PRIVACY NOTICE

Last updated August 16, 2026

Thank you for choosing to be part of our community at Karol Smolak ("Company," "we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy notice or our practices with regard to your personal information, please contact us at weightliftinganalysis@gmail.com.

This privacy notice applies to the WL Analysis mobile application for Android and iOS (the "App") and describes how we collect, use, and share information when you download and use it. In this notice, "Services" refers to the App and any related services. The data controller responsible for your personal information is Karol Smolak, whose contact details are in Section 15. Not every feature or third-party service described here exists in every platform version of the App; where a service is not used in the version you have installed, it does not process your data.

Please read this privacy notice carefully. WL Analysis is built to work primarily on your device: your recordings, lift data, and analysis history are stored locally on your phone. The main exception is the optional AI technique analysis feature, described in detail in Section 3, which sends a video clip you choose to Google's servers for processing only when you explicitly opt in. If there are terms in this notice that you do not agree with, please discontinue use of the App.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE USE YOUR INFORMATION, AND ON WHAT LEGAL BASIS?
3. AI-POWERED TECHNIQUE ANALYSIS (GEMINI)
4. WILL YOUR INFORMATION BE SHARED WITH ANYONE?
5. WHO WILL YOUR INFORMATION BE SHARED WITH?
6. WHERE IS YOUR INFORMATION PROCESSED?
7. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES AND ADS?
8. HOW LONG DO WE KEEP YOUR INFORMATION?
9. HOW DO WE KEEP YOUR INFORMATION SAFE?
10. DO WE COLLECT INFORMATION FROM MINORS?
11. WHAT ARE YOUR PRIVACY RIGHTS?
12. CONTROLS FOR DO-NOT-TRACK FEATURES
13. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
14. DO WE MAKE UPDATES TO THIS NOTICE?
15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
16. HOW CAN YOU REVIEW, UPDATE OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Content you create in the App
When you use WL Analysis to record or import a video, the App stores it together with any data you attach to it — barbell weight, tags, notes, date — and the trajectory/kinematics data it calculates from the video (bar path, velocity, acceleration, power). This data is stored locally on your device, in the App's own database and file storage. We do not upload it to our own servers — we do not operate any server that receives it — and we do not have access to it unless you choose to share it with us (for example, by attaching an exported file to a support email, or by using the in-app "Report a problem" action described in Section 3). The one case in which content leaves your device to a third party is the optional AI analysis feature described in Section 3.

If you export a video or a CSV file and then share it yourself (for example to social media or a messaging app), that file goes wherever you send it, and its handling from that point on is governed by the privacy policy of the service you shared it with, not by this notice.

If you enable automatic database backup, a copy of this local data may be included in your device's own system backup (Android backup to your Google account, or iCloud backup on iOS), which is managed by Google or Apple under their own privacy policies, not by us.

Device permissions
The App may request access to the following device features. Each is used only for the purpose described, stays on your device, and can be revoked at any time in your device's Settings:

Automatically collected information
We use Google Firebase Analytics to understand, in aggregate, how the App is used (e.g., which screens and features are used, and how often), and the store's billing system (Google Play Billing on Android, Apple In-App Purchase on iOS) to process in-app purchases. These services may automatically collect certain technical information such as your device model, operating system version, app version, general (non-precise) location derived from IP address, an app-instance identifier, and usage events. This information does not include the video content you record or import. We receive purchase confirmations through Google Play Billing; we never see or receive your payment card or bank details.

Once per installation, the Android version of the App also uses the Google Play Install Referrer API to record how you found the App — the referrer string Google Play provides (which may identify the campaign or link you came from) and the associated click and install timestamps — and sends it to Firebase Analytics as a single event. This tells us which channels bring people to the App; it does not identify you personally to us.

The App uses Firebase Remote Config to switch features on and off remotely (for example, to roll out or disable an experimental feature), and Firebase App Check to verify that requests to Google's AI services come from a genuine, unmodified copy of the App rather than from someone abusing our keys. Both work with an anonymous installation identifier and device/app integrity signals; neither receives your recordings or lift data.

If you opt in via the in-app consent dialog, the App also uses Sentry for automatic crash reporting. When enabled, crash reports are sent to Sentry containing technical diagnostic data: stack traces, app and operating system version, device model and device name (on Android the device name is chosen by you and may contain your name), and an anonymous installation identifier. We configure Sentry to discard the IP address of the reporting device and to omit your device's timezone and locale, so crash reports do not carry your location. Crash reporting is off by default and can be turned on or off at any time in Settings.

