1. Controller and contact
BrutalBoost is published by Julien Klein as part of monExpansion. For any privacy request, email julien@monexpansion.com.
2. Data we use
- Account: email address, first name, language and session identifiers.
- Training profile: birth year, height, weight, level, priorities, declared limitations, equipment and available loads.
- Usage: A/B program, sets, repetitions, loads, Brutal status, declared technique quality and history.
- Optional personalization: portrait, body reference and generated exercise images. Progress photos remain on your device unless you explicitly share them.
- Security: minimum technical data required to prevent abuse and diagnose errors.
3. Purposes
Account and training data are processed to provide the requested service. Explicit consent covers optional photo upload and processing. Abuse prevention and service reliability rely on our legitimate interest in protecting BrutalBoost and its users.
4. Providers
Data may be processed by Cloudflare for hosting, database, storage and login email delivery, by Resend as an email fallback, by OpenAI to screen photos before storage and validate generated images, and by Google AI only when you request personalized generation. Standard coach messages are pre-produced and played from the device.
These providers may process data outside your country. We send only what is necessary for the requested feature.
5. Retention and deletion
Login codes expire after ten minutes. Account data, history and private images are retained while the account exists. You can separately delete your portrait or body reference. Delete my account in the app removes the account, sessions, history and all associated private files.
6. Your rights
You may request access, correction, export or deletion of your data and withdraw consent where processing relies on it. Contact us at the address above. You may also complain to the data protection authority that applies where you live.
7. Adults only
BrutalBoost is limited to people aged 18 or older. Photos are screened before storage. An image that may show a minor or sensitive content is rejected.
8. Security and updates
Sessions are revocable, private data is separated by account and photos are never public by default. No system is infallible. Material changes will be shown in the app or on this page with an updated version date.