Skip to content
Get the app
Get the appLog in

Privacy policy

Version 1, updated on October 17, 2026

1. Who processes your data

The data controller is Nicola Eliseo, Via Domenico Padula 38, 80028 Grumo Nevano (NA), Italia ("Reezl", "we"), who runs the reezl.com website and the Reezl app (web, iPhone, Android, Apple Watch and Wear OS).

For any request about your data you can write to info@reezl.com.

2. What data we collect

We only collect the data the service needs to work. Much of it is entered by you and is optional.

Account and profile

  • Username, email, password (stored only as a non-reversible hash), language, units, time zone, app preferences (rest time, sounds, notifications).
  • Profile photo, bio and the choice to make your account private, if you set them.
  • Date of birth (required at sign-up, to check the minimum age) and, if you provide them, sex, height and activity level.
  • Date of your last login and account status (for example a suspension and its reason).

Sign-in with Google, Facebook or Apple

  • If you choose to sign in or sign up with Google, Facebook or Apple, that service gives us an identifier of your account with it, your email address (with Apple it may be an anonymous relay address that Apple forwards to your inbox) and, if it provides them, your first and last name. We do not receive your password or your contacts, and we never post anything on your behalf.
  • We keep the link between your Reezl account and that identifier, to recognise you when you sign in again. If Google or Apple confirm that the email is verified and it matches an already verified Reezl account, we link the sign-in to that account.
  • If you are signing up, we keep this data temporarily for at most 30 minutes, the time to complete the sign-up; first and last name are only used to prefill the form.

Training

  • Programs, weeks, days and exercises; completed sessions with sets, loads, reps, reps in reserve, RPE, duration, notes, exercise substitutions and personal records; personal exercises you create.
  • If you use a smartwatch: average and maximum heart rate and estimated calories of the session. On the Android app, if you allow it, we write your workouts to Health Connect; we do not read data from Health Connect.
  • If you share a workout as an image, the image is created on your device and is not uploaded to our servers: you send it yourself, with the app you choose.

Health-related data

  • Body weight and circumferences (neck, chest, waist, hips, arms, forearms, thighs, calves) with the notes you add. We do not collect body photos or body fat percentage.
  • Nutrition, only if you turn it on: goal and daily targets, meal diary, saved meals, meal plans, favorite foods and foods you create (also via barcode, matched only against our own catalog), water, supplements and their intake.
  • Check-ins you fill in for your coach: how you feel, sleep, stress, energy, adherence to the program and a free note.

Coaching, chat and community

  • Coaching invitations, requests and relationships, with the areas covered and the consents you gave for each area.
  • Chat messages (text only), users you block, and reports you send or that concern your content.
  • Reviews of coaches and replies to them.
  • If you are a professional: professional profile (bio, qualifications as you describe them, specializations, city, online availability), application and acceptance of the professional terms. We do not ask you to upload documents.
  • If you fill it in, the personal details card (first and last name or company name, tax code, VAT number, SDI code, contacts and addresses).

Notifications and devices

  • Notification preferences, in-app notifications and, if you turn on push notifications, the technical identifier your browser or phone gives us to deliver them (for browsers also the browser type), the app version and the link with your smartwatch.

Technical and security data

  • Your acceptance of the Terms and acknowledgement of this policy, with version and date.
  • The log of actions taken by administrative staff (§5).
  • An anonymous measure of app performance (the time it takes to log a set), tied to a pseudonymous identifier that does not contain your name, email or training data.

3. Why we process it and on what legal basis

  • Providing the service (account, sign-in with Google, Facebook or Apple if you choose it, training, chat, coaching, notifications): performance of the contract (Art. 6(1)(b) GDPR).
  • Health-related data (weight, circumferences, check-ins, smartwatch data): your explicit consent (Art. 9(2)(a) GDPR), which we ask for at sign-up and record together with its version.
  • Nutrition: a separate explicit consent, asked when you turn it on, which you can withdraw from the app at any time.
  • Sharing with a coach: a specific consent for each area (training, body measurements, nutrition), given when you accept the coaching relationship.
  • Security, abuse prevention, moderation and the log of administrative actions: our legitimate interest (Art. 6(1)(f) GDPR).
  • App performance measures: our legitimate interest in improving the service, with minimal pseudonymous data.
  • Legal obligations, where applicable (Art. 6(1)(c) GDPR).

We do not use your data for advertising, commercial profiling or automated decisions with legal effects on you. We do not sell your data.

4. Minimum age

You must be at least 14 years old to sign up. To use coaching, as an athlete or as a professional, you must be at least 18.

