Privacy Policy

Last updated: 2026-10-29

Batyr (“we”, “us”) is a gym workout log app made by Ilsur Gabdulkhakov, an independent developer, who is responsible for your data under this policy. It explains what Batyr collects, why, who can see it, and how to delete it.

The short version:

• Batyr works without an account. Your training is backed up privately to our server from the first launch, so a reinstall brings it back.
• Nobody sees your training until you invite them — and then only what you turn on for that person.
• Your heart rate from Apple Health stays on your phone.
• No ads, no tracking across apps, and we never sell your data.
• You can delete your training, or your whole account, in the app at any time.

What we collect

Your account

• An account identifier. At first launch Batyr creates an anonymous account with Firebase Authentication — a random ID, no name or email. It is what your backup is stored under.
• Sign in with Apple or Google (optional). You need it only for friends, a coach, sharing plans, notifications from people and using Batyr on several devices. The email and name that Apple or Google share are kept by Firebase Authentication; our own servers use and keep only your account identifier, never your email.
• One account with WellBite. Batyr uses the same account system as WellBite, a nutrition app by the same developer. If you sign in to both with the same Apple or Google account, it is one account: each app keeps its own data, and deleting the account deletes both (see Deleting your data).

Your training

From the first launch, Batyr backs up to our server:

• workouts — start and end times, time zone, gym, plan day, title, how it felt, and your notes on the workout and its exercises;
• sets — weight, reps or seconds, and reps in reserve;
• the state of your progression for each exercise, your plans (days, exercises, weeks, schedule, notes, changes from a coach), your gyms (names and equipment) and the exercises you added yourself, with their notes;
• a random installation ID stored with each workout, so Batyr knows which phone is running it.

This backup is not optional: it is how Batyr restores your training after a reinstall and keeps your phones in sync.

Progress photos and check-ins

A check-in holds its date, your photos (front, side, back), and — if you enter them — body weight, waist and a note. The photos are re-encoded on your phone to a JPEG of at most 1600 pixels, which removes location and camera data, and are backed up to private storage under your account, with or without sign-in. They are never public.

Sharing, friends and coaches

• Your name — the name you type in Batyr (up to 40 characters). Friends and your coach see it, and so do people who open a plan you share, if you choose to show it as the author.
• Shared plans — the plan, its versions, your note to followers (up to 280 characters), the links and codes you create, how a link treats weights, a link’s label (up to 40 characters) and, for a personal link, the starting weights you set for each exercise. When a signed-in person opens a link, we record which account opened it and when.
• Invites and access — invites (they expire after 7 days), who has access to what (friend or coach and the switches you turned on), the people you blocked, Respect you gave or received (no text), and the changes and notes (up to 500 characters) a coach makes to a plan.
• Reports — when you report a plan, a note, a workout, photos or a person, we keep what was reported, the reason you pick and any words you add, and your account identifier, so we can review it and act. The person you report isn’t told who sent it.

Notifications

If you are signed in and allow notifications, we keep your device’s push token, its language and time zone, and which notifications you want, to tell you about things people do for you (a coach changed your plan, a plan you follow has an update, an invite was accepted, Respect for a workout, access taken back).

Usage analytics and crash reports

Batyr uses Firebase Analytics to learn which features help people train — for example, that a workout was finished or a plan was started. Events carry counts and categories, never your weights, notes, photos or health data, plus coarse device information (model, OS and app version, country). Firebase Crashlytics collects crash reports (what failed, device model, OS and app version, and your account identifier, so we can fix a problem you report). Advertising identifiers (IDFA, Android Advertising ID) are not collected, and nothing is used for advertising.

You can turn both off at any time in Profile → Privacy → Share usage data.

Technical data

Our servers and the networks in front of them keep technical request logs (such as IP address, time and the address requested) for security and debugging, for a limited time.

What stays on your phone

These are never sent to us:

• Heart rate from Apple Health. Batyr reads it live during a workout to show it; the system saves it into Apple Health with the workout.
• Your answers in the first-run questions (goal, split, training days, where you train, units) — only what they set up, your gym and the plan you start, is backed up like the rest — your settings, and your exercise searches (the exercise catalog is inside the app).
• Files you import from Strong or Hevy — they are read on your phone; only the workouts that result are backed up like any other.
• The Lock Screen card (Live Activity) and the reminders Batyr schedules on your phone.

Batyr doesn’t ask for your age, sex or height, and doesn’t use your location, contacts, microphone or advertising identifier. The camera is used only when you take a progress photo or scan a QR code.

Apple Health

If you turn it on (Profile → Save workouts to Apple Health), Batyr writes each finished workout to Apple Health as strength training, with heart rate and active energy, and — if you choose so at a check-in — your body weight. During a workout it reads your heart rate to show it. Health data is not sent to our servers or to anyone else, and is never used for advertising. You can change access at any time in the iPhone’s Settings → Health → Data Access & Devices.

