Privacy Policy

Last updated 2026-11-09

DRAFT for review. Placeholders in {{double braces}} and yellow notes must be filled in or removed before this goes live. Have a lawyer review before publishing.

Vinci is a strength, running and fuel app for hybrid athletes. It is operated by Codibble Inc., 125 W 31st Street, New York, NY 10001 ("we"). This policy explains what we collect, why, and who we share it with.

What we collect

• Account: your name and the identifier from the sign-in method you choose (Sign in with Apple or Google).
• Training: workouts, exercises, sets, weights, reps, durations, distances, your training plan and weekly goal, and Hyrox station times.
• Body data you enter: bodyweight and weight check-ins.
• Photos you add: progress photos (Log > Photos) and meal photos (Fuel).
• Groups: the group names you join, your name and workout summaries as shared with group members, and reactions (fist bumps).
• Apple Health (optional): if you allow it, Vinci reads step count and active energy burned. You can turn this off in iOS Settings at any time. [CONFIRM: whether Health data is stored only on your device or also sent to our servers, and update this line to match.]
• Coach chat: the messages you send the AI coach, plus the training context needed to answer them.
• Purchases: subscription status, handled by RevenueCat and Apple. We never see your payment card.
• Usage: app events such as screens opened and features used, through Firebase Analytics, and paywall views through Superwall.
• Notifications: a device token so we can send rest-timer and group notifications you have allowed.

How we use it

To run the app: to save your training, show your calendar, streaks and groups, power the coach, scan meals, check your subscription, send the notifications you allow, and improve the app using aggregated usage.

Who we share it with

We use service providers to run Vinci. They process data only for us:

• Google Firebase (sign-in, database, file storage, cloud functions, notifications, analytics)
• RevenueCat and Apple (subscriptions)
• Superwall (paywall screens)
• Groq (AI coach: your chat messages and training context)
• {{MEAL_SCAN_PROVIDER}} (meal scans: the photos you submit)

Other members of a group you join can see your name and workout summaries in that group. We do not sell your personal data. Vinci does not show ads. If we add ads, we will update this policy before they launch and link to the ad partners' policies.

Retention and deletion

We keep your data while your account is active. To delete your account and data, go to Profile > gear icon > Settings > Delete Account in the app, or email support@vincigpt.com from the address on your account. Deletion removes your training, photos, groups and sign-in. Some records, such as purchase receipts, may be kept longer where the law requires.

Your choices

• Turn off Apple Health access, notifications, or photo access in iOS Settings.
• Edit or delete your training, photos and groups in the app.
• Ask us for a copy of your data, or for corrections, by emailing support@vincigpt.com.

Children

Vinci is not directed at children under 13, and we do not knowingly collect their data. If you think a child has given us data, email us and we will delete it.

Security

Data is encrypted in transit and at rest. Access is limited to the people and services that need it. No system is perfectly secure, so keep your device and sign-in secure too.

Changes

If we change this policy, we will update the date above and, for material changes, tell you in the app.

Contact

Codibble Inc. · support@vincigpt.com