Privacy

What we store and why

Musopana stores account identifiers and contact details, optional profile names and personal context, fitness preferences, workout plans, set results and history, training availability, exclusions and pause preferences to provide the service. Private achievements are calculated from your activity. Optional measurements and notes are for your reference and do not establish medical clearance.

Who can access it

Your account data is available to you and authorized administrators for operation and support. We do not sell personal information. Authentication providers process sign-in information, email providers deliver transactional messages, and hosting providers handle service traffic. If you contact support, we use your message and contact details to respond.

Beta apps and device access

The beta uses the live Musopana service; saved workouts become part of your account history. When Day context is available in your build, Apple Health and Calendar access are optional and require your permission. The app does not read contacts or collect location coordinates. On Android 11 and earlier, Bluetooth monitor discovery requires the system location permission; Musopana uses it only for Bluetooth discovery. Apple and Google process beta distribution, diagnostics and feedback under their respective terms. Avoid including private health details in screenshots or feedback.

Android health and device access

On Android, optional health sharing uses Health Connect. Companion apps such as WHOOP, Fitbit or Garmin must first write the records you permit into Health Connect. Musopana can read permitted steps, sleep stages, exercise sessions, heart rate and resting heart rate, and can optionally write completed workouts. Synced data availability varies by device and companion app. Health Connect reconciles step totals; the app does not add raw step counts from multiple sources. Today uses the phone’s local calendar day. Android calendar access reads selected-calendar busy intervals and can save Musopana workout events when you opt in. Standard Bluetooth heart-rate monitors can provide live readings with permission; the selected monitor identifier is saved on your phone for reconnection. A foreground service keeps the connection active during workouts. These data are not used for advertising.

Optional Health and Calendar sharing

When Day context is available, you choose whether to share Apple Health summaries and calendar availability with your Musopana account. You can start a sync yourself. If you separately enable automatic Calendar scheduling in Settings, the app can refresh Calendar availability and schedule an unstarted workout while you use it. This does not run as an iOS background scheduling service.

Health sync uploads step-count and sleep-duration totals for the previous rolling 24 hours. This is a separate planning summary: the steps shown on Today run from local midnight, so those two totals can differ. If you separately choose a sleep comparison, it also uploads the median recorded sleep duration and the number of prior periods containing records from the previous seven rolling 24-hour periods, excluding the current period. A comparison needs at least three periods with sleep records. Missing data stays unavailable, rather than being treated as zero.

Calendar sync uploads only busy start and end times for the rest of today and tomorrow in your account timezone. Calendar choices stay on your device; birthday and subscribed calendars are excluded initially, and you can include them. We also store the summary window and observation time. Raw Health samples, calendar event titles, locations and attendees are not uploaded. Manual check-in previews use your answers alongside shared context. If you separately enable Automatic adjustments, sufficient fresh sleep comparison data can contribute to a bounded reduction in working sets, as described below. Calendar busy intervals identify free windows that fit your preferred workout times and workout duration.

Summary retention and your check-in

We keep only the latest summary for each source. Health summaries stop appearing after 24 hours and calendar availability after 30 minutes. Expired summaries are removed from active storage when the context service is next accessed; removal may occur later when the service is idle. Sharing preferences remain until you change them.

When you request a workout preview, your selected energy, soreness, pain/discomfort, illness, training intent and available time are sent to evaluate that request. The suggestion service does not retain these answers as a symptom history. You review and accept any workout change. Accepting an adjustment retains the original and accepted workout prescriptions, generic adjustment reasons and policy version as part of your Fitness history. Health measurements and comparison narratives are not retained in that adjustment record. Choosing to skip is a separate confirmation through Fitness and records that skip and its reason.

Optional automatic in-app planning

If you enable Automatic adjustments, Musopana evaluates unstarted workouts when you open Today or Tomorrow or sync context. It uses your existing training goal, recent workout difficulty, optional fresh recorded sleep comparison and shared availability to conservatively reduce working sets or choose an in-app time on the same day. Missing data is not interpreted as poor recovery. This is a bounded planning heuristic, not a medical readiness assessment. This planning evaluator does not itself write external calendar events, increase loads or move workouts to another day. Separately enabled mobile Calendar scheduling can reconcile an eligible workout event with the saved plan while you use the app.

Your account preference and the latest decision for each workout are stored on the server. Decisions include original and adjusted prescriptions, a generic reason, rule version, workout revision and selected in-app time; raw health values and calendar busy history are not copied into the decision. Decisions are removed after 90 days during subsequent planning requests, and account deletion removes them. You can disable future adjustments or restore the original workout; starting or manually changing a workout protects it from further automatic changes.

Private teams and exercise reports

If you choose to connect with friends or join a team, other participants can see the identity and shared workout proposal or participation information needed to plan together. Accepting replacement of your individual plan is explicit; each person records their own workout. Joining a team does not share your raw Health readings or calendar event contents. Exercise reports and any notes you submit go to authorized administrators for review. Avoid including private health details in reports.

