MuscleWiseAIMuscleWiseAI Privacy Notice
Version 3.2 · Effective: 1 November 2026
This notice explains how your personal data is processed when you use the MuscleWiseAI app and the musclewiseai.com website, under Article 10 of Türkiye's Personal Data Protection Law No. 6698 (KVKK).
1. Data controller
Entorion Teknoloji Sanayi ve Ticaret Limited Şirketi
Trade registry (MERSİS): 0336134081000001
Address: Metin Oktay Mah. 108/4 Sk. Berna Hanım No: 14 İç Kapı No: 2, Karabağlar, İzmir, Türkiye
Email: info@entoriontech.com
2. What we collect and how
We collect data when you enter it in the app or on the website, when you use the app, and from service providers in the cases listed below. Collection is electronic.
- Account: your email address, password (never stored in readable form), user ID, username and name.
- Profile and preferences: your goal, experience level, training days and place, age and gender; your date of birth for the age check if you join the community.
- Weight, height and body measurements: we treat these as health data and process them only with your explicit consent (section 4).
- Caution areas and health note: when you ask a trainer for a match or a program you may pick body areas to be careful with and may write a health note for that trainer; both are health data, optional and processed only with your explicit consent (section 4).
- Your logs: workouts, nutrition and water logs, goals and streaks.
- Progress photos: kept only on your phone; they never reach our servers.
- Community: your posts and images, reactions, follows, reports, profile photo and bio; the version and time of your acceptance of the community rules.
- If you are a trainer: your specialties and languages, bio, certificate image, logo, trainer code, anonymity preference, client connections, the programs you send, your earnings, your real first and last name, income type, bank account (IBAN, bank name and account holder name), trainer reference number and the state of your payout verification. To pay you we verify your identity and payout details: depending on your income type we ask by e-mail for your Turkish ID number or your company's tax number, the front of your ID card and company documents. These are not stored in the app.
- Purchases: your subscription status and transaction IDs, received through the app store and the subscription management provider. We never see your card details. If you buy a digital product on the website, the email address and order details sent by the payment provider, to deliver the order.
- Consent records: which text, which version and when you consented or withdrew.
- Technical data: your device token for notifications, app version, request times and your IP address in service providers' logs. The app contains no advertising or analytics tracking tools.
- Website and applications: the name, email, phone, Instagram account, city, client count and note you give in the trainer application form; the details in Meta's ad form if you apply through it (we receive them from Meta); your email address, language and announcement permission if you join the waiting list; which link brought you to the website.
- Support: the content of your messages to us.
3. Purposes and legal grounds
| Purpose | Legal ground (KVKK) |
|---|---|
| Opening your account, providing the app and its features, syncing your data between devices | Formation and performance of a contract (Art. 5/2-c) |
| Progress tracking and program preparation with your weight, height and body measurements | Explicit consent (Art. 6/3-a) |
| AI features (meal scan, MusCat chat, "What should I eat?") | Performance of a contract (Art. 5/2-c); each feature is switched on separately with your permission in the app |
| Connecting with a trainer, sending and tracking programs | Performance of a contract (Art. 5/2-c); explicit consent for your measurements (Art. 6/3-a) |
| Subscriptions, trainer payouts, verifying a trainer's identity and payout details, financial records | Performance of a contract and legal obligation (Art. 5/2-c, 5/2-ç) |
| Moderating community content, security and preventing abuse | Legitimate interest (Art. 5/2-f) |
| Notifications | Performance of a contract (Art. 5/2-c); you can turn them off in your phone's settings |
| Answering your requests | Legal obligation (Art. 5/2-ç) |
| Assessing trainer applications | Formation of a contract (Art. 5/2-c) |
| Waiting list announcements and campaign emails | Explicit consent (Art. 5/1) |
| Ad measurement on the website (Meta and Google cookies) | Explicit consent (Art. 5/1), in the cookie banner |
| Recording which channel brought you to the website | Legitimate interest (Art. 5/2-f) |
4. Weight, height, body measurements, caution areas and health note
We process these only if you give explicit consent, to track your progress and prepare your program. Without consent the measurement screens stay off and you can use the rest of the app. Your trainer sees your measurements only while you consent. Your measurements are never sent in any AI request.
You can withdraw consent and delete your measurements under Settings & Data › Privacy.
For measurements saved before consent was asked, the app asks for consent until 8 December 2026; without consent by that date, those measurements are deleted.
Caution areas. When you ask a trainer for a match or a program, you may pick from a fixed list the body areas you want handled with care in training (for example lower back or knee). Only the trainer you send the request to sees your choice, next to your goal; no reason or detail is asked. The choice is deleted when the trainer marks it read, after 14 days, or when you clear it. Picking is optional; your explicit consent is taken and recorded when you send the request.
Health note. In the same request you may write, as free text, a health condition you want your trainer to know about (an injury, a chronic condition, a medication you take). Only that trainer sees the note. It is deleted when the trainer marks it read, after 14 days, when you delete it, or when your link with that trainer ends. The note is kept on our server in Germany for that period. Writing it is optional; your explicit consent is taken and recorded when you send the request.
Caution areas and the health note are health data, like your measurements: they are never sent in any AI request, to content moderation or in a notification, and they are not shared with third parties.
5. AI features
The features below run with an AI service provider in the USA. Meal scan, MusCat chat and "What should I eat?" ask for your permission before first use. We do not add your name, email address or user ID to the requests; anything you type yourself is sent as written.
- Meal scan: the photo you take and an optional short note are sent. Location, camera and time data are removed from the photo before it is sent. We do not keep the photo; we add only the result to your log.
