Privacy Policy

1. Who We Are

Vamo is a fitness, nutrition, and coaching application.

The data controller responsible for your personal data is Jack Robinson Contracting Ltd (“Vamo”, “we”, “us”, “our”), a company registered in England & Wales (company number 16969770), registered office 6 Vousden Grove, London, SE28 0PG, United Kingdom. We are registered with the UK Information Commissioner’s Office (ICO), registration reference ZC161358.

Contact email: support@vamo.fit

2. Data We Collect

We collect only the data necessary to provide and improve the App.

a) Information You Provide

• Account information (such as your email address)
• Profile information (such as your name and fitness goals)
• Biometrics you enter during onboarding (age, sex, height, weight, and activity level)
• Allergies and dietary preferences
• Your pre-exercise screening answers and health declaration, injury notes and movement restrictions, and any condition you tell us about so we can adapt or withhold a programme
• Workout, nutrition, hydration, and habit logs you record, and check-in entries you submit
• Messages you send to a coach through the App, and messages you write in Coach, our AI chat

b) Health & Fitness Data

With your explicit permission, the App reads health and fitness data from Apple Health (HealthKit) on iOS and Android Health Connect on Android. Depending on the permissions you grant, this may include:

• Steps and activity
• Heart rate
• Sleep
• Calories (active and resting energy)
• Workouts
• Hydration / water intake
• Body weight and body-fat percentage

The App also writes data back to Apple Health and Android Health Connect when you use certain features, for example logging water intake, completed workouts, and nutrition macros, so your records stay in sync across your health apps. You can turn this off at any time in your device health settings.

This data is not medical data, and Vamo is not a medical service, but under GDPR it is treated as special-category health data. We process it only with your explicit consent and solely to provide fitness, nutrition, and coaching functionality. Vamo does not access medical records, diagnoses, or clinical health data.

c) User Content

• Profile pictures
• Progress and check-in body photos you upload to track and share your progress

These images are stored in private AWS S3 storage and are not publicly accessible. Check-in photos are shared with a coach you have connected with (see section 7).

d) Automatically Collected Information

• App usage data (features used, screens viewed)
• Device information (device type, operating system, app version)
• Log files and error/crash reports for debugging and performance monitoring

e) Identifiers

• A device push notification token (used to deliver notifications)
• Your Clerk user id (your account identifier)
• An analytics identifier used to attribute product-usage events

f) Optional Third-Party Integrations

If you choose to connect Strava, the App can write your workouts back to your Strava account. This integration is optional, and you can disconnect it at any time.

If you choose to connect Garmin Connect, and only with your permission given on Garmin's own sign-in screen, the App receives from Garmin your activities (such as runs, rides, swims and strength sessions: the sport, date, duration, distance, pace or speed, heart rate and training load) and your daily health summaries (sleep, resting heart rate, heart rate variability (HRV), stress and Body Battery). We hold this data against your Vamo account, so it identifies you. If you ask us to, the App also sends your planned Vamo workouts to Garmin so they appear on your Garmin device. This integration is optional, and you can disconnect it at any time. Section 12 explains how we use Garmin data, who processes it, and your choices.

The MyFitnessPal diary import is currently switched off. If you connected it before it was switched off, we still hold the MyFitnessPal username and, where you gave us one, the diary key you entered, on our servers. Neither is used while the feature is off, nothing further is fetched from MyFitnessPal, and both are removed when you delete your account (section 11) or on request to support@vamo.fit. Meals already imported from your diary stay in your nutrition log like any other entry, and are deleted with your account or on the same request.

3. How We Use Your Data

We use your data to:

• Provide, operate, and maintain the App
• Create and personalise fitness, nutrition, and coaching experiences
• Sync health and fitness data with Apple Health and Android Health Connect
• If you connect Garmin, receive your activities and daily health summaries from Garmin Connect and send your planned workouts to your Garmin device (section 12)
• Enable coaching, messaging, and progress sharing between you and your coach
• Send you notifications and transactional emails
• Improve features, performance, and reliability
• Provide customer support and respond to enquiries
• Ensure security and prevent misuse of the App

We do not sell your personal or health data.

Automated personalisation and AI

Your training programmes and nutrition targets are generated automatically, by our own algorithms applied to the profile, goals, training history, screening answers and logged activity described above. We use artificial intelligence in two ways around them.

