NEXT ONE is made by Davide Buondi. For anything about your data write to hello@nextoneapp.com. VAT ID DE424925642. The full legal notice (Impressum) is at the end of this page and at nextoneapp.com/impressum.

Your saved workouts, your history (including the reps and weights you log), your records (the most you have lifted for one rep), the body weight you write down in Progress, your settings, and a workout in progress so you can pick it up again. This lives in your browser's storage on this device.

For now, photos, videos and voice notes are switched off: only sessions, numbers and written messages are sent. They will return with the coach subscription, and this page will say so first.

Only what you choose to send: with a button that says so, or — for a plan a coach sent you — after a yes you gave once and can take back at any time:

· Share a workout — your phone opens WhatsApp or the share sheet with a link. The workout travels inside the link itself; we do not keep a copy.

· Share a result — the same: a message you can read and edit before you send it.

· Your training, to the coach who sent you the plan — only if you said yes on that plan’s page. After each session of it, your coach receives what you did: the session, the sets, the reps, the kilos and the time — never your heart rate. The video you film of a set goes too, but only if you ticked that as well, separately. A message you write to your coach goes when you press Send, with the photo, video or voice note you add to it. It all waits in our own store on this site until your coach’s device collects it; only the device that sent you the plan can read it. A class’s link never sends anything back. You can change your answer on the plan’s page at any time.

· Send a week or the whole plan (coaches) — it waits in our own store on this site under a random ten-letter address, so that whoever you send the link to can open it. What is stored: the workouts, the notes you wrote for them, your display name and, for a class, the class’s name — never a client’s name, a phone number or a note you wrote for yourself. Anyone who has the link can read what is behind it. It is deleted after 400 days; sending it again replaces it.

· Photos, videos and voice notes on an exercise (coaches) — they stay on this phone until you send a week that contains them; then they go to the same store, so whoever has the link can open them. They are deleted after 400 days.

· Feedback — when you tap Send, your answers and the app version are sent to our own inbox on this site. That is all that is stored: no name, no email address, no workouts, no history, and you are never asked who you are. They are deleted automatically after 180 days. To stop one person flooding the box, the number of messages coming from an address in the last hour is counted through a scrambled one-way code that cannot be turned back into the address, and it is thrown away after an hour. If sending fails, the app offers to send the same text by email instead — that one goes through your own email app, to hello@nextoneapp.com.

· Backup file — Export writes a file to your phone. It goes nowhere unless you send it.

· Automatic backup — if you turn it on in Settings › Backup, every day (or every 3 or 7 days, as you choose) your phone locks a copy of the app's data (workouts, diary, clients and the exercise library with names, notes and links; without videos, photos or voice notes) with a key it makes from your email and password, and sends the locked copy to our store. Your email, your password and the key never leave the phone; we keep the last three copies and cannot open them. Turning it on also gives you a recovery key, shown once on your phone, that opens the same copies if you forget the password, and is worth as much as the password: it never leaves the phone either, and our store keeps only what it unlocks, locked with it, for 3 years at most. Each copy is deleted 400 days after it was made, and Turn off deletes them all at once, with what the recovery key unlocks. To slow down anyone guessing, the tries coming from an address are counted through a scrambled one-way code that cannot be turned back into the address, and it is thrown away after an hour.

Like any website, Cloudflare, which hosts this app, records ordinary technical request logs (such as your IP address) when the page loads, and when the app asks our site whether this version still works with it (when it opens, when you come back to it, and every 30 minutes while it is open). That question carries nothing about you.

No analytics, no tracking cookies, no advertising, no third-party scripts. There are no ads in this app; if that ever changes, you will be asked first and this page will say so. The website nextoneapp.com (not this app) counts its visits with Cloudflare Web Analytics: no cookies, nothing stored on your device, no profile of you - only which page was opened, from which country and on what kind of device, added up (Art. 6(1)(f) GDPR).

The REC button asks your browser for the camera, and your browser asks you. The camera then only looks — nothing is recorded until you press START. While it runs, the picture stays on this phone: it is drawn into a video together with the clock, and when you stop, the video is kept in this app, on this phone, next to the set it was made during — you can watch it again from History, send it from there if you want to, or delete it. Nothing is uploaded and there is no copy on any server — unless, on a plan from your coach, you said yes to sending the videos of your sets: then the video of that set goes to your coach, as described above. It lives in your browser's file store for this site, so clearing this site's data deletes your videos too, and Settings says how many there are and how much room they take. The recording stops by itself when the set ends. If you never press REC, the camera is never asked for.

If you connect one, the phone asks you which strap or watch and then reads it directly: the beats go from it to this phone and nowhere else. Nothing is uploaded (only inside the locked automatic backup, if you turned it on), no account is involved, and the app never reads any other Bluetooth device — only the ones you picked. In the phone app, each one you connect is remembered on this phone (its name and the id the phone gave it), so the next workout connects to it by itself; Settings › Forget saved deletes that list. Disconnect, or close the app, and it stops. With nothing connected, no heart rate is shown.

