Privacy Policy

Last updated 28 August 2026.

Voima is a training log. It is built so that the app works without an account, and so that your training data leaves your phone only when you ask it to, by creating an account for it to sync to.

Two things are sent without being asked for: anonymous product analytics, and a report when the app crashes. Both are described below, both are limited by what the app is able to put in them, and neither carries your training data. They are sent whether or not you have an account.

Using Voima without an account

Your training log lives in a database on your phone. Everything you record in the app — your workouts and the sets in them, their weights, repetitions, RPE and rest times, your programs, your body measurements and your settings — is written there and read from there.

If you never create an account, none of your training log is sent anywhere. There is no silent upload of it, and the app is fully usable in this state — that is the design rather than a limited mode. The analytics and crash reporting described below are a separate thing from your training log, and are not affected by whether you have an account.

If you create an account

An account exists so the same log can be on more than one phone, and so that it survives losing one. Creating one means we store:

Your phone stays the original. The server holds a copy so that it can be sent to your other devices.

Analytics

Voima sends a small, fixed set of product events to PostHog. The complete list is: a workout was started, a workout was finished, the account offer was answered, a program was started, a program was completed, a training-max review was saved, a program was asked for, that request finished, the program it wrote was kept, and the app was opened, installed or backgrounded.

Those events carry only numbers and true/false values — how many sets were logged, whether a workout had a program behind it, whether the account offer was accepted. They cannot carry text you typed: not an exercise name, not a note, not anything else you entered in the app. That limit is enforced by the app's own types rather than by a rule somebody has to remember.

One label is attached to every event alongside those values, naming which build of the app sent it — a test build or a released one — so that our own checks can be told apart from real use. It is the same fixed word for everybody running the same build, and it describes the app rather than the phone or the person using it.

Analytics are not tied to a person. No user profile is created, the app never identifies you to PostHog, and the identifier attached to those events is an anonymous one that PostHog generates on the device. Your account is not linked to it. IP addresses are not resolved to a location. There is no session recording, and no automatic capture of what you tap or type.

Crash reports

When the app crashes, a report goes to Sentry: the error, where in the code it happened, what kind of device and operating system version it happened on, and which build of the app it was — the same label the analytics events carry, for the same reason.

Crash reports do not include a screenshot, a copy of the screen's contents, or your training data. They also carry no trail of what led up to the crash: no list of the screens you were on, no record of what you tapped or typed, no network requests, and nothing the app wrote to its own log. Performance tracing is switched off.

So that crashes can be counted against how often the app was opened, Sentry attaches an identifier for this installation of the app. It is not your account and not your name; it belongs to the copy of the app on this phone, and it goes when the app is deleted.

Programs written for you

If you ask Voima to write a program, what you entered on that screen is sent to an AI model provider to write it: your goal, experience, days a week, session length, equipment, and anything you typed about limitations. If you leave the switch on, a summary of your last twelve weeks of training goes with it — exercise names, how often you did each, typical sets and reps, and a training max where you have one. No dates, no notes, and no body measurements unless you switch the bodyweight on. Nothing older than twelve weeks is described.

Which provider is set on our server and is one of Anthropic or OpenAI. Under their API terms, what is sent is not used to train their models. The request and the program it produced are kept on our server with your account, and are deleted with it. This needs an account, and it happens only when you ask.

Email

Voima sends two kinds of email, and both are about your account: a link to confirm your address when you create an account (or when you ask for another one), and a password reset when you ask for one. Delivery is handled by Resend. There is no newsletter and no marketing email.

Deleting your account

Deleting your account from within the app removes everything the server holds for you: your account record, and every synchronised row of your training log.

The copy on your phone is left alone. The app keeps working and your history stays readable; it simply stops synchronising. If you want that copy gone as well, delete the app.

What Voima does not do

Children

Voima is not directed at children and does not knowingly collect data from them.

Changes

If this policy changes, the date at the top of this page changes with it.

Who is responsible

Voima is made and run by Severi Reivinen, an individual developer rather than a company, who is the data controller for the personal data described on this page. The address below reaches them directly.

Contact

For any question about your data, or to ask for a copy or a deletion, write to support@voimapp.com.

The support page answers the questions that come up most often, including how to reset a password and how to delete an account.