Privacy Policy for Vigor

Last updated: October 28, 2026

Overview

Vigor is a workout tracking app for Android and iOS. It works offline and keeps your data on your device. A few optional features use the internet; this policy explains what each of them does with your data.

Data Collection

The developer does not collect, receive, sell, or share any personal data. Vigor has no user accounts of its own, no ads, and no tracking, and the developer runs no server that receives your data. Vigor sends a few anonymous usage statistics, as described under Usage Statistics.

Data Storage

Everything you enter in Vigor - workouts, templates, exercises, body measurements, menstrual cycle entries, settings, and Vigor AI chats - is stored on your device. It only leaves your device if you choose to use Google Drive Backup or share a template, as described below.

Usage Statistics

Vigor sends a few anonymous usage statistics to TelemetryDeck, a privacy-focused analytics service. They show the developer how many people use Vigor and which features they use, so the app can be improved.

• What is sent: that the app was opened, the first time you finish a workout, the first time you download the Vigor AI model, and when you import data from another app (which app, and whether it was workouts or measurements). Each of these also includes technical details such as the app version, the operating system version, the device model, and the language.
• What is never sent: your workouts, templates, measurements, menstrual cycle entries, Vigor AI chats, name, email address, or anything else you enter in the app.
• Anonymous: each installation gets a random identifier that is hashed on your device before it is sent, so the statistics cannot be linked to you. TelemetryDeck uses no cookies, does not track you across apps, and handles the data under the TelemetryDeck Privacy Policy.

Google Drive Backup (Optional)

Vigor can back up your data to your own Google Drive. This is off until you tap Link Google Account in Settings → Backup.

• What Vigor accesses: when you link an account, Vigor uses Google Sign-In and asks for a single permission: to store its own data in a hidden app folder in your Google Drive. Vigor can only see the files it created there. It cannot see, read, or change any other file in your Google Drive.
• Your email address: Vigor reads the email address of the linked Google account only to show you which account is linked. It is stored on your device and is never sent to the developer.
• What a backup contains: a copy of Vigor's database with all the data listed under Data Storage. Once an account is linked, Vigor backs up automatically after each finished workout and from time to time when you leave the app. It keeps the newest backup of each day for the last 7 days that have one, and deletes older ones.
• Who can access it: backups are stored in your Google account only. The developer cannot access them. Google stores them under the Google Privacy Policy.
• Restoring: Vigor downloads a backup from your Google Drive only when you choose to restore it, and it replaces the data on that device.

Vigor's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from your Google Drive is used only to back up and restore your Vigor data, and is never transferred to anyone else, used for advertising, or read by people.

To stop backing up or remove your backups:

• Stop backups: tap Unlink Google Account in Settings → Backup. This revokes Vigor's access to your Google Drive. You can also revoke it at myaccount.google.com/permissions.
• Delete backups: in Google Drive, open Settings → Manage apps → Vigor → Options → Delete hidden app data.

Moving to a New Android Phone

Android does not upload Vigor's data to its own cloud backup. When you set up a new Android phone by copying data directly from your old one, by cable or over Wi-Fi, Android may copy your Vigor data to the new phone. This transfer happens between your two devices only.

Vigor AI (Optional)

Vigor AI runs entirely on your device. Your messages, your chats, and the workout data the AI reads to answer you never leave your phone.

Using Vigor AI requires downloading its model file (about 1 GB), which you start yourself. The file comes from the developer's file storage, hosted by Cloudflare, and Vigor checks the same place for model updates. These requests contain no personal data. Like any download, they reveal standard connection information such as your IP address to Cloudflare in order to deliver the file, under the Cloudflare Privacy Policy.

Template Sharing

When you share a workout template, Vigor creates a link to vigorapp.dev. The link itself contains the template: its name, its exercises, and their sets. It contains nothing else about you. Nothing is stored on a server: the data lives only in the link, and whoever you send it to can open it. Opening a link in a browser sends it to vigorapp.dev, which is hosted by Cloudflare.

Exercise Videos

Some exercises link to demonstration videos on YouTube. Opening one leaves Vigor and is covered by the Google Privacy Policy.

Permissions

• Notifications: on Android, to show a notification while a workout is active, which keeps rest timers and sounds working when your phone is locked or the app is minimized. On both Android and iOS, to alert you when a rest timer ends.
• Alarms (Android): to make the rest timer end on time while the app is in the background.
• Internet: for the anonymous usage statistics and the optional features above.

Apart from the usage statistics, none of these permissions collect or transmit data. Vigor does not access your camera, microphone, location, or contacts.

Third Party Services

• Google Play Billing and the Apple App Store handle the optional in-app tips. The developer receives no personal information from these transactions beyond the payment itself.
• Google Sign-In and the Google Drive API are used only if you link a Google account for backups.
• Cloudflare hosts vigorapp.dev and the Vigor AI model file.
• YouTube hosts the exercise videos.
• TelemetryDeck receives the anonymous usage statistics.

Data Retention and Deletion

Vigor has no accounts and no server, so there is nothing to request: you delete your data yourself, and it is deleted immediately. The developer has no access to your data and therefore cannot delete it on your behalf.

Data on your device is kept until you delete it:

• Delete individual workouts, templates, exercises, or measurements in the app
• Delete your workouts, templates, and measurements at once in Settings → Clear Database
• Delete your Vigor AI chats one by one or all at once in the chat history
• Delete all app data, including settings, by uninstalling Vigor

Google Drive backups (only if you linked a Google account) are kept in your Google Drive until you delete them. Vigor keeps at most 7 backups, one per day. Unlinking your account stops new backups but does not delete existing ones. To delete them:

1. Open Google Drive on the web and go to Settings → Manage apps
2. Find Vigor and choose Options → Delete hidden app data

Nothing is kept anywhere else after these steps. The anonymous usage statistics cannot be linked to you, so they cannot be looked up or deleted for one person.

Children's Privacy

Vigor does not knowingly collect personal data from anyone, including children under the age of 13. The anonymous usage statistics contain no personal data.

Changes to This Policy

If this policy changes, the updated version will be posted at this address with a new date.

Contact

If you have any questions about this privacy policy, contact the developer at cursemanowitch@gmail.com.

Vigor is developed independently by Stefan Krsmanovic.