Today’s activity and set heart rate

When Health sharing is enabled, the iPhone can display steps since local midnight and workouts completed today. This list refreshes on the device and is not uploaded. Health may return no data when access is not granted. While you use a live heart-rate monitor, stopping a timed set sends its observed start, end, maximum and sample count to your account with the timer; saving the set retains that summary in workout history, separately for left and right sides. Missing readings remain unavailable. Raw heart-rate streams and device identifiers are not uploaded. Your selected Bluetooth monitor identifier and display name are remembered only on this phone to reconnect for future workouts; choosing Apple Watch replaces that selection. These set summaries remain with workout records until account deletion. Disconnecting Day context does not delete saved Fitness history. With separate permission, Apple Health can provide age, recent resting heart rate and qualifying workout peaks for estimated zones. Birth date is used only to derive age on the iPhone and is not saved or uploaded. You can optionally enter age in years when Health age is unavailable; this entry is kept in your account preferences on this iPhone. During active timed sets, Musopana also stores observed zone intervals, their relative times and monitor category (Apple Watch or Bluetooth), separately for each side. The zone thresholds, resting HR and working maximum estimate used for that set are retained with the intervals so future changes do not rewrite history. Age and birth date are not included. Gaps in readings are not counted as observed zone time. These records remain with your workout history until account deletion. Heart-rate zones and maximum HR are estimates, not measured limits or medical advice. Zone history is one fitness data point and does not by itself establish cardiovascular or overall health improvement.

Saving to Health or Calendar

When you explicitly confirm an export, or enable automatic saving in workout setup, Musopana can save a recorded workout's actual start, finish and duration to Apple Health or Android Health Connect, with an identifier to recognize repeat exports. We do not invent calories, distance or heart-rate readings. If another device already exports your workouts, you can leave Musopana export off to avoid recording the same activity through two apps. You can review and save a Calendar event in Apple's editor, or separately enable automatic Calendar scheduling in Settings. Automatic scheduling creates or updates one Musopana event for an unstarted workout while you use the app, rechecks conflicts, and preserves manually changed or uncertain events. Turning it off leaves existing events intact.

To avoid duplicate Calendar events, the device retains a hashed workout-day key, saved event identifier and save time for up to 400 days, with a maximum of 2,000 entries. These receipts are not uploaded. For automatically scheduled events, a bounded device-only receipt also keeps the saved title, times, calendar identifier, notes and location to detect manual changes before updating an event. They remain across disconnects so that reconnecting does not create duplicates.

Disconnecting and device permissions

Disconnecting a source clears its uploaded summary and disables sharing. Disconnecting both clears both summaries. You can also manage OS permissions in Apple's Health app and device Settings. Disconnecting is separate from changing those permissions. Disconnecting or deleting Musopana does not remove workouts or events you already saved to Apple Health or Calendar; manage those external records in the relevant Health or Calendar app.

Deleting your account

You can also request account deletion without the app by contacting support from your verified account email.

In the mobile app, open Profile, choose Help & privacy, then Delete account, request the separate email code and confirm permanent deletion. Deletion removes your account, linked Musopana sign-in records, fitness settings, plans, workout history, uploaded Day context summaries and sharing preferences from the active service, and invalidates your sessions. Shared exercise content and administrative history can remain with anonymous attribution. If you are the last super admin, assign another active super admin first.

Existing backups, operational logs and messages already delivered to an email provider or your inbox are not retroactively erased by this action. Deletion does not automatically purge historical backups or logs. Their retention depends on the service's backup and log procedures; contact us for current details. Restored backups must have completed deletions reapplied before serving traffic. Contact us with retention questions. Deleting Musopana does not delete your Apple, Google or other independent provider account.

Verified alternate email addresses can be added under Profile → Login options. They access the same account and are removed with it. After deletion, your primary and linked verified email addresses cannot be used to sign up again for 30 days. A hashed email identifier and its expiry are retained to enforce this waiting period.

Optional nutrition features

Nutrition features require your consent. When enabled, Musopana processes the food and portions you log, nutrition goals, water entries, meal plans, recipe choices and grocery quantities to provide your diary and planning features and synchronize them across your signed-in devices. Shared food and recipe information is separate from your personal diary. Missing nutrient information is shown as unavailable rather than treated as zero. You can correct or remove diary entries; account deletion also removes personal nutrition records from the active service. The backup and log limitations above still apply.

Your choices

You can clear optional personal context separately from deleting your account. Do not enter medical records or medication details. Contact us to ask about access, corrections or privacy concerns. This pilot notice must be reviewed before general availability.

For help with Musopana, email support@musopana.com. For privacy, data access or deletion questions, email privacy@musopana.com.