Privacy policy
Effective 14 October 2026 · version 2026-10-14
Who we are
Stwong is a training and nutrition coach for iPhone and Apple Watch, made by Quantum Leap Technologies (Pty) Ltd, 194 Bancor Avenue, Park Lane West Building, Waterkloof Glen, Pretoria, 0181, South Africa (“we”). We decide how your data is used (the responsible party or controller). Our Information Officer, who is also the person in charge of personal information for Canada and Quebec, is Johan Coetzee: support@qltech.co.za.
The short version
Most of what Stwong knows about you stays on your iPhone. If you turn on cloud help, some of it is sent, for that request only, to write a reply. If you turn on Backup, a copy of your log is kept on your account so you can sign in on another iPhone and carry on. We don't sell data, show ads, or use analytics or tracking tools.
On your iPhone
With your permission Stwong reads from Apple Health: workouts and their routes, sleep, heart rate, heart rate variability, resting heart rate, VO2 max, weight, body fat, lean body mass, active and resting energy, running speed and power, workout effort, walking and running distance, height, date of birth and sex; if you ride, cycling distance and power; and only if you switch them on, overnight wrist temperature and breathing rate, State of Mind and mindful minutes, and period days from Cycle Tracking. It writes the meals (energy, protein, carbohydrates, fat), water, caffeine, weight, workouts and effort you log, and, if you switch it on, State of Mind and mindful minutes. State of Mind, mindful minutes and period days never leave your iPhone. Your meals and photos, weights, plan, chat with your coach, the coach's notes about you and your answers to the optional well-being check are stored on your iPhone and Apple Watch. Unless you turn on Backup, we cannot see them. Voice input is turned into text on your iPhone where the device supports it.
Cloud help (optional, off until you turn it on)
When you turn on cloud help and are signed in, these are sent to our server and on to Anthropic, the AI provider, to answer that one request:
- a meal photo or description, when you ask for a cloud estimate;
- for the morning brief, a summary of numbers such as sleep time, heart rate variability and resting heart rate;
- for coach chat, the coach's daily or weekly review and weekly replanning: what you type, any photo you add to the chat, and a summary: your age, sex, height, weight, heart rates and body fat if you entered them, recent sleep, training and weight trends, the meals you logged and their items, and the notes you let the coach remember.
Raw Apple Health records are never sent. If a message suggests you may harm yourself, it is not sent at all, and the app shows where to get help. Our server does not store what you send or the replies. Anthropic processes each request in the United States: it does not use it to train its models, and deletes it within 30 days unless it must keep it longer to investigate misuse or by law. You can turn cloud help off at any time in You, AI and privacy; Stwong keeps working on the phone.
Backup (optional, off until you turn it on)
When you turn on Backup (in onboarding or You, Account), a copy of your profile, races and plan, the meals you logged (without photos), your workouts and strength sets, check-ins, coach chat and the coach's notes, and your settings is kept on your Stwong account, so signing in on another iPhone, or after reinstalling, brings them back. Raw Apple Health records, photos, State of Mind, mindful minutes, period days, your feelings log and the health check are never copied. We use it only to restore it to you: not to coach you, not for analytics, never for advertising. It is stored by Supabase in the EU (Paris), encrypted at rest but not end-to-end encrypted, so our authorised staff could technically access it. Turning Backup off or deleting your account deletes it at once.
What our server keeps, and for how long
| What | How long |
|---|---|
| Your account (email or Apple's relay address) | Until you delete your account |
| Consent choices, with dates | Until you delete your account, then 3 more years with your email, to show what you agreed to |
| Subscription status, App Store region and Apple's transaction IDs | Until you delete your account |
| For each cloud request: time, model, size, cost and outcome (never what you wrote or the reply) | 90 days |
| Whether a chat used the safety path for pain, eating or a red flag (so safety replies don't count against your allowance) | 35 days |
| Your backup, if you turn Backup on (see below) | Until you turn Backup off or delete your account; either deletes it at once |
| An export you upload to download elsewhere | 30 days |
| Emails you send us | As long as we need to answer you and handle any follow-up |
Apple handles payment; we never see card details. Data on your iPhone and Apple Watch stays until you delete it or the app. When you delete your account, everything on our server is deleted at once, except your consent records, which we keep for 3 years.
