Privacy policy

Last updated: 5 November 2026

Who we are

Killer Muscle (killermuscle.com) is run by FOXVISITS Radosław Downar, ul. Leśna 29/1, 74-400 Dębno, Poland, NIP 8542331111, REGON 545932210. Contact for privacy: info@killermuscle.com. We are the controller of your personal data.

What we collect and why

• Email address. You sign in with a one-time link sent to your email. No passwords. We use your email to sign you in and to send that link. Legal basis: contract (Art. 6(1)(b) GDPR).
• Training data. Your plan answers (goal, days, level, equipment, units), saved plans and exercise swaps, logged sets (weight, reps, effort), notes and progress. We store it so the app can save your plan and show your progress. Basis: contract.
• AI coach chats and reviews. When you ask Richard for a review or a question, we send the session data and your message to our AI provider to get the answer, and we save the reply in your account. Basis: contract.
• Technical data. IP address and basic request logs kept by our hosting providers for security and to keep the service running. Basis: legitimate interest (Art. 6(1)(f)).

Do not put health details you do not want stored into notes or coach messages. If you mention pain, the coach only tells you to stop and see a professional.

Who processes it for us

• Supabase Inc. (database, sign-in, sign-in emails and server functions). Data sits on Supabase servers via Lovable Cloud.
• Lovable (hosting of the site and the AI Gateway that runs the coach).
• Lovable AI Gateway (model according to the project settings). Coach messages and session data go there to generate the answer.

Some of this may happen outside the EEA. When data leaves the EEA, we rely on the EU standard contractual clauses.

We do not sell your data and do not use it for ads.

Cookies and storage

We use only what the app needs: a sign-in session stored in your browser (local storage) and your settings such as units and language. No analytics or advertising cookies. If we add analytics later, we will ask first and update this page.

How long we keep it

Your account data stays until you delete your account. You can do that any time in Account with "Delete account". It removes your plans, logs and coach history. Server logs are kept for a short time by the providers above.

Your rights

You can ask for access to your data, a copy (Account has "Export CSV"), correction, deletion, restriction, and you can object to processing based on legitimate interest. Write to info@killermuscle.com. You can also complain to your data protection authority. In Poland that is the President of UODO (uodo.gov.pl).

Age

The app is for people aged 16 and over.

Changes

If we change this policy, we update the date at the top. Big changes we also show in the app.