AI explanations. The plain-English explanations, rationale and weekly review text (The Read) that accompany your programmes are written by a large language model. The data sent is limited to what is needed to write that text, such as your training and nutrition context, including any injury or session notes you have written. Data from Garmin is only included if you have turned on the separate Garmin AI consent described in section 12.

Coach, our AI chat (optional). If you choose to use Coach, you can ask questions about your training in your own words, and an AI model answers using your Vamo data. Coach only works after you have given your explicit consent on the Coach consent screen, and you can withdraw that consent at any time (see below).

Check-ins. If you have Vamo Coach, Coach can also start a conversation. We look at data Coach can already see (listed below) and, when something would be worth a word, Coach writes you a short message and we send you a notification. For example: after a session in your plan that was not logged or matched from Apple Health, after a session you have just finished, in the week before a race, when you have not logged anything for a while during a plan, or when your weekly Read finds something such as a jump in training load. You get at most one check-in a day and three a week, never during your quiet hours (9pm to 8am in your time zone unless you change them in Profile → Notifications), and the same event never prompts two. The notification on your lock screen only says your coach has a check-in for you; the message itself is only in the App. A check-in never sells you anything. Check-ins only happen while your Coach consent is current. You can turn check-ins off at any time in Profile → Notifications and keep using Coach.

Deciding when a check-in would help is profiling: an automated assessment of your training and logging. It does not change your plan or your account, and ignoring a check-in has no consequence, so it is not a decision with legal or similarly significant effects. We keep a record of each decision (sent, or held back and why) for 30 days, without the message text.

What Coach remembers. Coach can keep short notes from your conversations, such as the days you can train, a goal you are working towards or an injury you have mentioned, so you do not have to repeat yourself. Coach reads them at the start of each new conversation. It never keeps notes about your weight, what you eat, pregnancy, your mental health, medicines or a diagnosis, and keeps nothing from a conversation where it has pointed you to urgent help or eating support. You can see every note, delete any of them or turn this off in Profile → Coach → What Coach remembers. Notes are only ever seen by you and Coach.

When you use Coach, we send the model:

• what you type in Coach, and your earlier messages in the same conversation;
• your plan and schedule: sport, phase, week, sessions, target paces and your race;
• your recent training: sessions planned and completed, volume, pace and effort ratings, and notes you have written on sessions, injuries or races;
• summaries of workouts imported from Apple Health: the sport, date, duration, distance, average pace or speed, average heart rate, and whether it matches a session in your plan;
• if you have connected Garmin and turned on the separate Garmin AI consent (section 12), summaries of your Garmin activities (the sport, date, duration, distance, average pace or speed, average heart rate, training load, and whether it matches a session in your plan) and of your daily health summaries (sleep, resting heart rate, HRV, stress and Body Battery);
• your benchmarks and ability levels, your races and results, and your recent Reads;
• your nutrition targets and the last 7 days of logged nutrition totals, unless Coach has paused nutrition in that conversation for your safety;
• short restriction codes that come from your health check, such as “intensity capped”. We never send your health check answers or its result.

We do not send your name, email address, account id, photos, location, payment details, your messages with a human coach, anyone else's data, or other data from Apple Health or Android Health Connect: no heart-rate readings over time, sleep, steps, workout routes or locations. From an imported workout, Coach sees only the summary listed above. From Garmin, Coach sees only the summaries listed above, and only while your Garmin AI consent is on: no heart-rate readings over time, routes or locations.

Who processes it and where. Both features use Claude, a model made by Anthropic, run for us by Amazon Web Services on Amazon Bedrock. AWS acts as our processor under contract. We call Bedrock from Ireland, and AWS may run each request in any of its European Union regions (currently Ireland, Germany, France, Sweden, Italy and Spain). Your data does not leave the European Economic Area for this. On Bedrock, Anthropic does not receive your data. AWS does not store what we send or what the model writes, and neither AWS nor Anthropic uses it to train or improve any model. AWS may hold part of a conversation in a short-term cache for up to 5 minutes to speed up the next reply. We also run messages and replies through an AWS safety filter (Amazon Bedrock Guardrails), which does not keep them.

What we keep. We store your Coach conversations so you can read them again. You can delete a conversation at any time. A conversation you have not used for 12 months is deleted automatically, and all of them are deleted when you delete your account. If Coach shows you a safety message, we keep a record that it happened (the type of message, the time and the conversation it was in) for 12 months, without anything you wrote. We also keep counts of how many messages you send and the processing used, to apply your monthly allowance.

Your coach. If you are connected to a human coach, they can read your Coach conversations, but cannot write in them. Coach never sees your conversations with them.