In the free version, Google AdMob serves advertisements. The App requests non-personalized ads only: ads are not selected on the basis of a profile built from your interests or past behavior. AdMob may still process limited information such as your device's advertising identifier (where your platform and your tracking settings make one available), coarse location derived from IP address, and app/device data for ad delivery, frequency capping, and fraud prevention. You can reset or delete your advertising identifier, or refuse app tracking altogether, in your device's Settings, and you can remove ads entirely with the ad-removal add-on.

2. HOW DO WE USE YOUR INFORMATION, AND ON WHAT LEGAL BASIS?

We use the information described above to:

If you are in the European Economic Area, the United Kingdom, or another region with similar laws, we rely on the following legal bases (Article 6 GDPR):

We do not use your information to make automated decisions that produce legal effects concerning you or similarly significantly affect you. The AI technique analysis produces informational training feedback only (see Section 3).

3. AI-POWERED TECHNIQUE ANALYSIS (GEMINI)

In Short: WL Analysis includes an optional AI feature that, only when you actively request it, sends a short clip of your lift and its associated data to Google's Gemini AI (via the Firebase AI SDK) to generate a written technique analysis. It is off until you opt in through a consent dialog, it can be switched off again at any time in Settings, and no video is uploaded unless you choose to use this feature.

The first time you tap the AI analysis (or AI comparison) action on a lift — or the first time you open the purchase screen for this feature — the App shows a consent dialog explaining that continuing will upload data to Google. If you decline, nothing is sent and the feature is not used. If you accept, the App sends the following to Google's Gemini model:
This data is processed by Google to generate the analysis text, which is returned to the App and saved locally on your device (attached to that lift), the same as any other lift data. The clip is prepared in temporary storage and deleted from your device as soon as it has been sent. We do not retain a copy of the uploaded clip on any system of our own, and we do not use it to train any model.

Your consent choice is remembered. Once you accept, later analyses run without asking again — we do not re-display the dialog every time. You can withdraw your consent at any time under Settings → Other → "AI analysis uploads"; once switched off, no further clips are uploaded, and the next time you use the feature you will be asked to consent again. Withdrawing consent does not affect processing that already took place, and it does not delete analyses already saved on your device — you can delete those yourself along with the lift they belong to.

Processing of this data by Google is subject to Google's own terms for the Gemini API and Firebase AI Logic. Google acts as our processor for generating the response, and separately retains prompts and responses for a limited period for abuse monitoring and to meet its legal obligations. We encourage you to review Google's privacy policy and the Gemini API terms for details of how Google itself handles this data.

If you believe a result is inaccurate or inappropriate, you can use the "Report a problem with this result" button shown with the analysis — this opens your own email app with a pre-filled message (containing the result text and the weight/tags used as context) addressed to us at weightliftinganalysis@gmail.com; nothing is sent unless you choose to send that email yourself.

This feature is offered as a separate optional in-app purchase. Regardless of how it is licensed or which users it is made available to, the consent and data-handling described in this section always apply. The analysis is generated by a language model, may be incomplete or wrong, and is provided for general training information only — it is not coaching, medical, or health advice, and you should not rely on it as such.

4. WILL YOUR INFORMATION BE SHARED WITH ANYONE?

In Short: We only share information with the service providers described in this notice, to comply with the law, or with your explicit consent (as with the AI feature). We do not sell your personal information.

We may disclose information where we are legally required to do so (e.g., in response to a valid court order, subpoena, or governmental request), where necessary to investigate or prevent fraud, abuse, or threats to safety, or in connection with a merger, acquisition, or sale of company assets — in which case we will continue to protect your information and will notify you before it becomes subject to a different privacy notice. Otherwise, information is only shared with the third-party service providers listed in Section 5, each acting on our behalf to provide part of the App's functionality under a contract that limits what they may do with it.

