Last updated: October 26, 2026
This Privacy Policy explains how the Duzz mobile application ("the App") handles your information. The App is developed by Patrik (hereafter "we", "us", or "the Developer").
The App does not collect, transmit, or store any personal data on our servers. Everything you create — workouts, training plans, exercise logs, body measurements, progress photos, and settings — is stored exclusively on your device using a local database (Android Room) and local preferences (DataStore). Your data, including your progress photos, never leaves your device. The only exceptions are optional and switched on by you: suggesting an exercise (section 2.1) and the monthly challenges (section 2.2).
When you create a custom exercise you can turn on "Suggest it to Duzz" (off by default). Only then do we send the exercise to our server (Cloudflare): its name, muscles, equipment, type, difficulty and instructions, plus your phone's language and the app version. No account, device identifier, workout or profile data is sent. To limit abuse we keep a cryptographic fingerprint of the IP address that changes every day; it cannot identify you or link submissions from different days. We use these suggestions only to decide which new exercises to add to the app's library. Please don't put personal data in the name or the instructions. Legal basis: your consent, given by turning the option on. To have a suggestion deleted, email us with the exercise name.
Monthly challenges work on your device: the App counts your reps from your workouts locally. To show you how many people take part, your place on the leaderboard and your friends' progress, when you join a challenge the App sends our server (Cloudflare) only: a random identifier created by the server for your installation (not tied to your phone, an account or your name), the name you choose for the leaderboard, your level and the number of reps done in the challenge. If you create or join a group of friends, we also store the group code. The name you choose is visible to other participants (on the leaderboard) and to the members of your group: don't use your full name if you'd rather not. We do not send your workouts, profile, measurements or photos. To limit abuse we keep a cryptographic fingerprint of the IP address that changes every day. Legal basis: your consent, given by joining; you can leave the challenge and the group at any time in the App, and to delete your challenge data entirely you can write to us.
Duzz includes an optional on-device AI workout generator. When you enable it, an AI model is downloaded once to your device and then runs entirely on your device, offline. Your inputs and the generated workouts are processed locally and are never sent to us or to any third-party server.
The App displays advertisements served by Google AdMob (including banner, interstitial, and opt-in rewarded ads). AdMob is a service of Google LLC and is subject to its own privacy policy. To serve ads, AdMob may automatically collect:
Full details: Google Privacy Policy · AdMob & AdSense Data Policy.
On first launch, if you are located in the European Union, EEA, or United Kingdom, you will see a consent dialog compliant with GDPR/ePrivacy. You can:
You can reset your choice at any time by resetting your Android Advertising ID (Android Settings → Google → Ads → "Reset advertising ID") or by reinstalling the App.
If you install the App from Google Play, Google Play collects data under its own policies: Google Play Policies.
| Permission | Reason |
|---|---|
INTERNET | Load advertisements and download the optional AI model |
ACCESS_NETWORK_STATE | Check connectivity |
POST_NOTIFICATIONS | Workout reminders and rest-timer alerts |
SCHEDULE_EXACT_ALARM / USE_EXACT_ALARM | Fire the rest timer at the right time |
WAKE_LOCK / FOREGROUND_SERVICE | Keep an on-device AI generation running with the screen off |
VIBRATE | Rest-timer and reminder haptics |
com.google.android.gms.permission.AD_ID | Used by AdMob to serve ads |
When you tap "Share" on a workout or program, the App generates a text summary locally and opens Android's native share menu. The content is created on your device and sent exclusively to the target app you choose (WhatsApp, messaging, email, etc.). We do not receive a copy.
The App is not directed at children under 13. We do not knowingly collect data from children. AdMob is configured to not target content to children (COPPA).
Since we don't collect data, there is no data-breach risk from our side. Data on your device is protected by Android's security mechanisms (app sandbox).
Since we do not process personal data on our servers, GDPR rights of access, rectification, deletion, etc. do not apply to our operations. To exercise these rights regarding data processed by Google AdMob, refer to Google's policies.
At any time you can:
We may update this Policy over time. The last updated date is shown at the top. Material changes will be communicated through an in-app notice.
For privacy questions: [email protected]