Reviewing conversations. While Coach is in testing, we read a sample of Coach conversations to check that the answers are safe and accurate. Only named Vamo staff do this, and we do not copy conversations out of the App to do it.

When Vamo staff can read your conversations. Vamo staff can read your Coach conversations only to give you support, to follow up a safety concern, or to meet a legal requirement. They must record why each time, they can read but never change your conversations, and every access is logged. We keep that log for 2 years.

Safety. Some messages, such as ones about chest pain, injury, pregnancy, eating, your age or your wellbeing, get a fixed safety message written and reviewed by us rather than an AI answer. Some of these can pause the conversation until you confirm you have been checked by a professional.

Withdrawing consent. Turn Coach off from the Coach screen or Profile → Coach. We stop sending anything to the model straight away and, unless you choose to keep them, delete your Coach conversations. Nothing else in the App changes.

What AI is and is not used for. We do not use your data, or your Coach conversations, for advertising, and we do not sell them. We do not use them to train AI models. Our analytics (section 4) records that you used Coach, but never what you or Coach wrote, and never that you were shown a safety message.

• Programmes and Coach suggestions support a fitness service. They do not produce decisions with legal or similarly significant effects on you within the meaning of Article 22 of the UK and EU GDPR, and no automated decision is taken about your health, credit, employment or access to services. Coach can suggest a change to your plan, but nothing changes unless you accept it.
• You can change or ignore anything the App suggests, and you can ask us to review a generated programme or a Coach answer by emailing support@vamo.fit or using the report button in Coach. AI-generated text can be wrong and is general information, not medical advice: see our Terms & Conditions, sections 4 and 9.

4. Analytics

We use PostHog for product analytics and crash/error reporting. PostHog is hosted in the European Union (EU data residency) and acts as our data processor under contract.

When you are signed in, analytics events are associated with your email address and a user id so we can understand how features are used and diagnose problems. We do not send the contents of your Apple Health or Android Health Connect data to PostHog: analytics records app-usage events (for example, that a workout was logged) and identity keys, never your underlying health measurements. The same applies to Garmin: PostHog may record that you connected Garmin or that an activity synced, but never any value received from Garmin.

Analytics is consent-based. You choose whether to enable it when you first set up the App (the analytics-consent step during onboarding), and you can change your choice at any time from Profile → Privacy and data → Analytics. Turning it off stops further identified analytics and crash reporting from your device.

Separately, we count which setup steps people complete so we can improve onboarding. These counts contain no name, account or device identifier, or answers to the setup questions. Our server passes the counts to PostHog without an individual profile. We show this use before the questionnaire starts. You can object there or later under Profile → Privacy and data → Anonymous setup stats; objecting stops future counts from your device.

5. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contractual necessity – to provide the App and its core features
• Explicit consent – for processing health and fitness data, including data from Apple Health, Android Health Connect and Garmin; for using Coach, our AI chat (section 3), which we ask for separately; and for identified product analytics
• Legitimate interests – to secure, operate, and improve the App, including aggregate setup statistics
• Legal obligations – where required by law

You may withdraw consent for health integrations (including Garmin), Coach and analytics at any time through the App or the relevant platform.

6. Data Storage & Security

Your data is hosted on secure, industry-standard cloud infrastructure provided by Amazon Web Services (AWS). We apply appropriate technical and organisational measures, and access to personal data is restricted to authorised personnel and processors.

How your health data is encrypted

Health data is encrypted in transit and at rest using AES-256 with server-managed keys held in AWS Key Management Service (KMS). Health metrics receive an additional client-side AES-256-GCM encryption layer before they leave your device; however, the encryption key for that layer is generated and managed on our servers and protected by a KMS customer-managed key.

Because the keys are server-managed, this is not end-to-end encryption. Vamo's backend is able to decrypt your health data in order to provide features such as syncing, coaching, and progress tracking. Access to your decrypted health data is limited to:

• You (the account owner)
• A coach you explicitly choose to share with
• Authorised Vamo staff and sub-processors, only as needed to operate and support the service

7. Coaches & Data Sharing

Vamo lets you connect with a coach. When you connect with a coach and choose to share your data, that coach can see:

• The health and fitness data you opt to share with them
• Your check-in photos
• Your workout, nutrition, and hydration logs
• Your progress and check-in entries
• Messages you exchange with them in the App
• Your conversations with Coach, our AI chat, which they can read but not write in

Sharing is under your control and is revocable: you can stop sharing with a coach at any time, which withdraws their access going forward.