5. WHO WILL YOUR INFORMATION BE SHARED WITH?

We use the following third-party service providers. Each processes data only for the purpose stated:
ProviderPurposeData involved
Google Firebase AI (Gemini API)Optional AI technique analysis / comparison, only when you opt inVideo clip, bar-path data, weight, tags, app language — see Section 3
Google Firebase AnalyticsAggregate app usage analytics and install attributionDevice/app info, app-instance ID, usage events, Play install referrer
Google Play Install ReferrerTelling us which campaign or link an install came from (sent on to Firebase Analytics)Referrer string, click and install timestamps
Google Firebase Remote ConfigEnabling or disabling App features remotelyAnonymous installation ID, app/device info
Google Firebase App CheckVerifying that requests to Google's AI services come from a genuine copy of the AppDevice/app integrity signals, anonymous installation ID
Google AdMobDisplaying non-personalized ads in the free version of the AppAdvertising identifier, coarse location from IP, device/app info
Google Play Billing / Apple In-App PurchaseProcessing in-app purchases (ad removal, Pro, AI analysis)Purchase/transaction information (no card details reach us)
SentryOptional, opt-in crash reportingCrash diagnostics, app/OS version, device model and name, anonymous install ID (IP discarded)
Google Play Console / Apple TestFlightApp distribution and pre-release testing, plus the crash and review data the stores provide to usAs collected by Google and Apple for app distribution

We have not sold, and do not sell, personal information to third parties.

6. WHERE IS YOUR INFORMATION PROCESSED?

In Short: We are based in Poland, but the providers listed in Section 5 — including the AI feature — process data on servers that may be located outside your country, including in the United States.

Data that leaves your device (a clip you send to the AI feature, analytics and install-attribution events, crash reports if you enabled them, and purchase records) is processed by Google and Sentry on their own infrastructure, which is global and includes servers in the United States. This means your information may be transferred outside the European Economic Area to countries whose data protection laws differ from those of your country.

Where such a transfer takes place, it relies on the safeguards these providers put in place for their customers — typically the European Commission's Standard Contractual Clauses, and/or the provider's certification under the EU–US Data Privacy Framework. These providers publish their own transfer terms, and we encourage you to review them. If you would prefer that no lift video of yours is transferred in this way, simply do not enable the AI analysis feature; the rest of the App works entirely on your device.

7. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES AND ADS?

The free version of the App may display non-personalized ads served by Google AdMob, which may link to third-party websites, services, or other apps. We cannot guarantee the safety, privacy, or content of any third-party site or service, and are not responsible for their practices. We encourage you to review the privacy policy of any third-party service you visit through an ad or link in the App. You can remove ads entirely with the ad-removal add-on described in the App.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

Your recordings, lift data, tags, and AI analysis results are stored locally on your device and remain there until you delete them in the App or uninstall the App — we do not control or set a retention period for this local data, since we never receive a copy of it.

For data held by our providers: the clip you send to the AI feature is deleted from your device immediately after it is sent, and is retained by Google only for the limited period described in its Gemini API terms (principally for abuse monitoring); analytics and install-attribution events are retained by Firebase according to the retention period configured for our project and Google's own policies; crash reports are retained by Sentry for the retention period of our plan (by default around 90 days) and can be deleted sooner on request; purchase records are retained by the app store, and by us for as long as we are required to keep transaction records for tax and accounting purposes. Data you send us directly (a support email or a "Report a problem" message) is kept only as long as needed to address your request and to keep a record of the issue, and is then deleted.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

Because most of your data stays on your own device, its security depends significantly on your device's own security (e.g., screen lock, OS updates). Data sent to the AI feature, analytics, crash reporting, or billing providers is transmitted using industry-standard encryption in transit, and access to our provider dashboards is protected by strong authentication. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly collect data from or market the App to children under 18. By using the App, you represent that you are at least 18, or that you are the parent or guardian of a minor and consent to their use of the App under your supervision. If we become aware that we have inadvertently received personal information from a user under 18 (for example, through a support email), we will delete it. If you believe this may have happened, contact us at weightliftinganalysis@gmail.com.

11. WHAT ARE YOUR PRIVACY RIGHTS?

Because your recordings and lift data live on your device, you already have direct, immediate control over them: you can view, edit, export, or permanently delete any recording or lift at any time from within the App, or delete all App data by clearing the App's storage or uninstalling it. Exporting a lift as a video or CSV file also serves as a way to obtain your data in a portable form.

If you are in the European Economic Area, the UK, or another region with similar data protection laws, you have the right to request access to and a copy of any personal information we hold about you, to have it corrected or erased, to restrict or object to certain processing, and to receive it in a structured, commonly used, machine-readable format (data portability). Where processing is based on consent — the AI feature and crash reporting — you may withdraw that consent at any time in Settings, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights regarding information we hold, contact us at weightliftinganalysis@gmail.com; we will respond within the period required by applicable law (one month under the GDPR) and may need to ask you for information to verify your identity. Requests concerning data held by Google (analytics, ads, Play purchases) may need to be directed to Google, and we will help you where we can.

