Setluno — Cengizhan Keyfli (Setluno) (2026-10-21)
| Data | Purpose | Legal basis | Recipient |
|---|---|---|---|
| E-posta adresi / Email address | Account creation, sign-in and password reset | Performance of a contract | Supabase |
| Ad ve profil / Name and profile | Identifying you to trainers and managers in your gym | Performance of a contract | Supabase; üyesi olduğunuz salon / your gym |
| Antrenman, program ve set kayıtları / Workout, program and set logs | Program tracking and progress display | Performance of a contract | Supabase; atanmış eğitmeniniz / your assigned trainer |
| Vücut ölçümleri / Body measurements | Personal progress tracking; private to you by default | Explicit consent; sharing with a trainer requires a separate choice | Supabase; yalnızca izin verirseniz eğitmeniniz / your trainer only if you allow |
| Sağlık özeti (adım, aktif enerji, egzersiz süresi, dinlenik nabız) / Health summary | Daily summary on the progress screen; raw records are not stored, nothing is written to Health | Explicit consent (Apple Health / Health Connect permission) | Supabase |
| Yiyecek fotoğrafı ve açıklaması / Food photo and description | Approximate nutrition estimate; not stored | Consent (using the feature) | Google (Gemini API) / OpenAI |
| Mesajlar / Messages | Communication between trainer and member | Performance of a contract | Supabase |
| Hareket videoları ve görselleri (personel yükler) / Exercise videos and images (uploaded by staff) | Gym exercise library | Performance of a contract | Tarafımızca yönetilen medya sunucusu / our media server |
| Bildirim cihaz anahtarı / Push token | Program, message, class and workout notifications | Consent (notification permission) | Expo, Apple, Google |
| Satın alma ve abonelik durumu / Purchase and subscription status | Verifying Premium and gym package access; card details never reach us | Performance of a contract | RevenueCat, Apple, Google |
Account data is kept while the account is open. Deletion requests are usually processed within an hour: personal content is deleted, and relational records the gym needs for integrity (e.g. completed workout statistics, gym audit records) are kept anonymised without a link to your identity. If a store subscription is active, deletion is applied after the subscription period ends. Records required by law are retained for the period the law requires.
The database and authentication are hosted by Supabase in the European Union (Frankfurt). Text and photos you submit for food analysis or AI program drafts are sent to Google (Gemini API) or OpenAI to generate a response and are not stored by the app. Notifications are delivered via Expo and Apple/Google push services, and subscriptions are verified via RevenueCat and Apple/Google; these providers may process data outside your country, including in the United States, under their standard contractual safeguards. Exercise videos and images are stored on a server we operate. When you scan a barcode, only the barcode number is sent to Open Food Facts.
Contact us to exercise your applicable access, correction, deletion and objection rights. You may complain to the relevant supervisory authority.
Contact: info@ckstudios.com.tr