8. Service Providers & Sub-processors

Vamo does not sell your data. We share limited data with the trusted service providers below, who help us operate the App. Each acts as a data processor and is bound by contract and applicable data protection law (including GDPR) to protect your data and use it only on our instructions.

• Amazon Web Services (AWS) – AppSync, DynamoDB, S3, Lambda and KMS, providing hosting, database, file storage and encryption, and Amazon Bedrock in the European Union for the AI-generated explanations and for Coach, our AI chat, described in section 3. The AI model on Bedrock is Claude, made by Anthropic; Anthropic does not receive your data. AWS privacy notice
• Clerk – account creation, sign-in, and session management. Clerk privacy policy
• PostHog (EU-hosted) – product analytics and crash/error reporting, as described in section 4. PostHog privacy policy
• Stripe – coach subscription payments. Vamo does not store your card details. Stripe privacy policy
• Strava (only if you connect it) – writing your workouts back to Strava. Strava privacy policy
• Garmin (Garmin Ltd. and its subsidiaries, including Garmin International, Inc.; only if you connect it) – the source of the activities and daily health summaries described in section 2(f), and the recipient of planned workouts you choose to send to your Garmin device. Garmin is responsible for the data in your Garmin account under its own privacy policy. Inside Vamo, Garmin data is processed only by AWS, as described in section 12. Garmin privacy policy
• Expo – push notifications and over-the-air app updates. Expo privacy policy
• Open Food Facts – the open food database behind barcode scanning and food search. When you scan a barcode, our servers send Open Food Facts the barcode number. When you search for a food by name, our servers send the text you typed and your device's country, so results match products sold near you. Nothing that identifies you is sent, and because the request comes from our servers, Open Food Facts does not see your device or IP address. Product photos, where shown, load onto your device from Open Food Facts directly. Open Food Facts privacy policy
• Edamam – the recipe search service our built-in recipe library was built from. We used the Edamam Recipe Search API once, offline, to assemble the library. The App does not query Edamam while you use it, so your searches, logs and account details are never sent there. Recipe photos are served from our own servers, so opening a library recipe does not contact Edamam either. Edamam privacy policy
• Resend – sending transactional emails. Resend privacy policy
• Apple and Google – sign-in identity providers when you use Sign in with Apple or Google. Apple also handles subscription billing for in-app purchases and sends us the transaction and renewal status we need to unlock your subscription. We never receive your card details. Apple privacy policy, Google privacy policy
• MyFitnessPal (switched off) – the diary import described in section 2(f). While it is off, nothing is sent to or fetched from MyFitnessPal. MyFitnessPal privacy policy

9. Data Retention

We keep your personal and health data only for as long as it is needed:

• Your account data and health data are retained while your account is active
• When you delete your account, your account and associated data are deleted immediately (see section 11)
• Data may be retained for longer only where required to meet a legal obligation
• Coach conversations are kept until you delete them or your account, and are deleted automatically after 12 months without use. Records that a safety message was shown, without any content, are kept for 12 months
• Notes Coach keeps are kept until you or Coach remove them, you turn Coach off, or you delete your account
• Data received from Garmin is kept while your account is active, unless you ask us to delete it sooner (section 12). Disconnecting Garmin deletes your Garmin access tokens straight away
• Routine encrypted backups are purged within 30 days

10. Your Rights

Subject to your location, you have the right to:

• Access your personal data: email support@vamo.fit and we will send you a copy within one month (UK GDPR Article 15)
• Correct inaccurate or incomplete data
• Request deletion of your data
• Restrict or object to processing
• Request data portability: the copy comes as a machine-readable file (JSON) that you can take to another service (UK GDPR Article 20)
• Withdraw consent at any time

You can also manage or revoke health data-sharing permissions directly through Apple Health or Android Health Connect on your device.

To exercise your rights, contact: support@vamo.fit

11. Account & Data Deletion

You can delete your account yourself, at any time, from within the App at Profile → Privacy and data → Delete account. Deletion is immediate and irreversible: there is no soft-delete or grace period.

Deleting your account permanently removes your account and its associated data, including:

• Your account and profile
• Your health data and health encryption keys
• Workout, nutrition, hydration, and habit logs
• Activities and daily health summaries received from Garmin
• Check-ins, photos, conversations and messages, including your Coach conversations
• Coach connections and device push tokens
• Connected-service credentials, including Strava and Garmin tokens and any MyFitnessPal username and diary key

Coach accounts, which own clients, programmes, and billing, cannot be self-deleted in the App. Please contact support@vamo.fit and we will assist.