- MusCat chat: your question, recent messages and a short summary of your logs (such as age range, goal, workout and nutrition summaries) are sent so the answer fits you. The summary contains no weight, height, body measurements or health information. We use a filter to recognise messages containing health information; recognised messages are neither sent nor stored. The filter may not recognise every phrasing, so please do not write health information such as illnesses, medication or injuries in the chat. Chat history is kept only on your phone.
- "What should I eat?": your goal, daily targets, that day's logs, meal names, foods your trainer listed to avoid and any text you write for this feature are sent.
- Community moderation: your posts and profile details are checked automatically before they are published; part of this check is done by the same provider. Your name is not sent to it. This check does not ask for separate permission; it is described in the community rules.
The provider may keep requests for up to 30 days to prevent abuse; this data is not used to train its models.
6. Who we share data with
We do not sell your data. We share it only with the recipients below, limited to the stated purpose:
| Recipient | Purpose | Country |
|---|---|---|
| Cloud infrastructure provider | Database, authentication, file storage, server functions | Database and files in Germany; provider based in Singapore and the USA |
| AI service provider | The features in section 5 | USA |
| Email delivery provider | Account emails, application and waiting list emails, order delivery emails | Sent from Ireland; company in the USA |
| Subscription management provider | Tracking subscription status (your user ID and subscription details; not your name or email) | USA |
| Notification delivery provider | App notifications (device token and the notification's title and text) | USA |
| Website hosting and content delivery provider | Serving the website (visitor IP address) | USA |
| Payment service provider | Digital product sales on the website | Türkiye |
| Apple and Google | App distribution and in-app purchases (under their own privacy policies) | USA |
| Messaging service (WhatsApp) | Only if you message us on WhatsApp: your phone number, profile name and messages | Ireland and the USA |
| Meta and Google | Ad measurement on the website, only if you accept cookies (section 10) | Outside Türkiye |
| The trainer you connect with | Your onboarding answers, programs and progress; your measurements only with your consent | The trainer's country |
| Other users | Your public profile and community posts | |
| Our accountant | Financial records kept under the law | Türkiye |
| Competent public authorities | Where the law requires | Türkiye |
7. Transfers abroad
Sharing with the recipients above whose country is not Türkiye is a transfer abroad. The data transferred is limited to the purpose stated for each recipient in the table.
8. How long we keep data
| Data | Period |
|---|---|
| Your account and app data | While your account is open. Deleted immediately when you delete your account |
| Files you uploaded (post images, profile photo, logo, certificate) | Deleted 30 days after account deletion; profile photo and logo stop being public within one day at the latest |
| Measurements saved before consent was asked | Deleted on 8 December 2026 without consent |
| Caution areas and health note | Deleted when the trainer marks them read, after 14 days or when you clear them; the health note also when your link with that trainer ends |
| Financial records the law requires us to keep | Kept for 5 years in the app database only with the trainer reference number, amount and date; identity details are kept in the company's statutory accounting records |
| Name and IBAN of a trainer with an unpaid earning | Until it is paid |
| Identity and company documents sent by e-mail for payout verification | Not stored in the app; kept in the company's accounting records for the period tax law requires |
| Community moderation records | Unlinked from your account, to prevent abuse |
| Trainer applications | As long as needed to assess the application and form the contract |
| Waiting list entry | Until you leave the list or ask us to delete it |
| Security backups | Deleted when the backups expire; used only to restore the service |
| Requests at the AI service provider | Up to 30 days at the provider |
Details on account deletion: musclewiseai.com/delete-account
9. Your rights
Under Article 11 of the KVKK you have the right to: learn whether your personal data is processed; request information if it is; learn the purpose of processing and whether data is used for that purpose; know the third parties in Türkiye or abroad to whom it is transferred; ask for correction of incomplete or inaccurate data; ask for deletion or destruction under the conditions of Article 7; ask that corrections and deletions are notified to the third parties who received the data; object to a result against you arising solely from automated analysis; and claim compensation for damage caused by unlawful processing.
How to apply: send your request in writing, with your name and the subject of your request, from the email address registered to your account to info@entoriontech.com, or by post to the address in section 1. We answer within 30 days, free of charge; if the request involves an additional cost, the fee set by the Board may apply.
In the app you can correct your profile, delete individual logs, download your app logs as a file under Settings & Data › Data › Export backup, withdraw your measurement consent under Settings & Data › Privacy and delete your account under Settings & Data › Account › Delete my account.
Complaints: if your request is rejected, you find our answer insufficient or we do not answer in time, you may complain to the Personal Data Protection Board within 30 days of learning our answer and in any case within 60 days of your request.
10. Cookies on the website
musclewiseai.com uses Meta's and Google's measurement tags to see how our ads perform. These tags load only if you choose "Accept" in the banner at the bottom of the page. If you decline or make no choice, they do not load and no measurement data goes to these companies.
If you accept, the pages you visit, the fact that you opened the trainer page and submitted the application form, your browser and device details and these companies' own cookies are shared with Meta and Google; the name, email, phone and note in the form are not. These companies process the data under their own privacy policies and outside Türkiye.
You can change your choice with the "Cookie settings" link at the bottom of every page; if you decline after accepting, these cookies are removed from the website. The app does not use cookies.
11. Age
MuscleWiseAI is not for anyone under 18. If you are under 18, do not use the app. If we learn that someone under 18 has given us data, we delete it.
12. Security
Your data travels over encrypted connections. On our servers, row-level access rules decide who each record is open to. We do not add identifying information to AI requests. If a data breach occurs, we make the notifications the law requires.
13. Changes
We may update this notice. The current version is published on this page with its effective date. We announce important changes in the app or by email.
Version 3.2 (1 November 2026): WhatsApp added as a contact channel (section 6).
Version 3.1 (27 October 2026): caution areas and health note added (sections 2, 4 and 8). The previous version is kept in our archive and sent on request.