email or account identifier |
| PostHog (EU) | Usage analytics | The usage events above |
| Sentry | Crash and error reports | The reports above |
| Google Play | Distributes the app | What Google collects under its own policy |
What a coach request contains. Depending on what you asked: a compressed summary of your plan and recent workouts (exercises, sets, repetitions and weights), your setup answers including bodyweight, your goals, the notes the coach holds about you, recent messages from the same conversation, and your new message. Do not put anything in a message to the coach that you would not want processed by an AI provider.
DeepInfra does not store the contents of a request once it has answered it, and does not use them to train models.
The coach gives training guidance only. It is not medical advice.
05Storage and retention
- On your phone, until you delete it in the app or uninstall the app.
- On our server, for accounts, until you delete your account.
- Usage events are kept by PostHog for up to one year, and error reports by Sentry for up to 90 days, then deleted.
- Coach requests are held by DeepInfra only while the answer is produced.
Our server is located in Ireland, in the European Union. PostHog data is stored in the EU. Sentry and DeepInfra may process data in the United States.
06Your rights
You can ask for a copy of your data, a correction, deletion, a portable export, or object to how we use it. Write to privacy@asperaforge.com; we answer within 30 days. Much of this you can do yourself in the app:
- Use the app without an account. Nothing you log leaves your phone except coach requests, usage events and error reports.
- See and remove what the coach remembers. Settings › What the coach knows about you.
- Export your data. Settings › Backup, export, and account › Export my data (accounts only).
- Delete your account, or everything. Settings › Backup, export, and account › Delete account removes your account and the copy of your training on our server. Delete everything also clears the phone. You can also ask us; see the account deletion page.
07Children
Aspera is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, write to privacy@asperaforge.com and we will delete it.
08Changes to this policy
We will update this page when what the app does changes, and change the date at the top. If a change affects how your existing data is used, we will also tell you in the app before it takes effect.
09Contact
Email privacy@asperaforge.com, or write to Aspera Forge Ltd, 66 Paul Street, London EC2A 4NA, United Kingdom.
If you are unhappy with our answer you can complain to the UK Information Commissioner's Office at ico.org.uk, or, in the EU, to your national data protection authority.