Last updated: October 21, 2026
Phee Notes is operated by Georgios Kamperoglou, based in Greece ("Phee Notes", "we", "us", or "our"). This policy applies to the Phee Notes apps, pheenotes.com, and related services.
You can use the core workout notebook without creating an account. Guest notes, programs, tasks, preferences, photos, and derived workout metrics are stored on your device. Creating or signing into an account is optional and enables cloud backup, restoration, and synchronization across supported devices.
We process account data such as your email address, provider-returned name, user ID, authentication state, and preferences when you choose an account. We process workout notes, sets, activities, tasks, programs, files, profile information, and selected photos when you choose to sync them.
Note photos uploaded by account users are stored privately and delivered using time-limited signed links. Profile avatars and banner images are intentionally public after you select and upload them because they are used as public profile media. You control whether to provide any photo.
Phee Notes asks for consent before enabling product analytics. If you agree, PostHog Cloud EU receives a random installation identifier, bounded app interactions, coarse performance buckets, and release context. It does not receive note text, note titles, exercise names, task or program text, photos, Health values, email addresses, account IDs, precise location, advertising identifiers, or dictated text.
We do not use session replay, screen recording, autocapture, advertising attribution, or cross-app tracking. You can turn analytics off in Settings at any time. Doing so immediately stops future collection and clears unsent events from the device. Already-uploaded anonymous events remain for the retention period below; you can contact us to request deletion where the anonymous installation record can be matched.
Sentry receives crash reports and sampled launch, editor, and save-performance measurements so we can keep the app reliable. Reports use random diagnostic identifiers. Phee Notes disables Sentry screenshots, view hierarchy, default personal information, profiling, and generic network capture. Supabase may separately record authentication and security events, including user ID, IP address, user agent, and event time.
AI and coach features are separate from normal workout recognition. Only when you deliberately request one of those features is the minimum relevant workout or coaching context sent to OpenAI for processing. API inputs and outputs are not used to train OpenAI models by default unless Phee Notes separately opts in, which it has not done. AI outputs can be inaccurate and should be reviewed before use.
Our legal bases under the GDPR are performance of our contract when providing requested features, legitimate interests in service security and reliability, consent for optional analytics and device permissions, and compliance with legal obligations where applicable.
These providers process data only for their stated function and under their own security and contractual safeguards. They may process data outside the European Economic Area. Where required, transfers rely on recognized safeguards such as adequacy decisions or standard contractual clauses.
Account users can delete their account from Profile → Settings → Account, backup & sync → Delete account. This deletes the authentication account, owner-scoped cloud records, private note photos, and selected profile media from active systems. It also removes that account workspace from the device without deleting an unrelated guest workspace.
Deleting an account does not automatically identify or erase PostHog events because their random analytics identifier is deliberately not linked to the account. Turn analytics off before deletion and contact us if you also want us to attempt deletion of previously uploaded anonymous events. Requests are completed within 30 days after any necessary identity or installation verification.
Depending on applicable law, you may request access, correction, deletion, restriction, objection, or a portable copy of eligible personal data, and may withdraw consent at any time. Contact us through the support details below. You may also complain to your local supervisory authority or the Hellenic Data Protection Authority.
The public website uses Vercel Web Analytics for anonymous page-view statistics. It does not use cookies, does not build a persistent cross-site profile, and resets its temporary visitor hash after 24 hours. We do not use advertising cookies or sell personal data.
We use reasonable technical and organizational safeguards including encrypted transport, owner-scoped database access controls, private note-photo storage, signed URLs, and restricted production access. No online system can guarantee absolute security, so you should also protect your device and credentials.
Phee Notes is not intended for children under 16, or a higher minimum age where local law requires it. If you believe a child has provided data unlawfully, contact us so we can investigate and delete it.
We may update this policy as the product or law changes. Material changes will be communicated through the app, website, or email where appropriate, and the date above will be updated.
For privacy questions or rights requests, visit Phee Notes Support or email pheenotesapp@gmail.com.