Privacy policy

1. Who we are

Wunaris is operated under the Delvos Labs brand in Mexico. In this policy, “Wunaris”, “we”, “us” and “our” refer to the operator of the Wunaris service. This policy covers the mobile app and this website.

For privacy questions or data requests, contact privacy@wunaris.com.

2. Information we collect

• Account information: your email address, account identifier (Supabase user UUID), and name or sign-in profile information you provide. Supabase handles authentication credentials and sessions. If you use an available third-party sign-in option, that provider also processes the sign-in under its own policy.
• Profile and preferences: training goals, experience, focus, equipment, training days, language and units, and age and gender when supplied.
• Training records: routines and edits, exercises, sets, repetitions, loads, rest settings, completed sessions, workout history and records you save.
• Body measurements: weight, height, body-fat estimates and body measurements you enter, including measurement history where supported. Fitness and body information may be sensitive personal data.
• Device-local information: preferences, cached app state, session information and sleep hours you log. Sleep entries are currently stored on your device rather than synchronized as a cloud sleep history.
• Usage and technical information: app interactions, onboarding and workout events, generation outcomes, notification-permission events, app version, platform and diagnostic information. Service providers may also process network information such as IP addresses to deliver and secure their services.
• Messages: information you choose to send when contacting support or making a privacy request.

3. Why we use information

We use account and training information to authenticate you, save and synchronize supported records, create and edit routines, display your history, and provide training features. Device-local information supports preferences, reminders and continuity on that device.

We also use information to respond to requests, diagnose problems, prevent abuse and enforce generation limits. Product analytics helps us understand use, reliability, onboarding and training continuity so we can improve Wunaris. We do not use your information for advertising, sell personal information, or use IDFA-based advertising tracking.

Where applicable law requires consent for particular processing, including sensitive data, that processing requires the appropriate consent. This notice does not replace any consent required by law. You may contact us to limit use, object to processing or withdraw consent, subject to applicable legal requirements.

4. Services that process data

• Supabase: account authentication, database storage, hosted app resources and backend functions. Account, profile, workout and measurement records are processed here where cloud synchronization is supported.
• Groq: AI routine generation through our backend. The generation prompt includes training goal, focus, experience, days, equipment, and age and gender when supplied. The routine prompt does not intentionally include your account email, name, password or workout history. AI output is processed by our backend before it is used by the app.
• PostHog: product analytics in the mobile app, associated with an account identifier. Events include app usage and training-related interactions and properties. Analytics is not necessarily anonymous. Our configured ingestion endpoint is in the United States.
• Cloudflare: website hosting and delivery. It may process request and security information, including IP addresses and user-agent information.
• Email services: delivery and handling of messages sent to our support and privacy addresses.

These services process information needed for their role. Provider retention depends on the service, our configuration and applicable obligations. We do not promise zero retention of AI inputs or immediate deletion of every provider log. We may also disclose information where required by law or necessary to protect rights and address abuse.

5. Local storage, notifications and this website

The app uses device SecureStore for authentication tokens and AsyncStorage for preferences, cached state and other local records. AsyncStorage is not equivalent to encrypted secure storage. Local records may remain on a device after sign-out or cloud account deletion; remove the app’s local data using your device controls when needed.

Workout reminders and comeback notifications are scheduled locally. You can control notification permission in your device settings.

This website has no accounts, analytics scripts, advertising trackers or cookies set by the site. Choosing EN or ES follows a page link; it does not store a tracking preference. Hosting providers still receive the technical information needed to serve a page.

6. Retention and account deletion

We keep account and saved training information while needed to provide your account and the features you use. We retain support, security and diagnostic records only as needed for their purpose, resolving issues and applicable legal obligations. Retention can differ across operational systems, analytics, logs and backups.

To delete your account in the app, go to Profile → Delete account and confirm. The deletion flow removes the authentication account and associated profile, workout history, workout sessions, body-measurement history and generation-attempt records from the active database through cascading deletion.

Cloud account deletion does not automatically erase PostHog records, every local record, provider logs or backups. For a request covering these records, email privacy@wunaris.com. You can use the same address if you cannot access the app. We will verify the request, address records within our control and explain any applicable retention limits. Backup copies may persist until their normal replacement or expiry; records required for legal or security purposes may be retained as permitted by law.

7. Your choices and rights

You can update supported profile details in the app and choose whether to enter optional measurements or enable notifications. For access, correction, cancellation/deletion or objection (ARCO rights in Mexico), or to request a copy, restrict use or withdraw consent where applicable, email privacy@wunaris.com.

Describe the right you want to exercise and the relevant data, and include a reply address and information that lets us locate your account. We may need to verify your identity or a representative’s authority before acting. Do not send your password or authentication codes. We will respond under the deadlines and exceptions in applicable law. Depending on your location, you may also have a right to complain to the competent data-protection authority.

8. Security and international processing

Wunaris uses authenticated access, database access controls and HTTPS connections to help protect data. No app, network or storage system can guarantee absolute security.

We operate in Mexico and use service providers that may process information in the United States and other countries. Their data-protection rules may differ from those in your country. Applicable legal requirements for international processing continue to apply.

9. Adults only

Wunaris V1 is intended for people aged 18 or older. It is not directed to children or minors. If you believe a person under 18 has provided personal information to Wunaris, contact privacy@wunaris.com so we can investigate and address deletion.

10. Changes and contact

We will publish updates to this policy on this page and change the effective date. We will provide additional notice or obtain consent when required by applicable law.

Privacy and data requests: privacy@wunaris.com.
Product support: support@wunaris.com.