Privacy

Last updated 9 October 2026.

Prokopō is a training app. It reads what your watch recorded, asks you how you feel, and writes you a plan and a note each morning. To do that it holds data about your health, which is the most sensitive kind there is. This page says exactly what it holds, where, who else sees it, and how to get it back or get rid of it.

It is written to be read, not to be survived. If something here is unclear, that is a fault worth reporting.

The short version

• Your training and health data is stored in one database in the European Union (Ireland).
• It is not sold, not shared with advertisers, and not used to build anything about anyone but you.
• The morning note and your plan are written by Claude, made by Anthropic, in the United States. What is sent is listed below. Your email address and account ID are not among it.
• You can download everything, or delete all of it permanently, from inside the app. Both take one tap to start and neither needs to go through us.

What is collected, and why

Your account. An email address, so you can sign in. If you sign in with Google, Google tells us the email address and name on that account. We never see your Google password.

What you tell us at signup and after. The name you want to be called, your time zone, whether you think in kilometres or miles, what you are training for and when, which sports you do and how much, which days you can train and for how long, what equipment you have, injuries now and in the last year, six health screening questions adapted from the PAR-Q+, how you want to be spoken to, and — if you write one — why it matters to you. This is what the plan is built from; there is no plan without it.

What your watch recorded, if you connect Health Connect. See the section below.

What you do in the app. Sessions you start, finish or skip, sets and weights you log, how hard it felt, and your morning check-in: energy, sleep, soreness, mood, whether you are ill, and anything you type in the note. This is what the day's call rests on.

What you say to the coach. Your messages and its replies, kept so it does not forget a niggle the moment you mention it.

Crash and bug reports. If the app crashes, it writes down what went wrong and sends it the next time you open it. If you report a problem yourself, we get what you typed. Both carry the app version, your phone's make and model, and which screen you were on. Neither carries anything from your training.

The beta list, on prokopo.app. If you leave your email address on the website, we keep that address and the language the page was in, to invite you to the beta and tell you when Prokopō opens — nothing else, and nothing else about you. It is stored in the same EU database, on the basis of your consent, until the beta is over or you ask us to remove it at hello@prokopo.app, whichever comes first. The website sets no cookies and has no analytics.

There is no analytics SDK, no advertising identifier, no tracking of what you tap, and no location data.

Health Connect

If you connect Health Connect, the app reads, with your permission and only the permissions you grant:

• exercise sessions — the type, when it started, how long it lasted, distance and heart rate;
• sleep — when you slept and for how long;
• steps;
• resting heart rate;
• heart rate variability.

It never writes anything back to Health Connect, and it never reads anything it has not asked you for. You can withdraw any of those permissions in Health Connect at any time, and the app keeps working on your check-in alone.

Data obtained through Health Connect is used to work out your training load, your baselines and how ready you are — nothing else. It is not sold, not shared with any third party for advertising, and not used for any purpose you did not connect it for. Deleting your account deletes it here; that does not delete it from Health Connect, which is Google's and yours.

Who else sees it

Supabase hosts the database, the authentication and the server code, in the EU (Ireland). They are our processor and act on our instructions.

Anthropic writes the words. The morning note, the coach's replies and your first week of training are produced by Claude, running on Anthropic's API in the United States. What is sent for a morning note or a reply is: the name you asked to be called, the day's verdict and the numbers behind it, your check-in including anything you typed in it, your recent and upcoming sessions, your own editable note, and the recent conversation. What is sent to write a plan is: your goal, your sports and baselines, your available days, your equipment and your injuries. Your email address, your account ID and your date of birth are never sent. Anthropic processes this to produce the text and does not use API data to train its models.

Because Anthropic processes it in the United States, this is a transfer outside the EU. It happens on the basis of the standard contractual clauses in Anthropic's terms.

Google, if you choose to sign in with Google, tells us who you are. Google Play may also see that you installed the app.

Nobody else. No advertisers, no data brokers, no analytics companies.

What we rely on to hold it

Health and training data is a special category under the GDPR, and the basis for holding it is your explicit consent — given when you create an account and, separately, when you connect Health Connect. You can withdraw either at any time: disconnect Health Connect in Health Connect, or delete your account in the app. Withdrawing does not undo what was lawful before it.

For the account itself — your email, signing you in, keeping the service running — the basis is performing the agreement between us.

How long

Until you delete it. There is no timed purge and no archive: an account that is deleted is gone from the database in one operation, including everything attached to it. We keep no copy to restore from, which is also why there is no undo.

Server logs from the hosting provider are kept on their schedule, not ours, and do not contain your training.

Your rights, and where the buttons are

Inside the app, under You → Your data:

• Export your data writes everything held about you to a file you choose, as JSON. Everything means everything: your profile, your plan, every session, every log, every night and every workout.
• Delete your account removes all of it permanently, immediately. You will be asked to type the word first, because there is no way back.

You also have the rights the GDPR gives you — access, correction, erasure, restriction, portability, and to object — and the right to complain to a supervisory authority. In Sweden that is Integritetsskyddsmyndigheten (IMY). The first two of those you can exercise yourself: everything the app knows is editable under You → Your profile, and the export is the access request, answered instantly.

Children

Prokopō is not for people under 16, and accounts are not knowingly created for them.

Changes

If this page changes in a way that matters, the app will say so rather than quietly updating the date at the top.

Contact

Questions, requests, or something that looks wrong: hello@prokopo.app.