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with your local data protection supervisory authority. In Poland this is the President of the Personal Data Protection Office (https://uodo.gov.pl). A list of EEA authorities is available at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en, and the Swiss authority's details at https://www.edoeb.admin.ch/edoeb/en/home.html.

12. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature. As no uniform technology standard for recognizing DNT signals exists yet, the App does not currently respond to them. You can still limit ad tracking specific to your device through your device's own advertising ID settings, note that the App requests non-personalized ads in any case, and you can remove ads entirely with the ad-removal add-on.

13. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes. If you are a California resident, you have rights to know, delete, and correct the personal information we hold, and not to be discriminated against for using them.

The categories of personal information described by the California Consumer Privacy Act (CCPA), as amended, that we or our providers have collected in the preceding twelve (12) months are:
CategoryCollectedNotes
A. Identifiers (e.g., device identifiers, advertising ID, IP address)YESThrough analytics, App Check/Remote Config, ads, and crash reporting. We do not collect your name, address, or account credentials.
B. California Customer Records categories (name, contact, financial information)LIMITEDOnly your email address and whatever you write, if you email us for support. Payment details are handled by the app store and never reach us.
C. Protected classification characteristicsNO
D. Commercial information (purchase history)YESWhich add-ons you purchased, via the app store's billing system.
E. Biometric informationNOThe App does not perform face or biometric recognition. Bar path tracking analyzes the barbell, not people.
F. Internet or other network activityYESIn-app usage events and install attribution, via Firebase Analytics.
G. Geolocation dataAPPROXIMATE ONLYCoarse, country/region-level location derived by providers from IP address. The App does not request or use precise device location.
H. Audio, electronic, visual or similar informationON DEVICE; UPLOADED ONLY IF YOU OPT INYour videos stay on your device. A clip is transmitted to Google only when you use the AI analysis feature (Section 3).
I. Professional or employment-related informationNO
J. Education informationNO
K. Inferences drawn to create a profileNOWe do not build profiles about you, and ads served in the App are non-personalized.

We have not sold personal information, and have not shared it for cross-context behavioral advertising, in the preceding twelve months, and we do not intend to. The App requests non-personalized ads. We do not collect sensitive personal information for the purpose of inferring characteristics, so the right to limit its use does not apply.

As a California resident you may request to know what personal information we have collected, used, and disclosed about you (Sections 1 and 5 describe this), to have it deleted, and to have inaccurate information corrected, and you will not be discriminated against for exercising these rights. You may use an authorized agent to make a request; we may deny a request from an agent who does not provide proof of valid authorization. Upon receiving a request we will verify your identity by matching the information you provide with information we already hold, and we will use information supplied for verification only for that purpose and delete it afterwards. We are not required to re-identify de-identified data in order to answer a request. To make a request, contact us at weightliftinganalysis@gmail.com.

California Civil Code Section 1798.83 ("Shine The Light") additionally permits California residents to request information about personal information disclosed to third parties for their own direct marketing purposes. We make no such disclosures. If you are under 18, reside in California, and have posted content within the App, you may request removal of that content by contacting us — note that content created in WL Analysis is stored on your own device and you can delete it yourself at any time.

14. DO WE MAKE UPDATES TO THIS NOTICE?

Yes, we will update this notice as necessary — for example, when we add or change a feature that affects how information is collected or used, such as the AI technique analysis described in Section 3. The "Last updated" date at the top of this notice reflects when it was last revised. If we make material changes, we will notify you within the App or by other prominent means. We encourage you to review this notice periodically.

15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at weightliftinganalysis@gmail.com, use the "Report a problem" action inside the App, or write to us by post at:
Karol Smolak
ul. Rolnicza 12
Ropczyce, Podkarpackie 39-100
Poland

16. HOW CAN YOU REVIEW, UPDATE OR DELETE THE DATA WE COLLECT FROM YOU?

Since your recordings and lift data live on your device, you can review, edit, export, or delete them at any time directly within the App. For any information you have sent us directly (support emails, bug reports), or for questions about the AI feature or any other part of this notice, please contact us at weightliftinganalysis@gmail.com or visit http://www.wlanalysis.com.