AI Training Coach
Buli Fitness Oy (Business ID 3601232-9) is the controller of the personal data processed in Buli.
Contact: support@bulifitness.fi
Postal address: Ruosilantie 7, 00390 Helsinki, Finland.
This notice explains what we process, why, for how long, who receives it, and your rights. It is not a consent form.
If you import history from another fitness app, the file is read on our backend and not stored. Its workouts are saved to your account marked as imported, and unknown exercises become custom exercises. We keep a record of each import (file fingerprint, source app, counts, date range, time, and whether you undid it) so we can warn you about a duplicate file and let you reverse the import. If you share a file with Buli on iPhone, a copy waits on your phone for the account you are signed in to, or the next account you sign in to. Buli deletes the copy when it opens the import or you sign out, and retries if deletion fails. Unopened copies expire after 24 hours and are deleted when Buli next checks for shared files.
If you connect an assistant, Buli records which assistant you allowed, the data and history period you chose, when and in which language you agreed, your confirmation that you are 18 or older, your time zone, and when access ends. Buli keeps a temporary copy of the training data you allowed so the assistant can read it. When your phone calculates your next workout, it can also save the suggested weights and reps in your Buli account for connected assistants. WorkOS handles authorization using your Buli account identifier and email address. Buli does not save the assistant’s access tokens. If you allow goal editing or suggestions, Buli also saves those changes and suggestions, the assistant that made them and your decisions on them.
Contract: We process account, subscription, support, plan, and workout data to run Buli, personalize your plans, record your progress, manage access, send you account-related messages, and provide support.
Legitimate interests: We keep security, rate-limit, trial-control, and deletion records to protect Buli, prevent abuse, and document deletions.
Legal obligations: Where the law requires it, we keep bookkeeping and payment records.
Consent: Marketing messages and the optional Firebase Analytics, Crashlytics, and Performance diagnostics are based on your consent.
Explicit consent: Sharing training data with an AI assistant you connect is based on your explicit consent, which you give separately for each connection. You can withdraw it at any time by disconnecting the assistant in Buli’s settings or on Buli’s connection page. Withdrawal does not affect sharing that already happened.
Required data: You need an email address to create an account and your answers about your goal, experience, equipment, and schedule to get a plan. Without them we cannot provide Buli. Your age, gender, and weight are not used for the plan. They give your strength level and the load of bodyweight exercises.
Your height is saved in your profile. It is not used to generate your plan.
Buli asks for your permission before each AI plan creation, including any automatic retries. You can decline and use a starter plan or keep your existing plan. Permission is not saved for future requests.
What is sent: To generate your plan, Buli sends your training preferences through our Firebase backend to Google Cloud Vertex AI (Gemini models) on Google Cloud's EU endpoint:
Never sent: your age, gender, height, weight, workout history, notes, and measurements read from Apple Health.
AI output can be wrong. Plan generation is automated, but it involves no decisions with legal or similarly significant effects for you. The generated plan is saved in Cloud Firestore. Do not enter diagnoses, emergency information, or anything you do not want processed for this purpose.
You can connect Buli to an AI assistant and ask it about your training. Start in Buli or in the assistant, sign in to Buli, choose the program, history and goal data you want to share, and approve access. Reading and changes are allowed separately. If you choose, you can also allow the assistant to create, edit, archive or restore training goals. It can suggest program changes, recovery periods, custom exercises and saved workouts. Suggestions change nothing until you apply them in Buli. Available assistants are shown on the connection page.
When you use the connection, the assistant can read the data you allowed:
The assistant also sees your time zone so that dates match your day. Training responses exclude body measurements and body weight, age, gender, notes, moods, heart rate, calories, email, name and other people’s data.
WorkOS, Inc. in the United States handles authorization for us. It receives your Buli account identifier and email, records the access you approve, and sees technical details such as your IP address and browser when you use its pages. It does not receive your workout data. You review the connection in WorkOS after choosing what to share in Buli.
The assistant’s provider decides on its own how it uses the data it receives, under its own terms and privacy policy. It is not our service provider. For a personal account in the EU, the provider is Anthropic Ireland, Limited for Claude and OpenAI Ireland Ltd for ChatGPT. The provider may process the data outside the EU, such as in the United States, under its own safeguards. If you connect a work or school account, your organisation’s agreement with the provider applies and your organisation may see the data. Claude Code runs on your computer and sends the data to the AI provider you set it up with. What the assistant receives becomes part of your conversation there and is kept under the provider’s rules. You can delete it in the assistant.
You can disconnect at any time in Buli under Settings, Privacy, AI assistants, or at buli-mcp.web.app/connect/?manage=1. Disconnecting ends all connections from that assistant to your Buli account, stops new sharing and removes their shared copies. Other assistants keep their own permissions. It does not erase data the assistant already received. Permission expires after 30 days.
The paired Watch can show your current exercise, sets and rest countdown from your iPhone. The rest countdown follows the rest-timer setting in Buli. These workout updates travel directly between your devices.
If you turn Apple Health on, Buli writes each completed workout to HealthKit: type, name, start time, duration, and optional energy.
During a workout, the Apple Watch app may read heart rate and active energy, show them, and save them in Apple Health. For workout and weekly stats, Buli may also read those values from Apple Health on your iPhone, and the watch may send the finished session's average and peak values directly to your iPhone. These measurements displayed in Buli are not saved to your Buli account.