Who receives data
| Who | What and why | Where | Role |
|---|---|---|---|
| Supabase | Runs our server and database (account, consent records, request logs, subscription status, exports, and your backup if you turn it on) | European Union (Paris); support staff may be in the United States | Processes it for us |
| Anthropic | Writes the AI replies when cloud help is on (the request only) | United States | Processes it for us; no training; deleted within 30 days |
| Apple | Sign in with Apple, payments, iCloud for Crew, WeatherKit | Worldwide | Under Apple's own privacy policy |
| Open Food Facts | Food search words or barcodes, sent straight from your iPhone (with its internet address) | France | Under its own privacy policy |
| USDA FoodData Central | Food search words, when enabled, sent straight from your iPhone | United States | Under its own privacy policy |
Companies that process data for us are bound by contract to protect it at least as well as this policy does. We don't sell personal data, share it for advertising, or let anyone else use it for their own purposes.
Data sent to other countries
We are in South Africa. Our server is in the European Union, and the AI provider is in the United States, so your data may be processed in South Africa, the European Union (France) and the United States. Transfers rely on the recipient's data protection terms, including standard contractual clauses where the law requires them, and on your consent for cloud help. Data held in another country may be accessible to its courts and authorities under its laws. Email us for a copy of the safeguards.
Why we may use it
- Health data (special or sensitive data in most laws) is sent to our server only with your explicit consent, which you can withdraw at any time.
- Your account and subscription: to provide the service you asked for (contract).
- Request logs and the safety flag: to keep fair-use limits and costs in check and to keep safety replies free (legitimate interests).
- Consent records, including for 3 years after you delete your account: to show what you agreed to and when (legal obligation, and to defend legal claims).
What you must give, and what is optional
An account needs an email address or Sign in with Apple. Everything else is optional: Apple Health access, cloud help, location for weather, and Crew. Without one of them, only the features that use it stop working.
AI and automated decisions
Your coach is an AI. Its replies and plan suggestions are not decisions about you: changes to your plan happen only when you accept them, and nothing it does has legal or similarly significant effects on you. We do not use your data to train AI models, and Anthropic may not use it to train its models either.
No tracking
Stwong has no ads, no analytics or tracking tools, and no third party collects data about you across apps or websites through it. Because we don't track you across sites, a browser's “Do Not Track” signal changes nothing here.
Your rights
Depending on where you live, you can: see your data and get a copy you can take elsewhere (You, Export everything); correct it; delete your account and server data at once, apart from consent records kept for 3 years (You, Delete account and data); ask us to restrict how we use it; and withdraw consent at any time. Using these rights never costs you anything or changes how we treat you.
Your right to object: you may object at any time to our use of your data based on legitimate interests. Email us and we will stop unless we have compelling reasons the law accepts.
For anything the app can't do, email support@qltech.co.za. We answer within one month, or sooner where your law requires it. If we turn down a request, you can ask us to reconsider (an appeal) by replying to our answer; we decide within 45 days. In Washington, Nevada and other US states with health-data laws, see also our consumer health data policy.
Complaints
Please tell us first: email us and we'll acknowledge your complaint within 30 days and tell you the outcome. You can also complain to a regulator: the Information Regulator of South Africa (inforegulator.org.za); in the UK the Information Commissioner's Office (ico.org.uk); in the EU your national data protection authority; in Canada the Office of the Privacy Commissioner (priv.gc.ca), or in Quebec the Commission d'accès à l'information (cai.gouv.qc.ca); in Australia the OAIC (oaic.gov.au); in the US your state attorney general.
Keeping it safe
Encrypted connections, owner-only access rules on every server table, no message content in our logs, and iPhone data protection for your chat. If a breach puts you at risk we will tell you and the regulators the law requires.
Children
Stwong is for adults 18 and over. If we learn we hold data about someone younger, we delete it.
Changes
When this policy changes in a way that matters, we show a notice in the app with the new effective date, and ask for your consent again where the law requires it. See also our terms of use.