Privacy policy

What Koochers collects, why, who sees it, for how long and how to delete it. Last updated: 15 October 2026.

Data controller

MEIZ, EURL, 66 avenue des Champs-Élysées, 75008 Paris, France, SIREN 854 034 683.

MEIZ has not appointed a data protection officer. For any question about your data, write to contact@koochers.com. Jean Saunie, managing director, answers.

Data we process

Your account:

your first and last name
your email
your public handle (@handle)
your password, stored only as a hash
your profile photo, if you add one
your phone number, if you choose to add it
if you use Sign in with Apple: the identifier and email Apple sends us
if you use Continue with Google: the identifier and email Google sends us
the app language
your phone's time zone, for the time of your planned sessions and reminders

Your training:

your programs and sessions
your sets: weights, reps, effort (RPE)
the notes you leave on a set. A note may mention pain.
stats computed from your sessions: number of sessions, time, volume, weekly streaks
your records and milestones, computed from your completed sessions
what you choose to show on your profile: your stats and your pinned records
whether you appear on your friends' leaderboards
the sessions you plan: day, time, reminder
your training profile, if you answer the quiz: goals, level, preferred days and time, training places, club sport and its days, sex, birth year, height, target weight. Every question is optional.
your body measurements, if you add any: weight, body fat, neck, shoulders, chest, waist, hips, arm, forearm, thigh and calf
the health numbers of your sessions, if you use Apple Health or Health Connect (see below)

Your social life in the app:

your friends, friend requests and links with a coach
messages exchanged in the app: text, voice messages, images, chosen GIFs, reactions
your invitations to train together: session, time, place, message, answers of the invitees
the sessions you share: photo, caption, visibility, kudos received

Coaching, if you have a coach or are one:

your coaching consent: what you share with your coach, the version of the text you accepted and its date
the dashboard of each athlete, computed from their sessions
the programs and planned sessions a coach prepares for their client
if you are a coach: your private notes about your athletes and your program templates

Spotter, the Koochers AI assistant (called Coach IA until version 1.0.1 of the app), if you use it:

your conversations with Spotter: your messages, your answers to the questions it asks and its replies
its suggestions, the values you adjust and your decision: applied or turned down
the lasting facts it remembers about you, such as an injury or your equipment
your consent, with its date
the number of messages used in the day
if you are a coach: your conversations with Spotter about each of your clients

Your subscription:

your plan, its period (month, quarter or year) and its status
the information Apple sends about your subscription: product, purchase and expiry dates, renewal state, transaction identifiers
if you subscribe in the Android app: the information Google Play sends about your subscription (product, purchase and expiry dates, renewal state, purchase token)
if you pay on app.koochers.com: the information Stripe sends about your subscription (customer and subscription identifiers, plan, period, dates, status) and your consent to the immediate start with waiver of the right of withdrawal (version of the text, date, language)

Technical:

device tokens used for notifications
server logs (date, request, IP address), for security and troubleshooting
app usage statistics, unless you turned them off (see below)
error and crash reports from the app and the server (see below)
the number of GIF searches of the day, to apply the daily limit

Payment goes through Apple in the iOS app, through Google Play in the Android app and through Stripe on app.koochers.com. We never receive your card details nor your payment method.

We don't collect your location. The app shows no ads. Our usage statistics stay in our own database.

Campaign measurement

To know which campaigns bring us members, the app asks you once whether you accept personalized ads. You can change your mind in the app settings.
If you accept, the app reads the advertising identifier of your phone: the IDFA on iPhone, the Google advertising ID on Android.
We send it to Freelance OS, our campaign measurement tool. It goes with a few events: the install and its source, the sign up, the start, renewal or refund of a subscription.
Your name, your email and your sessions are never part of it. Your account appears under an encrypted identifier.
Freelance OS may pass these events to ad networks such as Meta or Google to measure the results of a campaign.
If you refuse, the advertising identifier is not sent.

Your phone number and your contacts

The number is optional. It only lets friends who have it in their contacts find you.
It is never shown in the app nor visible to another user.
If you allow access to your contacts, the app sends the numbers in your address book to our server to find people already signed up. The numbers are compared, then forgotten. They are neither stored nor written to logs.
Without your permission, no contact leaves your phone. You can remove access at any time in the iPhone settings.
You can delete your number at any time from your profile.

Photos

Your profile photo and the photos of your shared sessions are stored in a private space at Supabase, in the Europe region.
They are not public. The app shows them through signed links that expire: 24 hours at most.
A replaced photo or a deleted post is erased along with its photo.
All your photos are erased along with your account.

