Privacy Policy
Effective 24 September 2026 · Version 1.3 · Applies to the OffWall Android application and the offwall.app website
OffWall works without an account. Without one, your training data never leaves your phone. Two things do: the app loads exercise preview images from YouTube, so YouTube sees your IP address; and if you tap Send on a feedback note, that note reaches us with a random identifier for your installation. If you create an account, we store your email address and one backup copy of your training data so you can restore it on another phone. Your training data can include information about pain and injury, which is health data under the GDPR; we process it only with your explicit consent. Videos are never uploaded. We do not sell data, run advertising or use analytics. You can delete your account and all stored data at any time, in the app or at https://api.offwall.app/delete-account. One optional switch in the app, off unless you turn it on, sends training numbers that help us see whether the programmes work; it never includes pain or injury entries, and turning it off deletes what it sent. A second switch, also off unless you turn it on, lets an AI assistant you choose read a summary of your training so it can answer questions and suggest changes you accept or reject; that provider is not our processor, and turning the switch off deletes the summary and cuts its access.
1. Who we are
The controller of your personal data is OffWall. Email: hello@offwall.app. Website: offwall.app.
This policy explains what personal data we process when you use the OffWall app ("the App") and the offwall.app website ("the Website"), why we process it, and the rights you have. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Swedish law.
2. Data processed only on your device
The App stores your workouts, training plans, climbing log, photos and videos of climbing attempts, settings, and your answer to whether you are under 16, in a database on your device. Until you create an account, this data is not transmitted to us or to anyone else. We have no access to it. The App contains no analytics, advertising or tracking software.
One exception is outside the App’s control and worth knowing about: if Android’s own backup is switched on for your phone, Android copies your training data and your climbing photos to your Google Drive, encrypted so that Google cannot read them. That is a setting on your phone, not ours, and it happens whether or not you have an OffWall account. We never see that copy. You can turn it off in your phone’s Android settings, under Google and then Backup. Videos are never included, and your sign-in is never included, so a restored backup cannot sign anyone in as you.
3. Personal data we collect
If you choose to create an account, we collect the following data.
| Category | What it includes | Source |
|---|---|---|
| Account identifier | Your email address, and a password if you set one. The password is never stored: what we keep is a slow one-way hash of it, from which the password cannot be recovered. You can also sign in through a link we email to you instead. | You |
| Training backup | One archive containing your training database, plans, photos and settings. It is replaced each time you back up. Videos are never included. | You, via the App |
| Health-related data within the backup | Whether a set caused pain, injury-progression records, restricted movements and comparable entries you make in your log. | You, via the App |
| Consent record | The time at which you ticked the box agreeing to the storage of health-related entries. | You, via the App |
| Authentication records | Hashed sign-in tokens, hashed session tokens, and the time and network (IP) address of each sign-in request. | Generated by the service |
| Product-improvement records | Only if you turn on Help improve OffWall in the app, which is off by default: one row per logged set, holding the date, which block and exercise it belonged to, its position in the session, whether it was skipped, the sets, reps, load and duration you logged, the sets, reps, load and duration that were prescribed, the version of the training content they were prescribed under, and which days you had planned which blocks for. It contains no pain or injury entries, no notes you write, no rated exertion, and nothing from rehabilitation or injury programmes. | You, via the App |
| Training summary shared with your assistant | Only if you turn on Ask your own assistant, which is off by default: today's date, your goals and their weekly targets, what you have planned this week and on which dates, how many sessions you ran in each of the last four weeks, the training tracks you are following including any rehabilitation track, the names and doses of blocks you built, your climbing log and the climbs you are projecting, the results of any track assessment you have taken, and the last time you did each exercise: the sets, the reps or seconds, the load and the effort you rated out of 10. It contains no notes you write and no photographs. | You, via the App |
| Feedback you send | The text of any note you send with Send feedback in the App, together with the screen you were on, the App version, the training-content version, your Android version, your device model, and a random identifier for your installation of the App. Your account is attached to the note only if you were signed in when you sent it. | You, via the App |
| Correspondence | Anything you send to hello@offwall.app. | You |
The Website sets no cookies. When you visit it, our hosting provider processes your IP address and browser request as a technical necessity of serving the page.