Only in the iPhone app, and only if you say yes twice: first to our question, then to the iPhone’s. On a plan from your coach you hear when your coach changes the week and sends it again; as a coach, when a client sends you a session or a message.

For this, your phone gives us the code Apple made for this app on this phone, and our store keeps it with which question you answered, in which language and when - tied only to the random name of the plan’s link, never to your name, email or phone number. Your coach never sees it. When there is something to tell, our server gives Apple (Apple Push Notification service, Apple Distribution International Ltd., Ireland, which runs this service under its own responsibility) that code and one fixed sentence, such as “Your week has been updated” or “A client has sent you something new” - never a name, an exercise, a weight or anything the coach wrote.

The code is deleted when you turn notifications off in Settings or in the iPhone’s settings (the app notices the next time it opens), when you delete what was sent on the plan’s page, when the coach hands the link to another phone, when the link runs out, and after 400 days at the latest - and at once if Apple says it is no longer valid.

There is no account. Your clients, what you write about them and your plans stay on the device you write them on — a phone or a laptop. Only what you send leaves it: a week or a plan, with the photos, videos and voice notes on its exercises, goes to our own store on this site, as described above. What a client sends back waits in the same store and can only be read with a key that was made for that link and stays on the device that sent it. To move to another device, or before you change your phone, use Save a backup: with clients in it, it is locked with a password you choose.

Or turn on the automatic backup: every day a copy of your clients, your plans and the keys of your links goes to our store, locked on your phone with your email and password, so we cannot read it - and the same email and password open it on your next phone.

Or link a device (Settings › Your data), to use the app on your phone and your computer together. One shows a code, the other types or scans it, and the same four digits on both screens make sure nobody is in between. From then on your clients and your saved workouts go between your linked devices through our store: each one is locked on your device with a key that only your linked devices have, under a name that tells us nothing, so we cannot read them. For each linked device our store also keeps a random code, the public half of its key, its kind (for example iPhone or Windows computer) and when it last checked in. To slow down anyone guessing a code, the tries coming from an address are counted through a scrambled one-way code that cannot be turned back into the address, and it is thrown away after an hour. Unlink, on any of your devices, stops another one at once: the next time it is online it deletes your clients and workouts, and everything is locked again with a new key.

A client you send a plan to needs no account either. The link carries a random ten-letter name and nothing else — no name, no phone number, no notes in the address. Behind it are only the workouts and the notes you wrote for them; what you write for yourself stays with you.

What leaves the phone goes to our server at Cloudflare (Cloudflare, Inc., USA), under Cloudflare's data processing terms. Cloudflare is certified under the EU-US Data Privacy Framework. Its store keeps copies in data centres around the world, so this data can be processed outside the EU.

How long: a week or a plan a coach sends, and what an athlete sends back on it - 400 days. A coach's photos, videos and voice notes - 400 days. The videos, photos and voice notes an athlete sends to the coach - 60 days. Feedback - 180 days. Technical request logs - as long as Cloudflare keeps them for security and operation. Everything else stays only on your phone, until you delete it.

An automatic backup, if you turn it on: the last three locked copies, each deleted 400 days after it was made, or all of them at once when you turn it off.

Linked devices: the locked copies stay while at least one device is linked; they are deleted when the last one is unlinked, or 400 days after none of them checked in.

Notification codes: as long as the link they are for, 400 days at most.

Sending your training to your coach rests on your consent (Art. 6(1)(a) GDPR, and Art. 9(2)(a) where it says something about your health). You give it on the plan's page, you can take it back there at any time, and you can have what was already sent deleted. A plan a coach sends is kept so that the person it is for can open it (Art. 6(1)(b) and (f)). Feedback is sent because you press Send (Art. 6(1)(a)). The technical logs serve the security of the service (Art. 6(1)(f)).

Notifications rest on your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG): you give it in the app, and you take it back by turning them off. For the clients of a coach, we handle these data on the coach’s behalf.

To send your training to a coach you must be 16 or older, or have a parent agree; the app asks before the first yes.

You can ask what we hold about you, have it corrected or deleted, restrict or object to its use, take it with you, and withdraw a consent at any time - write to hello@nextoneapp.com. You can also complain to a data protection authority, for example the one of your German state or, in Italy, the Garante per la protezione dei dati personali.

Photos, videos and voice notes are stored by us for the people they are sent to. If you find one that is illegal, write to hello@nextoneapp.com with the link; we look at it promptly and remove it if needed.

Settings › Your data › Export saves a backup file; Import brings it back. Clearing this app's browser storage deletes everything on this phone for good — only an automatic backup, if you turned it on, can bring it back.

The Copy technical info button on the feedback page copies version, browser and screen details only — never your workouts or names. You choose whether to paste it.