Apple Health and Apple Watch

If you allow it, the app reads your heart rate, active energy and body mass from Apple Health.
With your permission, it writes your strength workouts there with their active energy. It writes your body mass when you add a measurement, only if you turned that option on.
Only four numbers per session leave your phone: average heart rate, maximum heart rate, active calories, calorie source (watch or estimate). Everything else stays on your device.
Apple Health data is never used for advertising or marketing. We don't sell it. We don't pass it to any third party beyond what runs the service.
The Apple Watch app has no network connection. It only talks to your iPhone, which is the only one talking to our servers.
You can remove these permissions at any time in the Health app or in the iPhone settings.

Health Connect on Android

If you allow it, the app reads your heart rate, active calories and weight from Health Connect. Your weight only serves to estimate the calories of a session.
With your consent, it writes your strength sessions there with their active calories. It writes your weight there when you add a measurement, only if you turned this option on.
Only four numbers per session leave your phone: average heart rate, maximum heart rate, active calories, calorie source (watch or estimate). Everything else stays on your device.
Health Connect data is never used for advertising or marketing. We don't sell it. We don't pass it to any third party beyond what runs the service. Its use follows the Health Connect permissions policy, including its Limited Use requirements.
You can withdraw these permissions at any time in Health Connect or in the Android settings.

Voice messages and GIFs

Your voice messages are stored in a private space at Supabase, in the Europe region. Only the members of the conversation can play them, through signed links that expire after one hour. They are erased along with your account.
GIF search comes with the Spotter and Coach plans. It goes through our server. It sends the text of your search to GIPHY, without your name or account. We don't store that text. We only count your searches of the day.
When a GIF is shown, your phone loads it from GIPHY's servers, which then receive your IP address. See GIPHY's privacy policy.

Records and leaderboard

Your records and milestones are computed from your completed sessions. Nobody types them in.
You choose the stats and records shown on your profile. Your friends only see the records you pinned. Only you see all your records.
The leaderboard compares you with your friends: sessions, regularity, volume, progress, distance. It shows totals, never your live session.
You appear on it by default. You can leave at any time with the setting "Appear on my friends' leaderboards".
The board relative to body weight only uses your weight if you already share it with your friends.
Someone you blocked never sees you on a leaderboard.
At most one notification a week may tell you your rank. It follows your social notification setting.

Share cards

End of session cards are made on your phone. The photo you pick doesn't leave it unless you post or send the card.
A card sent in a Koochers conversation is stored as an image in a private space at Supabase, in the Europe region. Only the members of the conversation see it, through signed links that expire. It is erased along with your account.
A card shared to Instagram, Messages or another app follows that app's rules.

Usage statistics and error reports

The app tells us which screens and features get used: a completed session, a card made, the leaderboard opened. Each event carries a name from a fixed list, the app version and a few simple values. Never free text. Never the content of your messages or notes.
These statistics are on by default. You turn them off in Settings with "Usage statistics". Sending stops and past events are detached from your account.
When the app or the server hits an error, a crash or a hang, we store a report: error code and message, where it happened, app and iOS version, device model, your account if you are signed in. Messages are scrubbed before storage.
Error reports keep going when statistics are off, without the screen name. They are used for security and to fix bugs.
Everything stays in our database at Supabase, in the Europe region. No third party analytics or error tracking tool. Only MEIZ has access.

Measurements and training profile

Your measurements are private by default. You choose who sees them: Nobody, My friends or Everyone.
Everyone means anyone who opens your profile in the app, even if they are not your friend. Your profile stays invisible outside the app.
Your weight has its own setting, with the same choices. It is never shown to more people than your other measurements.
The note on a measurement is never shown to anyone but you.
A coach linked to you under the current coaching text sees all your measurements and your weight, whatever your setting. They don't see the note (see Coaching).
Your training profile is used to build your starter program and your planned sessions. You can change it at any time in Profile, then Settings.

Invite links

When you invite someone by link, the address carries an invite code.
The page behind that link is public. It shows your name, the session and its exercises, the time, the place and your message.
It is no longer available once the invite is cancelled or expired. Only share the link with the people you invite.

Coaching

When you join a coach with their code, the app shows you what they will see. The link is only created with your consent.
The current text of this consent is version coaching-2026-10. It covers your session history and your live sessions. It also covers all your measurements with your weight, whatever your privacy setting.
It also covers the programs the coach writes for you and the sessions they plan in your week. Last, it lets the coach ask Spotter for help about you (see Spotter).
We record your consent with the version of the text you accepted and its date.
If you accepted the previous version (coaching-2026-09), it keeps its meaning until you accept the new one. Your coach then sees your measurements only if you share them with your friends. They can't ask Spotter to help with you. The app shows you the new text.
You withdraw your consent by ending the link with your coach, at any time. Your coach can end it too. They then no longer have access to your sessions.
A coaching link created before version 1.2 keeps working. The app offers you to give your consent on it.
Your coach sees a dashboard computed from your sessions: your last session, the sessions done, planned and missed this week, the trend over four weeks and your latest measurement.
Coach mode comes with the Coach plan. A coach can create programs for you and plan sessions in your week. They show up in your app.
A coach can write private notes about each of their athletes. Only that coach sees them. The athlete never does. They are erased when the coach or the athlete deletes their account.