4. Purposes and legal bases
| Purpose | Data used | Legal basis |
|---|---|---|
| Creating and operating your account, sending sign-in and deletion emails | Email address, authentication records | Performance of a contract, Art. 6(1)(b) GDPR |
| Storing and restoring your training backup | Training backup | Performance of a contract, Art. 6(1)(b) GDPR |
| Storing health-related entries contained in your backup | Health-related data | Your explicit consent, Art. 9(2)(a) GDPR, given by ticking the box when you create the account. You may withdraw it at any time by deleting the account. |
| Seeing whether the training programmes we publish do what they claim: whether the prescribed doses are the doses people run, which exercises get skipped, which loads people progress, how long people keep training, and which ways of planning get used | Product-improvement records | Your consent, Art. 6(1)(a) GDPR, given by turning on Help improve OffWall. You may withdraw it at any time by turning the switch off, which deletes the records. These records deliberately exclude health-related entries, so no Art. 9 processing arises. |
| Preventing abuse of the sign-in system, limiting how many emails one address or network can trigger | Authentication records, IP address | Our legitimate interest in the security of the service, Art. 6(1)(f) GDPR |
| Letting the AI assistant you choose read your training summary, so it can answer questions about your plan and suggest changes for you to accept or reject | Training summary shared with your assistant | Your consent, Art. 6(1)(a) GDPR, given by turning on Ask your own assistant and again by authorising that assistant. ⚠️ The summary names the tracks you follow, so if one of them is a rehabilitation track this reveals an injury, which is data concerning health: that disclosure rests on your explicit consent, Art. 9(2)(a) GDPR. You may withdraw it at any time by turning the switch off, which deletes the summary from our servers and revokes your assistant's access immediately. |
| Reading and acting on feedback you send from the App, and writing back to you about it if you were signed in | Feedback you send | Our legitimate interest in correcting and improving the App, Art. 6(1)(f) GDPR. Sending a note is entirely voluntary and the App works without it. |
| Answering your requests and exercising your rights | Correspondence | Legal obligation, Art. 6(1)(c) GDPR, and legitimate interest |
Creating an account is voluntary. The App is fully functional without one. We do not use your data for profiling, automated decision-making, advertising, or any purpose not listed above. Under the GDPR the pain and injury entries are likely to be data concerning health.
5. Recipients and international transfers
We do not sell personal data and do not share it with third parties for their own purposes. We use two service providers, which process data on our behalf under data processing agreements pursuant to Art. 28 GDPR:
| Provider | Role | Location and transfer safeguard |
|---|---|---|
| Cloudflare, Inc. | Hosting of the service, the database and backup storage; delivery of the Website | United States, with EU infrastructure. EU-US Data Privacy Framework certification and Standard Contractual Clauses. |
| The AI assistant you connect (for example Anthropic's Claude or OpenAI's ChatGPT) | Reads the training summary described above, at your instruction, for as long as you leave Ask your own assistant on. ⚠️ THIS ONE IS NOT OUR PROCESSOR: the provider decides for itself what it does with what it reads, under its own terms and privacy policy, which you accepted with them. We send it nothing until you connect it and nothing after you disconnect it. | Wherever that provider operates, under the terms you agreed with them |
| Resend (Plus Five Five, Inc.) | Sending sign-in and deletion emails | United States, sending from EU infrastructure. EU-US Data Privacy Framework certification and Standard Contractual Clauses. |
Where personal data is transferred outside the European Economic Area, we rely on the safeguards listed above. You can request a copy of the relevant clauses at hello@offwall.app. We will disclose personal data to public authorities only where required by law.
6. Retention and deletion
- Email address, consent record and training backup are kept until you delete your account.
- Sign-in links expire after 15 minutes. Sessions last until you sign out or delete the account. Sign-in request records, including IP addresses, are kept only as long as needed to enforce rate limits and are removed with the account.
- Product-improvement records are kept until you turn Help improve OffWall off or delete your account, whichever comes first. Turning the switch off removes every row it sent, and the record of your consent with them.
- The training summary shared with your assistant is kept until you turn Ask your own assistant off or delete your account, whichever comes first. Turning the switch off deletes it, along with its history and any suggestion an assistant had left waiting, and revokes that assistant's access at once.
- Feedback you send is kept until it has been acted on and for up to 12 months after that. A note you sent while signed in is deleted with your account. A note sent before you signed in carries only the random installation identifier, which we cannot connect to you, so it remains.
- Correspondence is kept for as long as needed to handle your request and for up to 12 months thereafter.
When you delete your account, the stored backup, all sessions, all sign-in records and your email address are deleted from our live systems immediately. Our hosting provider retains point-in-time recovery copies for up to 30 days for disaster recovery; these are not accessible in normal operation and are overwritten automatically.
You can delete your account in the App under Profile, Account, or through the web form at https://api.offwall.app/delete-account, which requires no installed app. Deleting the account does not affect data stored on your device.
7. Security
All data is transmitted over TLS. Sign-in tokens, session tokens and passwords are stored only as one-way hashes, so a copy of our database cannot be used to sign in as any user. Passwords use PBKDF2-HMAC-SHA256 at 210,000 iterations with a separate random salt per account, which is the strength the OWASP guidance specifies for this method. Changing your password signs out every device that was signed in. Access to production systems is restricted to the controller. Videos are excluded from backups both by the App and by the server, which refuses them.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15);
- rectify inaccurate data (Art. 16);
- erase your data (Art. 17);
- restrict processing (Art. 18);
- data portability, receiving your data in a machine-readable format (Art. 20);
- object to processing based on legitimate interest (Art. 21);
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3)).
Two of these need no request: the App exports all your data to a file you keep (portability), and account deletion is available in the App and on the Website (erasure and withdrawal of consent). For all other requests, write to hello@offwall.app. We respond within one month. We may ask you to confirm the request from the email address on the account.
You also have the right to lodge a complaint with a supervisory authority. In Sweden this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se. You may instead contact the authority in the EU country where you live or work.
9. Children
OffWall is not directed at children. You must be at least 16 years old to create an account. If we learn that an account belongs to a person under 16, we will delete it. The App's question about whether you are under 16 only adjusts training recommendations and is stored on your device.
10. Changes to this policy
We may update this policy when the service, the law or our providers change. The effective date and version number at the top identify the current version. If a change affects what data is collected or who receives it, we will notify you in the App before it takes effect.
11. Contact
OffWall · hello@offwall.app