How we use your information

• To run Batyr: work out your next weights, keep your plans and history, and restore them on a reinstall or another phone.
• To show what you chose to share to the people you chose, and to send the notifications you asked for.
• To keep the service safe: stop abuse, and look into reports about plans, notes, workouts, photos or people.
• To fix and improve Batyr, with crash reports and usage analytics (unless you turn them off).

We do not sell or rent your personal information, share it for advertising, or show ads.

If you are in the European Economic Area or the UK, we rely on these legal bases: performing our contract with you (running the features you use), our legitimate interests (security, abuse prevention, crash reports and analytics, which you can switch off), and your consent where the law requires it (Apple Health access, notifications, the camera). Body weight and progress photos may count as health information; we process them only to provide the features you use them for.

Who can see your information

• Nobody, by default. Your training, photos and check-ins are private to your account.
• Friends and your coach see only what you turn on for each of them. Training days are always shared with a person you add; workouts and records, notes, body weight and progress photos are off for friends until you turn them on. A coach gets workouts and records and can edit your plan and its weights; you can undo each change. Your waist measurement is never shown to anyone. Progress photos are shown to them from our server and never saved on their phone. You can change or take back access at any time in Profile → People & access.
• People with your plan link or code see the plan’s title, the author name if you chose to show it, its days, exercises and sets × reps, and the notes you wrote in it — never your weights. The page at batyr.app/p/CODE shows the same to anyone with the link; it runs no scripts, sets no cookies and has no analytics. Starting weights you attach to a link reach only signed-in people who open it in the app. You can turn a link off at any time.
• People with your invite code see your name, the role you invited them for and what you’d share.
• Notifications to other people (and to you) can include names, plan and workout titles and a coach’s note; they are delivered by Apple and Google.
• When you share a progress photo yourself, Batyr draws a new image without location or camera data, with your face blurred unless you turn that off.

Service providers

We use these providers to run Batyr. They process data on our behalf, under their own security and privacy terms.

Where your data is stored

Our servers are in the United States. If you use Batyr from elsewhere, your information is transferred to and processed in the US. Where the law requires it, we rely on our providers’ standard contractual clauses for these transfers.

How long we keep it

We keep your training, check-ins, photos and sharing data for as long as you keep them in Batyr — there is no automatic expiry. When you delete something in the app, it is deleted from our server too, and deleting a check-in deletes its photos. One exception keeps your history readable: a deleted plan keeps its title and day names, and a deleted exercise of your own its name, how it’s tracked and the muscles it works, because your past workouts still show them. Invites stop working after 7 days. Reports are kept while we need them to keep people safe. Crash reports are kept for up to 90 days and analytics for up to 14 months; Firebase Authentication keeps sign-in security logs for a few weeks.

Deleting your data

• One thing at a time: delete a workout or a check-in in the app, and it goes from our server as well, photos included. A deleted plan or exercise of your own keeps only its name (a plan also its day names), so History can still show your past workouts; Delete workout data removes those too.
• All your training — no account needed: Profile → Delete workout data deletes your workouts, sets, plans, records, own exercises, check-ins and their photos, and your shared plans and their links — and your gyms, unless you choose to keep them — first from our server, then from your phone. Your account, name and connections with people stay until you delete the account.
• The whole account: Profile → Account → Delete account (you’ll be asked to sign in again) deletes everything above plus your name, friends and coach access, invites, blocks (yours and other people’s of you), Respect, coach changes, notification tokens, reports about you, and the account itself, including the email and name from Apple or Google. Apple’s sign-in authorization and Google’s access are revoked, and your phone is cleared. If you also use WellBite with this account, your WellBite data is deleted too. Our server keeps only the account’s random ID marked as closed — no other data — so that another phone still signed in to it can’t upload data back. Reports you made stay, without your account.
• By email: write to support@ilsur.me with your sign-in email or the ID shown in Profile (“Synced as …”). We delete the account within 30 days, usually within 2 business days.

Copies other people made stay with them: a plan someone already started from your link remains theirs, without your name. Step-by-step instructions: batyr.app/delete-account.

Your rights

Depending on where you live (for example under the GDPR, the UK GDPR or the CCPA/CPRA), you have the right to access your personal information, correct it, delete it, receive a copy of it, object to or restrict its processing, and withdraw consent. Most of your data can be seen, changed and deleted in the app; for anything else — including a copy of your data — email support@ilsur.me and we’ll answer within 30 days. You can also complain to your local data protection authority. We won’t treat you differently for using these rights.

California residents: we do not sell or share personal information as the CCPA defines those terms, and we use sensitive personal information only to provide the service.

Age

Batyr is meant for people aged 16 and over. We don’t knowingly collect data from anyone younger. If you believe a child under 16 uses Batyr, contact us and we’ll delete the data.

Security

Data travels encrypted (HTTPS). Every request to our API for your data carries a short-lived token tied to your account, and our servers check it before reading or writing anything. Photos sit in private storage, reachable only through our API by your account and the people you gave access to. Access to the servers is limited to the developer.

Changes to this policy

When this policy changes we’ll update it here with a new date, and tell you in the app about important changes.

Contact

Ilsur Gabdulkhakov — support@ilsur.me

This policy is published in English only.