Privacy Policy
Last updated: 25 October 2026
This policy explains what information Risense (the "App"), the iOS and Android app published by Onur Bulut ("developer", "we"), processes, why, and how. The data controller under the Turkish Personal Data Protection Law No. 6698 (KVKK) and the GDPR is Onur Bulut.
In short
- Risense works fully without an account. In that case your data stays on your device and nothing is sent to us.
- If you choose to link an Apple or Google account, your workouts are sent to our server to back them up and sync them between your devices. Body weight entries are sent only if you separately give explicit consent.
- The App has no ads, no analytics and no tracking. We do not sell or share your data.
- Coach suggestions are calculated on your device.
- You can delete your account in the App with one tap; your server data is deleted immediately.
1. Information stored on your device
The following is kept in a local database inside the App's own storage:
- your workouts: dates, exercises, sets (weight, reps, RPE, set type) and notes you write,
- body weight entries you add,
- your answers from the first launch (goal, experience, where and on which days you train, focus area, image model) and the program built from them,
- settings such as theme and language.
If you do not link an account, this information never leaves your device. Deleting the App deletes all of it. Your device's own backups (iCloud or Google device backup) may include it; that is under your control.
2. Account and sync (optional)
If you sign in with Apple or Google under Profile > Account:
| Data | Why |
|---|---|
| The account identifier Apple or Google gives us | To recognise you and sign you in |
| Email address (Apple's relay address if you chose "Hide My Email") | To find your account when you contact support |
| Workouts, exercises, sets and notes | Backup and sync between devices |
| Body weight entries (only with your explicit consent, see below) | Backup and sync between devices |
| Consent record (the date you gave it) | To be able to prove your consent |
| Refresh token issued by Apple (Sign in with Apple only) | To revoke Risense's access to your Apple ID with Apple when you delete your account |
| Session tokens | Secure connection without signing in again |
We do not ask for or collect your name, photos, location or contacts. Your first-launch answers and your program are not sent to the server.
Legal basis: workout data is processed to provide the backup and sync service you request (KVKK Art. 5/2-c, GDPR Art. 6(1)(b)).
Body weight and explicit consent: because body weight can count as health-related data, it is sent to the server only if you turn on Profile > Account > Back up body weight too and accept the consent text (KVKK Art. 6, GDPR Art. 9(2)(a)). The setting is off by default; while it is off, your weight entries never leave your phone. Consent applies to your whole account. You can withdraw it at any time by turning the setting off; all weight entries on the server are then deleted, while those on your phone stay. We never use this data for analysis, profiling or sharing.
3. Where data is stored and how it is protected
- The server is in a Hetzner Online GmbH data centre in Germany. Traffic is encrypted (HTTPS) and passes through Cloudflare. Storing data outside Turkey is necessary for the sync service you explicitly request by linking an account (KVKK Art. 9).
- Only the developer can access the database. Session tokens are kept in your device's secure storage (iOS Keychain, Android Keystore); the server stores only their hashes.
4. Retention and deletion
Your server data is kept while your account exists. With Profile > Account > Delete account you can delete your account and all of your server data immediately and permanently; this also clears the records on that device. If you cannot access the App, follow the steps on the account deletion page.
When you delete your account after signing in with Apple, Risense's access to your Apple ID is also revoked with Apple (it disappears from Settings > Apple ID > Sign in with Apple).
When you delete a single workout or entry, the server keeps only a "deleted" marker so it disappears from your other devices too; deleting your account removes these markers as well.
5. Purchases
Risense Pro is an auto-renewing monthly or yearly subscription sold through the App Store or Google Play. Apple or Google processes your payment; we never see your card details or who you are. The App only asks the store on your device whether a subscription is active; no purchase information is sent to us or to any other company.
6. Third parties
- Apple and Google: sign-in and purchases (Apple, Google).
- Hetzner and Cloudflare: server hosting and secure transport.
We transfer data to no one else and use no advertising or analytics SDKs.
7. Health notice
Risense's programs and coach suggestions follow general training rules; they are not medical advice. See the Terms of Use for details.
8. Children
The App is not intended for anyone under 16. If you learn that a child under 16 has created an account, write to us and we will delete it.
9. Your rights (KVKK Art. 11 / GDPR)
You have the right to know whether your data is processed, to get a copy, to have it corrected or erased, to object to processing and, under the GDPR, to data portability and to restrict processing. You can see, correct and delete most of your data yourself in the App. For anything else write to help@onurbulut.dev; we reply within 30 days. You may also complain to the Turkish Personal Data Protection Authority or to the supervisory authority in your country.
10. This website
risense.app is a static site: no cookies, no analytics, no external fonts. It is served through Cloudflare, which may process technical connection data such as IP addresses to run and protect the site.
11. Changes
When we update this policy we change the date above. If a change is significant (for example a new type of data), we will also tell you in the App.
12. Contact
Onur Bulut · help@onurbulut.dev · onurbulut.dev