Privacy Policy

Zena is designed to respect your privacy. This policy explains what data we collect, how we use it, and how we protect it. If you have any questions, contact us at hello@lumerastudio.co.

Data We Collect

To provide the Service, we collect information you provide directly — including your name, email address, training goals, current strength levels, equipment, and cycle data (if you choose to provide it). We also collect data generated through your use of the app, such as logged workouts, sets, reps, and weights, and daily check-in responses.

Health Data

With your permission, Zena integrates with Apple HealthKit to read health metrics including resting heart rate, heart rate variability, sleep data, and body weight. This data is used to provide training recommendations and readiness scores personalised to you. We do not share HealthKit data with third parties for advertising or marketing purposes. You can revoke HealthKit access at any time through your iPhone's Privacy settings.

Data Storage

Your data is stored securely on servers provided by Supabase, which uses PostgreSQL with row-level security. This means your data is strictly isolated — only you can access your own records. We do not sell or share your personal data with third parties.

AI Features

Zena uses Anthropic's Claude AI to power features including program generation, training recommendations, and health insights. To provide these features, relevant data — such as your training goals, performance history, and recovery signals derived from Apple Health (such as sleep, heart rate and HRV) and your mentral cycle tracking where connected — is sent to Anthropic's API. This data does not include directly identifying information where it can be avoided, and is not used by Anthropic for advertising, analytics, or model training outside of their standard policies. You can review Anthropic's privacy policy at anthropic.com/privacy.

If Anthropic's service is unavailable, Zena may fall back to OpenAI's API to power these same features so your experience isn't interrupted. The same categories of data described above may be sent to OpenAI in this case, and it is subject to OpenAI's own data use and retention policies. You can review OpenAI's privacy policy at openai.com/privacy.

Authentication

Zena supports Sign in with Apple and email/password authentication. If you use Sign in with Apple, Apple may provide us with a anonymised email relay address. We use your authentication information only to manage your account and do not use it for marketing purposes without your consent.

Subscriptions & Payments

Zena uses RevenueCat to manage subscription purchases and billing status. RevenueCat receives your purchase and subscription information from the App Store to process payments and verify your subscription entitlements.

Usage Analytics

We use PostHog to understand how the app is used (ie. which features people use, how often, and where they run into trouble). This usage data is linked to your account so we can improve your experience, but it never includes personal health information, cycle data, or workout content — only things like feature usage, screen views, and event counts.

If you visit our website before signing up, we may link your browsing activity there (such as pages viewed or how you found us) to your account once you create one. This helps us understand what brings people to Zena. It does not include any health or fitness data, since that only exists once you're using the app.

We use Sentry to collect crash and error reports, which may include technical diagnostic information such as device type, app version, and error logs. This helps us identify and fix bugs.

Data Sharing

Zena does not sell, rent, or share your personal data with third parties for commercial purposes. We only share data with service providers who help us operate the app (Supabase, Anthropic, OpenAI, RevenueCat, PostHog, Sentry), and only to the extent necessary to provide the Service.

Data Retention and Deletion

We retain your data for as long as your account is active. If you delete your account, your personal data will be removed from our servers within 30 days, except where we are required to retain it for legal reasons. To request account deletion, contact us at hello@lumerastudio.co.

Children's Privacy

Zena is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. Continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

Contact

If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact us at hello@lumerastudio.co.