Spotter

With the Spotter and Coach plans, an assistant answers your training questions. It suggests changes: program, schedule, current session, measurements. Nothing applies without you: you accept or turn down each suggestion.
Your exchanges are kept as conversations. You start a new one whenever you want. You can delete one at any time.
To answer, it receives your messages, your profile, your training profile, your programs, your recent sessions, your records and stats, your latest measurements and the session on screen. It can also read the history of one exercise or one session when your question needs it.
Long conversations are summarised automatically. The summary replaces the older messages in what is sent to the model.
Spotter remembers the lasting facts you tell it, such as an injury, your equipment or your schedule. It uses them in your next conversations. These facts are sent to Anthropic with your messages.
You can see and delete these facts in the Spotter settings. They are erased when you withdraw your consent or delete your account.
This data can concern your health. Spotter only works with your explicit consent, asked in the app before the first use. We record the date of your consent.
You can withdraw your consent at any time in the app. Your conversations and the remembered facts are then erased.
The model is Claude, provided by Anthropic, acting as a processor. Your data is not used to train its models. See Anthropic's privacy policy.
With the Coach plan, a coach can also ask Spotter for help with one of their clients. That client must have accepted the current coaching text, which provides for it. A friend who is not their client is never concerned.
The model then receives that client's profile, training profile, recent sessions and the measurements the coach may see. It never receives the note on a measurement.
The coach can have facts about that client remembered. They are erased when the coaching link ends.
Spotter only proposes programs, workouts, supersets and planning for that client. The coach is the one who applies them.
A coach's conversations about a client are erased when the coaching link ends or when the coach or the client deletes their account.

Why and on what basis

Running your account, sessions, friends, posts and the follow-up with your coach: performance of the contract (terms of use).
Computing your records, showing your profile and the friends leaderboards: performance of the contract.
Finding friends by the numbers in your contacts: your consent, given when you allow contacts access.
Notes that mention pain can be health data. You choose to write them and share them with your coach. We process them based on your explicit consent. You withdraw it by deleting the note or your account.
Reading and writing Apple Health: your consent, given in the Apple Health permission. Heart rate is health data, processed based on your explicit consent.
Your measurements and training profile can reveal information about your health. We process them based on your explicit consent, given when you enter them. You choose who sees your measurements. You withdraw your consent by deleting them.
Coaching, including the help from Spotter your coach asks for: your explicit consent, given when you accept the coaching text, because this data can concern your health. You withdraw it by ending the link.
A coach's private notes and their athletes' dashboard: performance of the contract with the coach.
Spotter, its conversations and the facts it remembers: your explicit consent, given in the app, because the data sent can concern your health. You can withdraw it at any time.
Planned sessions, reminders, invites, voice messages and GIF search: performance of the contract.
Sending service emails such as verification codes: performance of the contract.
Reading and writing Health Connect: your consent, given in the Health Connect permission. Heart rate is health data, processed based on your explicit consent.
Reading the advertising identifier and sending it to measure campaigns: your consent, given in the app. You can withdraw it at any time in the settings.
Managing your subscription from Apple's, Google Play's or Stripe's information: performance of the contract. Keeping proof of your consent to the immediate start of a web subscription: our legitimate interest. Keeping the transaction history: legal accounting duties.
Usage statistics: legitimate interest, to know what gets used and improve the app. You can object at any time with the "Usage statistics" setting.
Securing the service, preventing abuse and fixing bugs, including error reports and the GIF search limit: legitimate interest.