12. Apple Health, Android Health Connect & Garmin Notice

Vamo reads from and writes to Apple Health (HealthKit) and Android Health Connect only with your explicit permission, and solely to provide fitness, nutrition, and coaching features.

• We do not use this data for advertising
• We do not sell this data
• We do not share your health measurements with third parties for their own purposes
• Coach, our AI chat, sees summaries of workouts you import from Apple Health (sport, date, duration, distance, average pace or speed, average heart rate), only with your permission and only to coach you. It never sees heart-rate readings over time, sleep, steps, routes or locations.
• You can revoke access at any time via your device health settings

To be clear about the limited exceptions: health data you choose to share is visible to a coach you explicitly connect with (section 7), and our EU-hosted analytics provider may record that you used a health-related feature as app-usage metadata, but never the underlying Apple Health or Android Health Connect measurements. Vamo complies with all applicable platform policies relating to health and fitness data.

Garmin Connect

If you connect Garmin, Vamo receives the activities and daily health summaries listed in section 2(f) through the Garmin Connect Developer Program, and can send your planned Vamo workouts to your Garmin device. We use Garmin data only to:

• personalise your training plan;
• match the activities you complete to the sessions in your plan;
• model your training load and recovery;
• set your training paces;
• send the planned workouts you choose to your Garmin device; and
• if you give the separate Garmin AI consent described below, inform Coach, our AI chat, and the AI-written explanations and weekly Read.

• Never sold. We do not sell Garmin data, and we do not use it for advertising
• We do not share Garmin data with third parties for their own purposes. The only provider that processes it for us is Amazon Web Services (AWS): AppSync, Lambda and DynamoDB to receive and store it, KMS to encrypt it, and Amazon Bedrock in the European Union for Coach and the AI explanations, under the Garmin AI consent below. Our analytics provider, PostHog, never receives Garmin values (section 4)
• The access tokens Garmin gives us to read your data are stored encrypted on our servers and are used only for this integration
• We never use Garmin data, or anything derived from it, to train, evaluate or improve any AI model, ours or anyone else's

AI Transparency Statement (Garmin data)

Vamo uses artificial intelligence in Coach, our AI chat, and to write the explanations and weekly Read that accompany your plan (section 3). These features use Claude, a model made by Anthropic, run for us by Amazon Web Services on Amazon Bedrock in the European Union. Anthropic does not receive your data, AWS does not store what we send or what the model writes, and neither uses it to train or improve any model.

• Separate, explicit consent. Garmin data is only sent to the AI model after you turn on a Garmin-specific AI consent in the App. This is separate from connecting Garmin and from your Coach consent. Without it, Garmin data is still used for the non-AI features above, but never sent to an AI model
• Summaries only. With that consent, the model receives only the Garmin summaries listed in section 3, never heart-rate readings over time, routes or locations
• Easy to withdraw. You can turn the Garmin AI consent off in the App at any time, or disconnect Garmin. Either way, we stop sending Garmin data to the AI model straight away. Nothing else about your account changes
• AI-written text can be wrong. It is general information, not medical advice, and nothing in your plan changes unless you accept it

Your choices about Garmin data

• Disconnect: disconnect Garmin in the App at any time. We stop collecting Garmin data and delete your stored Garmin access tokens. Removing Vamo from the connected apps in your Garmin Connect account has the same effect
• Access and export: you can request a copy of your data, including data received from Garmin, as a machine-readable file (section 10)
• Correct: ask us to correct anything inaccurate (section 10)
• Delete: email support@vamo.fit to delete the data we have received from Garmin without closing your account, or delete your whole account in the App (section 11)
• Withdraw consent: turn off the Garmin AI consent, disconnect Garmin, or both, at any time

13. Age Requirement

Vamo is intended for adults. You must be at least 18 years old to create an account and use the App. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected such data, we will delete it.

14. International Users (including the United States & California)

The App is available worldwide, and this policy applies to all users. Vamo is based in the United Kingdom, so your data may be processed in the UK, the EU, and other locations where our sub-processors operate, with appropriate safeguards in place for international transfers.

If you are in the United States, including California, we do not sell your personal information, and you may request access to or deletion of your personal information as described in this policy. To make a request, contact support@vamo.fit.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are significant, we will notify you through the App.

16. Contact Us

If you have questions about this Privacy Policy or your data, contact:

📧 support@vamo.fit