Privacy Policy - SkillTrees

Welcome to SkillTrees!

We're committed to protecting your privacy and being transparent about how we handle your data. This policy explains what information we collect, why we need it, and how we keep it safe. We've written this in plain language to help you understand exactly what happens with your information as we don't like overcomplicated privacy policies.

Information We Collect

Account Information

What We Collect	Why We Need It
Email address	To create your account and send important updates
Name	To personalize your experience and address you properly
Password (encrypted)	To secure your account - we never see your actual password

Why this matters: Your account information is the foundation of your SkillTrees experience. We use industry-standard encryption to protect your password, and we'll never share your email with third parties for marketing.

Training Profile

What We Collect	Why We Need It
Primary sport & athlete level	To generate appropriate workout difficulty
Workout location preferences	To suggest exercises matching your equipment

Why this matters: Your safety is our priority. By understanding your training preferences and available equipment, our AI can create workouts that challenge you appropriately. While we don't explicitly collect health or injury information, you may voluntarily include such details in your workout notes, which helps further personalize your training experience.

Progress & Performance Data

What We Collect	Why We Need It
Selected skills & milestones	To track your progress and suggest next steps
Workout logs (sets, reps, times)	To measure improvement and adjust difficulty
Session notes	To remember your feedback for future workouts
Exercise history	To provide insights and prevent overtraining

Why this matters: Your training data helps us understand what's working and what isn't. This allows our algorithms to continuously improve your workout plans based on your actual performance, not just generic templates, so each rep and weight you register (to an extend) and note you writte can be used for next workouts.

Technical Information

What We Collect	Why We Need It
IP address	For security and preventing unauthorized access and mostly bots
Device information and Browser	To ensure the app works properly on your device, each browser works differently, so we have specific rules of each browsers for different sections of the web page
Login timestamps	To detect suspicious activity and protect your account

How We Use Cookies & Storage

Essential Cookies

We use only essential cookies and browser storage for:

Authentication tokens: Stored securely to keep you logged in
Session data: Temporary storage for your current workout session

Good news: We don't use any tracking cookies, analytics cookies, or advertising cookies. Your browsing habits and personal data stay private.

Anonymous Usage Analytics

We use a self-hosted, privacy-first analytics tool (Rybbit) to understand how our app and website are used. This helps us improve the user experience and identify issues.

What this tool collects

Pages visited and general navigation patterns
Referral source (where you came from)
Browser and operating system type
Screen resolution
Approximate country (derived from IP, but IP addresses are not stored)

What this tool does NOT collect

No cookies are used
No personal data or identifying information
No cross-site or cross-session tracking
No IP addresses are stored

Why this matters: This analytics data is fully anonymous and aggregated. It cannot be used to identify individual users. All data is stored on our own servers and is never shared with third parties. Because no cookies or personal data are involved, no consent banner is required under GDPR.

Data Security

How We Protect Your Information

Encryption: All passwords are hashed using bcrypt, even we can't see them
Secure connections: All data transfers use HTTPS encryption
Token security: Authentication uses JWT with automatic rotation
Access controls: Only you can access your workout data

What We DON'T Do

We never sell your data to third parties, all the project is self founded by the developers, and eventual payments of the premium version
We don't use tracking or advertising networks, we hate ads
We don't share your progress with other users without permission, your account is yours and only yours
We never store your payment card details. In-app billing is handled by Apple App Store / Google Play, and subscription management is handled by RevenueCat.

Third-Party Services

Services We Use

Service	Purpose	What They Access
RevenueCat	Subscription infrastructure and receipt validation	Purchase history events, product identifiers, entitlement status, and app user ID (anonymous or custom, including our account-linked user ID format) so subscriptions can be activated, restored, and protected against fraud. For web checkout, we also pass your selected package and account email to the RevenueCat-hosted payment page. RevenueCat does not provide us with full card details.
Apple App Store / Google Play	In-app payment processing	The app stores process billing directly. We do not receive your full card data; we only receive purchase and subscription status through store receipts and RevenueCat.
Brevo (Sendinblue)	Email delivery	Email address for email verification and password reset (and newsletter delivery if you opt in)
Google Gemini AI	Workout generation	No personal information (email, name, or explicit health data) is shared. We send only general workout constraints: primary sport, equipment preferences, and your custom saved notes. If you've included health information in your notes, it may be processed by Google's AI - this is your choice when adding notes.

Your protection: We've carefully selected these partners for their strong privacy practices. They only receive the minimum information needed to provide their specific service. Each they have their privacy policies if you need more specific information.

Emails & Communications

We send two types of emails: essential service emails (required to run your account) and optional marketing/newsletter emails (only if you opt in).

Service emails (required)

Email verification
Password reset
Security and account-related notices

Important: These service emails can’t be disabled because they’re needed to provide and secure your account.

Newsletter (optional)

If you check the optional marketing/newsletter box during signup, we’ll add your email to our newsletter list in Brevo and send you training tips and articles. You can unsubscribe at any time using the unsubscribe link in any newsletter email.

Your Rights & Choices

You Have the Right To:

Access your data: You can always ask us to show you the information we retain of you, your workout history and workouts export functionality will be implemented in next versions.
Update information: Change your profile details anytime and you have the right to DON'T give your personal information when creating the account, if you want to have a fake name and email we accept it, as long as you don't abuse the service, we think that 1 account in the free version is enough to use the service without paying or making fake accounts. We're a a really small project that spends more money that can make right now.
Delete your account: Remove all your data permanently. No exceptions, you have an easy access in the Settings Page. Your email, name, family name and profile will be deleted.
Opt-out of marketing emails: Unsubscribe from the newsletter anytime (service emails like verification and password reset will still be sent)

Data Retention

We keep your data as long as your account is active. If you delete your account, we'll remove your personal information within 30 days, except where we need to keep certain records for legal or security purposes (like subscription fraud prevention).

Changes to This Policy

We'll notify you by email if we make significant changes to this privacy policy that can affect you. For minor updates that might be relevant, this page will be updated and we will announce the changes on the updates page.

Our promise: Any changes will always be designed to better protect your privacy or to comply with new regulations. We do our best to keep the best security practices in place.

Legal Information (Impressum)

Business Name: SkillTrees

Business Type: Individual/Sole Proprietorship

Contact Email: skilltrees.net@gmail.com

Note: As an individual business operator, we do not maintain a fixed business address. All communications and legal matters should be directed to the email address above.

This business is governed by Swiss nLPD (Federal Data Protection Law) and GDPR (for EU users) regulations.

Contact Us

Questions about your privacy?

We're here to help! Reach out to us at:

Email: skilltrees.net@gmail.com