OMETZ
Privacy Policy
Last updated 22 August 2026
The short version. OMETZ stores what you log so it can coach you. Your data is never sold, never used for advertising, and never used to train anyone's AI model. You can delete your account and everything in it from inside the app, at any time, without asking us.
1. Who we are
OMETZ ("we", "us") is a strength training and nutrition app operated by Ori Hamo, Israel. Contact: [email protected].
For the purposes of the EU General Data Protection Regulation (GDPR) and Israel's Protection of Privacy Law, 5741-1981, we are the data controller for the information described here.
2. What we collect
Only what you give us. There is no tracking pixel, no advertising SDK, and no third-party analytics in this app.
We do count feature use on our own servers — for example that a set was logged, that the coach answered, or which onboarding question you reached. This never includes anything you wrote or named: not a message, not a food, not an exercise you typed yourself. It is stored alongside your account, never shared, and deleted with your account.
| Category | What it is | Why |
|---|---|---|
| Account | Username, password (hashed, never stored in readable form), language preference, and an email address if you choose to give one | To sign you in and keep your data separate from everyone else's |
| Health and body data | Age, sex, height, body weight over time, training goal, experience level, injuries you report, daily step count if you connect it | To calculate your calorie and protein targets and adjust them as you progress |
| Food logs | Meals, portions, calories and protein, food photos you take, barcodes you scan | To track intake against your targets |
| Training logs | Exercises, sets, reps, weights, perceived effort | To track progression and adjust your programme |
| Progress photos | Photos you deliberately save to the progress gallery | Only shown back to you. Never processed for any other purpose |
| Coach conversations | Messages you exchange with the AI coach | So the coach has continuity between sessions |
| Subscription | Apple transaction identifier, product purchased, expiry date | To know whether your subscription is active. We never see your card details — Apple handles payment entirely |
| Waitlist | Email address, if you signed up before launch | To email you once, when the app launches |
| Server logs | IP address, request time and path, kept short-term | Security, abuse prevention, and debugging |
Health data is treated as sensitive
Body weight, injuries, photos and dietary information are "special category" data under GDPR Article 9 and sensitive information under Israeli law. We process it only on the basis of your explicit consent, given when you complete onboarding, and only to provide the coaching service you asked for. Withdraw that consent by deleting your account.
3. Artificial intelligence
The coaching features send relevant parts of your data — your targets, recent logs, your message, and any food photo you submit for analysis — to Anthropic, which operates the Claude model that generates the response.
- Anthropic processes this on our behalf as a data processor.
- Under Anthropic's commercial terms, data sent through their API is not used to train their models.
- We do not send your username, email, or progress photos to the AI.
- Nothing is sent unless you take an action that asks for AI help.
4. Who else receives data
| Service | What they receive | Why |
|---|---|---|
| Anthropic | Coaching prompts, food photos you submit for analysis | Generates coach responses |
| Apple | Purchase and subscription events | Processes payment and manages your subscription |
| Hetzner Online GmbH | Hosts the server your data sits on | Infrastructure |
| Resend | Your email address and preferred language, if you join the launch waitlist | Sends the confirmation and launch emails. Processed in their Tokyo (ap-northeast-1) region as our data processor |
| Open Food Facts | The barcode number you scan | Looks up nutrition data. No personal data is sent |
| YouTube | Only if you tap play on an exercise demonstration | Videos are embedded in privacy-enhanced youtube-nocookie mode and load only on demand |
We do not sell your data, share it with advertisers, or use it for profiling.
5. What other members see
If you pick a gym, you become visible to the people who picked the same gym — and to nobody else. That is the only boundary. With no gym on your account nothing crosses at all, and no one can see you.
| Crosses to members of your gym | Crosses to nobody |
|---|---|
| The name and photo you chose, your years of training, the names of the exercises you did today and how many sets of each, and how many acknowledgements you received today | The loads you lifted, bodyweight, sleep, steps, food and calories, progress photos, pain and injury reports, your conversations with the coach, your email address |
Loads do not cross, and that is a decision rather than an oversight. The number that ranks people is the one that stays with you. The rule is enforced in the database query itself — it is incapable of returning that column — and not in the code that draws the screen.
To leave: "I do not train here any more" on the gym screen. From that moment you see nobody and nobody sees you. Your own training history stays yours and is not deleted.
6. Where your data lives
On a server in Nuremberg, Germany (Hetzner Online GmbH), inside the European Union. Anthropic processes AI requests in the United States under standard contractual clauses. Israel has an EU adequacy decision, so transfers between Israel and the EEA do not require additional safeguards.
7. How long we keep it
- Account data: until you delete your account.
- Deletion is immediate and complete. Settings → Delete account removes every row we hold about you across all thirteen data tables, including saved plans, progress photos, coach conversations, and subscription records. It is not a soft delete and there is no recovery window — so be sure.
- Backups: encrypted nightly backups are rotated on a 14-day cycle. Deleted data disappears from backups within 14 days.
- Server logs: a short rolling window, then overwritten.
- Waitlist emails: deleted after launch, or immediately if you ask.
Deleting the app from your phone does not delete your account. Use the in-app deletion, or email us.
8. Your rights
You can, at any time:
- Access your data — export it from Settings, or ask us.
- Correct anything wrong — every logged value is editable in the app.
- Delete everything — Settings → Delete account.
- Withdraw consent — deleting your account withdraws it entirely.
- Object or restrict processing, and port your data elsewhere.
- Complain to a supervisory authority — the Israeli Privacy Protection Authority, or your local EU data protection authority.
Email [email protected] and we will respond within 30 days.
9. Security
- Passwords are hashed with scrypt and a per-user salt. We cannot read them.
- All traffic is HTTPS. The
.appdomain is HSTS-preloaded, so an unencrypted connection is not possible. - Session cookies are signed,
httpOnly, andsameSite. - Every account's data is isolated at the query level.
- Backups are verified nightly and restores are tested.
No system is perfectly secure. If we ever suffer a breach affecting your data, we will tell you and the relevant authority without undue delay.
10. Children
OMETZ is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, email us and we will delete it.
11. Not medical advice
OMETZ provides general fitness and nutrition information. It is not a medical device and does not provide medical advice, diagnosis, or treatment. Speak to a doctor before starting any training or nutrition programme, particularly if you are pregnant, have an eating disorder, or have any medical condition.
12. Changes
If we change this policy materially, we will tell you in the app before the change takes effect. The date at the top always reflects the current version.