PLDownload on theApp Store
Documents

Privacy policy

Mekkio app · last updated: October 27, 2026

This is an English translation of the Polish privacy policy. If the two versions differ, the Polish version applies.

1. Data controller

The controller of your personal data is Studio Mleczko Maciej Mleczko. For anything related to the protection of your personal data, contact us at support@mekkio.app.

2. What data we collect

  • Account data: your email address and password (stored hashed, never in plain text) when you sign up with email, or basic profile data (name, email address) when you sign in with Google or Apple. When you sign in with Apple, we also store an Apple authorization token, solely so that we can revoke Mekkio's access to your Apple ID when you delete your account.
  • Profile data: optionally, your name or nickname, weight, height, age and sex. We use them only to estimate calories burned and to personalize the app.
  • Profile photo: optionally, if you add one, it is stored in your cloud account together with your name so it appears on all your devices. You can delete it in the account panel.
  • Training data: your training plans and workout history (exercises, sets, reps, weights, duration, notes).
  • Import from another app: if you choose a CSV file exported from another training app (for example Strong or Hevy), Mekkio reads it locally on your device and saves the workouts from it as your history. The file itself is not sent or stored anywhere; like your other training data, the imported workouts reach the cloud only if you have an account.
  • Apple Health data: only in the iPhone app and only if you turn on the Health connection yourself: your weight and workouts from your watch (duration and calories burned), from any device that writes to Health. Your weight goes into your weight log (and, if you have an account, to the cloud as well). Calories from your watch are assigned to the matching workout and stay on your device. We don't send this data to AI Coach, don't use it for advertising and don't share it with anyone. Mekkio doesn't write anything to Health.
  • Analytics data: anonymous visit statistics (which screen you opened and when), collected by GoatCounter, with no cookies and no data that could identify you. On the mekkio.app website, aggregate statistics (number of visits, the page you came from, country, device and browser type, page load time) are collected by Cloudflare Web Analytics, also without cookies.

If you use the app as a guest, without an account, the training and profile data above never reach us at all. They stay only in your browser's storage, on your device.

  • Your account, cloud sync and all app features you use: Article 6(1)(b) GDPR (processing necessary for the performance of the service agreement).
  • Apple Health data (data concerning health): Article 9(2)(a) GDPR (your explicit consent, which you give by turning on the Health connection and approving the system permission dialog). You can withdraw your consent at any time: turn the connection off in your Profile (Settings and account), or revoke access in your iPhone's Settings (Health → Data Access & Devices → Mekkio).
  • Anonymous visit statistics: Article 6(1)(f) GDPR (our legitimate interest in developing the app), with minimal impact on your privacy.

4. Who we share data with

We don't sell your data to anyone. We use trusted processors that handle data on our behalf:

  • Supabase: database, authentication and storage of your account and training data. Servers in the EU region (Frankfurt, AWS eu-central-1).
  • Google: authentication, if you sign in with a Google account, and sending account-related emails (e.g. account confirmation, password reset) via Google Workspace.
  • Apple: only if you sign in with Apple (authentication, and revoking authorization when you delete your account).
  • GoatCounter: anonymous visit statistics, with no personal data.
  • Cloudflare: hosting of the mekkio.app website and aggregate statistics of its visits (Cloudflare Web Analytics), with no cookies and no tracking across sites.
  • Formspree: only when you send feedback from the app ("Write to us"): the message, feedback type, app version and device type, and if you're signed in, your email address so we can reply. Formspree forwards the message to support@mekkio.app.

AI Coach is switched off in this version of the app, so we don't send any data to AI model providers. If we turn it on, we will first update this policy and ask for your consent.

5. How long we keep data

We keep your data for as long as you have an active Mekkio account. You can delete it yourself at any time, see section 6 below.

6. Your rights

  • Access and rectification: you can view and change your data at any time directly in the app (Profile → Settings and account).
  • Data portability: the "Download my data" button in your Profile, under Settings and account (without an account: "Create a backup"), exports all your data to a file.
  • Erasure ("right to be forgotten"): the "Delete account" button in your Profile (Settings and account) permanently and immediately deletes your account and all related data in the cloud, on all devices.
  • Objection and restriction of processing: write to us at support@mekkio.app.
  • Complaint to a supervisory authority: if you believe we process your data unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland (uodo.gov.pl).

7. Data security

  • All communication with the app goes over an encrypted HTTPS connection.
  • Only you have access to your training and profile data. The database enforces this on every query (Row Level Security), regardless of what happens in the app.
  • Passwords are never stored or visible in plain text.

8. Cookies and local storage

Mekkio doesn't use cookies for tracking, profiling or advertising. Visit statistics (GoatCounter in the app, Cloudflare Web Analytics on the mekkio.app website) work without cookies. In guest mode, without an account, your training data is stored only locally in your browser's storage (localStorage) on your device and isn't sent anywhere.

9. Changes to this policy

We may update this policy from time to time, for example when we add new app features. You'll always find the date of the last update at the top of this page.

10. Contact

Questions about the protection of your personal data can be sent to support@mekkio.app.