Who sees what

Any signed in user can find you by handle or display name to send you a friend request. They then see your handle, display name and profile photo. By default your display name is your first name followed by your last name. You can change it in your profile.
Your friends see the progress of your current session, your stats and the sessions you share with the Friends visibility.
Your friends also see the stats and records you show on your profile. They see you on their leaderboards if you appear on them.
A session shared with Only me stays visible to you only.
In ghost mode, your session doesn't show up live for your friends nor your coach.
In a group session, each member sees the others' set, reps and load.
Your measurements are seen according to your setting: nobody, your friends or anyone who opens your profile. Your weight follows its own setting, never wider. The note on a measurement is seen by you only.
The members of a conversation see its messages, voice messages, images, GIFs and reactions.
A coach linked to you sees what you accepted: your history, your live sessions, all your measurements with your weight, the programs and sessions they prepare for you. They also see your notes on your sets. They can reply and suggest changes.
When your coach asks Spotter for help about you, Anthropic receives the data described in the Spotter section.
A coach's private notes about an athlete are visible to that coach only.
Your conversations with Spotter and the facts it remembers are seen by you only.
Usage statistics and error reports are seen by MEIZ only.
Nobody else. Your profile is not visible outside the app. We don't sell your data.

Our processors

Vercel Inc.: API and website hosting (United States).
Supabase: database, usage statistics, error reports and storage of photos, voice messages and images (Europe region).
Resend: service email delivery.
GIPHY: GIF search and display. See GIPHY's privacy policy.
Anthropic, PBC: Spotter (Claude API), United States. See Anthropic's privacy policy.
Apple: subscription sales and payment. Apple is the seller. It only sends us the state of your subscription.
Stripe Payments Europe, Ltd. (Ireland): payment of subscriptions bought on app.koochers.com. Stripe receives your email, your name, your payment method, the address details asked at checkout and a VAT number if you give one. It only sends us the state of your subscription. For fraud prevention and its own legal duties, Stripe also acts as a controller. See Stripe's privacy policy.
Apple: also Sign in with Apple, notifications and app distribution.
Google: Google Play for subscription sales and payment in the Android app, Continue with Google, Android notifications (Firebase Cloud Messaging) and app distribution. Google Play only sends us the state of your subscription.
Freelance OS: publishing tool for the koochers.com website and campaign measurement tool (see above).

Each one only accesses the data it needs for its task, under contract.

Retention

Account, training, records, friends, posts and photos: as long as your account exists. They are erased as soon as it is deleted.
Messages: the conversations you take part in are erased along with your account, images included.
Your contacts' numbers: not kept. They are compared, then forgotten.
Voice messages, measurements, training profile and planned sessions: as long as your account exists. They are erased along with it.
Text of your GIF searches: not kept. The count of the day is forgotten the next day.
Coaching consent: as long as the link with your coach exists.
A coach's private notes: until they delete them or until the coach or the athlete deletes their account.
Conversations with Spotter: until you delete one, withdraw your consent or delete your account.
Facts remembered by Spotter: until you delete them, withdraw your consent or delete your account.
A coach's conversations with Spotter about a client and the facts remembered about them: until the coaching link ends or the coach or the client deletes their account.
Verification codes: 15 minutes.
Server logs: 30 days at most.
Usage statistics: 13 months. They are detached from your account when you turn them off or delete your account.
Error reports: 90 days. They are detached from your account when you delete it.
Transaction history received from Apple, Google Play or Stripe: 10 years, as required by French commercial law. Apple and Stripe keep their own payment data under their rules.
Consent to the immediate start of a web subscription: 10 years, as required by French commercial law. If you delete your account, it is kept without your name or email.

The full procedure is on the Delete your account page.

Transfers outside the European Union

Vercel, Resend, Apple and Stripe may process data in the United States. These transfers rely on the EU US Data Privacy Framework when the provider is certified. Otherwise on the European Commission's standard contractual clauses.

Your exchanges with Spotter are processed by Anthropic, which may process them in the United States. This transfer relies on the European Commission's standard contractual clauses.

The text of a GIF search and your phone's IP address are sent to GIPHY. GIPHY's privacy policy says where and how it processes them.

Children

Koochers is not intended for people under 15. In France, a person under 15 cannot consent alone to the processing of their data: the agreement of a holder of parental authority is required. If we learn that an account belongs to a child under 15 without that agreement, we delete it. A parent can write to us at contact@koochers.com.

This website and cookies

koochers.com sets no cookies and uses no audience measurement or tracker. It asks you for no data. It loads its fonts from Google Fonts, which sends your IP address to Google when the page loads. Its host processes server logs for security.

Security

Traffic with the API is encrypted (HTTPS). Passwords are hashed. Verification codes are stored as a fingerprint, expire quickly and allow a limited number of attempts. Photos are in a private space, reachable only through signed links.

Your rights

You can ask to access, correct, erase or port your data. You can restrict processing based on legitimate interest. You can also object to it. You can withdraw your consent at any time. You can also give instructions about your data after your death.

Write to contact@koochers.com from your account's email. We answer within one month.

You can complain to the CNIL, the French data protection authority, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France: www.cnil.fr/fr/plaintes.

Changes

If this policy changes in a meaningful way, we tell you in the app or by email before it takes effect.