The watch keeps unsent set changes until the phone saves them or the workout ends. A workout identifier and save status kept on your device prevent duplicate Apple Health entries. While waiting for the watch to save, the phone may keep a backup of the workout details you entered in Buli. If the watch save fails, the phone can use those details to create the Health entry. The backup is removed after a successful save. The identifiers are removed when you delete your Buli account.
Heart-rate and energy measurements read from Apple Health stay on your devices. Buli does not send these measurements to its servers or third parties or use them for advertising or analytics.
Workout options let you pause updates to the Watch and its recording, then resume them. Your choice stays on this device. This does not unpair your Watch or revoke its Health permission. You can separately turn the iPhone’s Apple Health sync off in Buli’s settings. The watch records only with the Health permission you grant it, which you can revoke in iPhone settings. You can view and delete Buli's entries in the Apple Health app.
Reminders are created on your device and can be turned off at any time. Buli sends no push notifications to users. Firebase Cloud Messaging is used only for internal administrator alerts.
During setup, Buli requests your phone's notification permission directly. Allowing it enables workout reminders. A previous refusal or a choice to turn reminders off is kept. Training-day reminders, weekly summaries, and reminders after a break share one switch in Settings. Rest days have no recurring reminders. Your preference stays on this device.
While a workout is open, Buli can show its exercise, next set, last-session result and timers on the lock screen using an iPhone Live Activity or an Android notification. These updates stay on your device and contain no measured Apple Health values. You control their visibility in your phone’s notification and Live Activity settings. Rest-over alerts use the notification permission you have already granted, independently of workout reminders. Turning off the rest timer also turns off those alerts.
Apple Health is enabled separately for each Buli account on this device. An older device-wide choice may need to be made again.
App diagnostics help us understand Buli usage, crashes and performance. They are off until you choose to turn them on. Your choice applies to your account and can be changed in Settings. Buli may restore it when you sign back in. If you turn diagnostics on:
Buli does not save setup or workout analytics events before your permission. After permission, a device-only record prevents duplicate workout events. It expires after 48 hours and is removed when you next open a workout. Turning diagnostics off, signing out or deleting the account also removes it. If Buli crashes while diagnostics are off, the crash report stays on your device and is deleted unsent the next time you open Buli.
Marketing messages are also optional. You can withdraw either choice at any time. Withdrawal does not affect processing that already happened lawfully.
We keep versioned records of each grant, denial, withdrawal, and any failure to apply a diagnostics choice, so we can apply and demonstrate your choices.
Each provider receives only the data its task needs. Providers acting on our behalf are bound by data-processing terms. We may disclose data when the law requires it or to protect legal rights.
AI assistants you connect yourself (section 4) are not our service providers. They receive only the data you allow, for your own use, under their providers' terms.
Firestore is configured in Finland, Storage in Firebase's EU multi-region, Functions in Belgium, and plan-generation AI requests use an EU endpoint. Firebase Authentication operates from the United States. WorkOS stores its data in the United States under the EU Standard Contractual Clauses. Global Firebase services, RevenueCat, Apple, Google Play, and Gmail may process data outside the EU/EEA, under safeguards such as adequacy decisions or EU Standard Contractual Clauses where required. Ask us for more information about them.
We do not sell personal data or share it with advertisers. If we use affiliate links, the partners receive no Buli account, workout, or health-related data unless you give it to them yourself.
Data breaches: If a breach is likely to put your rights at risk, we report it to the Data Protection Ombudsman without undue delay and, where feasible, within 72 hours of learning of it. If the risk to you is high, we also tell you without undue delay.
You can export your data and delete your account in the App at any time, without a subscription and without accepting updated terms. You can also request an export from support@bulifitness.fi.
After deletion, we delete your server data and the linked RevenueCat and WorkOS profiles, unless the law or a reason stated above requires limited retention. Deletion does not cancel a store subscription.
Buli tries to clear its data from the current device. Copies on your other devices, in your device backups, or in files you exported or shared remain until you remove them. If local data may remain after account deletion, Buli shows a persistent explanation, a button to retry local cleanup, and steps to remove its app files. If clearing the cache needs an app restart, Buli explains that separately. Uninstalling the app may not remove notes left in iOS secure storage. For help removing local data, contact support@bulifitness.fi.
Depending on the situation, you can:
You can export selected training and profile data, or choose all account data. The full export also contains support tickets, reviews, subscription status, usernames, export logs, import records, consent-choice history, blocks, linked multiplayer records, and your connected assistants with the changes and suggestions they made and the weights and temporary training copies saved for them. Device-only notes and moods are included when you choose to share them. For anything else, contact us.
If a requested part of your data cannot be read, the export stops with an error so you can retry instead of receiving an incomplete archive.
To exercise a right, or to have support records deleted, contact support@bulifitness.fi. We may need to verify your identity.
You can complain to a data protection authority, in particular where you live or work or where the alleged infringement happened. In Finland this is the Office of the Data Protection Ombudsman (tietosuoja.fi).
Buli is not intended for anyone under 13. We do not knowingly collect personal data from children under 13. If we learn that we have, we delete it. Connecting an AI assistant requires you to be 18 or older.
We may update this notice when Buli, our providers, or legal requirements change. We show the current version in the App, update the date below, and notify you of material changes. Where needed, we ask you to review the new notice before you continue.
Last updated: October 16, 2026