Privacy Policy — Smart Set

1. Data Controller

The Data Controller of your personal data is Smart Set (hereinafter "Data Controller" or "We").

We attach the utmost importance to protecting your privacy and process personal data under the EU General Data Protection Regulation (GDPR).

2. Data We Collect

We may collect the following data categories:

2.1. User-provided Data

Category	Examples	Purpose
Registration data	Name, email, password	Account creation and handling
Profile data	Age, gender, weight, height	Workout personalization
Workout data	Exercises, loads, sets, RPE	AI algorithms, progress tracking
Health data*	Fatigue level, menstrual cycle, injuries	Safe workout adaptation

* Health data is a special category under Art. 9 GDPR, processed only with your explicit consent.

2.2. Data Collected Automatically

Technical data: device model, OS, language, timezone.
Analytics and diagnostics: usage statistics, performance signals, crash reporting.
Advertising and attribution data: campaign source, download-button clicks, cookie or pixel identifiers, approximate IP-based location, and device information, only after ads measurement consent.

3. AI Data Processing

Smart Set utilizes AI algorithms to analyze workout data:

Input: exercise logs, age, weight, and workout history.
Processing: generation of personalized load and volume recommendations.
Decision-making: You may ignore AI recommendations. AI is advisory only.
Your workout data is not sold to external AI model providers.

4. Data Sharing

Your data is shared only with trusted third parties:

Cloud Hosting & Analytics: needed to operate, secure, diagnose, and improve the service.
Analytics and advertising providers: Google/Firebase, Meta, and TikTok, only within the scope of your analytics or ads-measurement consent.
App Store / Google Play: for payment processing.

We do not sell your personal data. Advertising providers may receive limited data for campaign measurement, attribution, or remarketing only when you give the relevant consent.

5. Cookies and tracking technologies

The website may use essential cookies required to operate the site. With your consent, it may also use analytics cookies and marketing pixels from Google/Firebase, Meta, and TikTok to measure visits, clicks, installs, conversions, and campaign effectiveness. You can change or withdraw consent from the privacy settings control in the website footer.

6. User Rights (GDPR)

You have the right to:

Access your data (Art. 15 GDPR).
Rectify inaccurate data (Art. 16 GDPR).
Erase your data / right to be forgotten (Art. 17 GDPR).
Restrict processing (Art. 18 GDPR).
Data portability (Art. 20 GDPR).
Object to processing (Art. 21 GDPR).
Withdraw consent at any time.

Contact us to exercise these rights: contact@smartsetai.pl.

7. Data Security and Retention

TLS/SSL encryption in transit, AES-256 at rest.
Data is kept until you delete your account. Analytics are anonymized after 26 months.

8. Contact

If you have questions about this Policy or our data practices:

📧 Privacy related: contact@smartsetai.pl
📧 General: contact@smartsetai.pl