5. Who can see your data

Other users

Nothing you enter is public on the internet: profiles, reviews and search are visible only to registered, signed-in users. Other users see your username, photo and bio; if you are a coach, also your qualifications, specializations, city and average rating. With a private account you do not appear in search results. Reviews you write are visible to signed-in users, anonymously if you choose so.

Your coach

A coach can see your data only while a coaching relationship is active, and only for the areas you consented to: programs and sessions, progress, body measurements, food diary, supplements, meal plans and check-ins. Every access is logged by day and area: you can see the last 90 days in the app settings and the full log in your data export. Consent to body measurements can be withdrawn at any time; consent to training and nutrition ends with the relationship.

Our staff

Authorized administrative staff can see the data needed to manage accounts and support: username, email, language, account status, sign-up and last login dates, the personal details card, contacts and addresses, some counts of your activity (for example how many sessions you completed, not what they contain), reported content (messages, reviews, exercises and foods) with the email of whoever reported it, and professional applications. The admin panel gives no access to the content of your workouts, measurements or food diary. Every view of a user's page and every search in the panel is logged and kept for 24 months.

6. Providers and recipients

We do not share your data with analytics, profiling or advertising services. We only use the technical providers we need, who process data on our behalf as processors:

  • Hosting and data storage (database, attachments and data exports): Hetzner Online GmbH, with servers in Germany.
  • Email delivery (address verification, password recovery, invitations, confirmations): Aruba S.p.A..
  • Browser push notifications: delivered through the push service of your browser's maker (Google, Apple, Mozilla or Microsoft) in encrypted form; that service cannot read the content.
  • Push notifications in the iPhone and Android apps: delivered through Google Firebase Cloud Messaging, which hands iPhone notifications to Apple. These services receive the notification title and text; chat notifications contain the sender's name, not the message text.
  • Exercise demonstration videos: when an exercise has a video, it is loaded from YouTube in privacy-enhanced mode (youtube-nocookie.com), which receives your IP address and technical device data.

If you sign in with Google, Facebook or Apple, that service processes the data of your sign-in as an independent controller, under its own policy: Google (policies.google.com/privacy), Meta for Facebook (facebook.com/privacy/policy), Apple (apple.com/legal/privacy).

Some services of Google, Meta and Apple (push notifications, YouTube videos, sign-in with their account) may process data in the United States: in that case the transfer relies on the European Commission adequacy decision for companies certified under the EU-U.S. Data Privacy Framework or on the standard contractual clauses approved by the Commission.

7. How long we keep data

  • Your account data is kept for as long as your account exists, including the link with Google, Facebook or Apple.
  • Data received from Google, Facebook or Apple for a sign-up that is not completed is deleted after 30 minutes.
  • If you withdraw your nutrition consent, we immediately delete your nutrition goal, calculated targets, diary, saved meals and meal plans.
  • The log of administrative actions is kept for 24 months.
  • Closed chat reports are kept for 12 months; closed coaching requests for 30 days.
  • Login sessions expire after 24 hours; the renewal token after 30 days.

8. Deleting your account

You can request deletion from the app by entering your password. A 30-day period starts, during which you can keep using the app and cancel the request. When it ends, we irreversibly delete your training, health and nutrition data, profile and personal details card, photo, links with Google, Facebook or Apple, devices, notifications, reviews written and received and check-ins, and we send you a confirmation email. What remains, without your name or email: an anonymous technical row for the account, the record of coaching relationships and their consents (as evidence), and the administrative log until it expires. Messages you sent stay in the other person's conversation, without your name. Programs and plans a coach assigned to you stay with you; if you are a coach, those you assigned stay with your athletes.

If you used the app offline, some sets may still be waiting to be sent on your device: they disappear when you uninstall the app or clear the site data in your browser.

9. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw any consent at any time, without affecting processing carried out before the withdrawal. From the app you can:

  • edit your profile data;
  • download a JSON copy of your account, training, measurement, nutrition, coaching and chat data;
  • withdraw your nutrition consent or your coach's access to body measurements;
  • delete your account.

For anything else, write to the address in §1. You also have the right to lodge a complaint with a supervisory authority; in Italy, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

10. Security

Passwords are stored with a non-reversible hashing algorithm, all communication with the app is encrypted and logins expire after 24 hours. On phones and smartwatches, credentials are kept in the operating system's secure storage. Staff access to data is limited by role and logged.

11. Changes to this policy

If we change this policy substantially, we update its version number and date and let you know in the app. For every consent we record the version you accepted.