Privacy policy

1.1 When this policy applies

This policy applies worldwide when you create an April account, use training, nutrition, progress, watch or AI features, contact support, or visit the website. Country-specific sections explain additional rights in selected jurisdictions but do not limit where April is available. It does not replace the privacy terms of Apple, Google, a connected health platform, an AI provider, the April Food Database infrastructure, or another service you choose to use.

“Personal information” includes information that identifies you, relates to you, can reasonably be linked to you, or is treated as personal data under applicable law. Health, biometric, body, wellbeing and some profile information may receive additional protection as sensitive or special category information.

1.2 Information April collects and processes

The information April processes depends on the features you use, what you enter and the permissions you grant.

Friend referrals and abuse prevention

If you use an invitation or participate in the reward programme, April links the invitation to the invited account and checks completion of onboarding and a qualifying food log. The inviter sees progress and reward status, not the friend’s meal contents, workout details, email address or health records.

The programme permits one device per person and one lifetime reward. April uses account, installation and device-integrity signals, together with protected identifier digests and server-side audit records, to detect self-referrals, reused identities, shared-device claims and duplicate rewards. These digests are pseudonymous personal information, not anonymous data. Some claim and anti-abuse records remain after account deletion so deleting and recreating an account does not reset eligibility. April does not currently require SMS phone verification for referral rewards.

History files you request

Supported app versions let you request a readable food and workout history file for the last 7 days, last month, last year or full history. April prepares it privately on its servers and provides an authenticated, time-limited download. The file records saved food and actual workout activity, including partial sessions where recorded; it is not a record of every planned workout or a copy of your raw connected-health history. A file saved on your device or shared elsewhere is then under your control.

Maps, outdoor recording and nearby AI

Location access is optional. You can use April's other features without granting it, and can change it in your device settings. Map browsing can use approximate location; recording an outdoor activity requires precise location. You can also search for a named place or choose a route start on the map.

Map requests can send the viewed area, route coordinates, selected stops, search text and your location when relevant directly to Mapbox. This includes route thumbnails shown in chat. These requests are not confined to your phone. Mapbox also receives ordinary request metadata, including IP addresses and pseudonymous identifiers.

Outdoor recording starts when you choose to start an activity. On Android, a location foreground service supports recording while you use another screen or lock your phone, with an ongoing system notification or active-app indicator depending on your notification settings. Pause stops adding recorded GPS points; finish ends the recording. The unfinished or unsaved recording stays in app-private storage on your device so it can recover after an interruption. Saving uploads the recorded GPS trail and activity statistics to April's Firebase infrastructure; saving a planned route uploads its geometry and directions. Discarding removes the local recording. Deleting a saved activity or route removes its stored geometry; deleting your account removes these records too, subject to the retention exceptions below.

If you explicitly ask AI about your current surroundings or choose “Use current area”, April sends a fresh device fix to its authenticated server for that reply. The server reduces its precision to an area of about a kilometre before querying the nearby-search provider. This is still location information, not anonymous data. The answer model receives selected place information and sources rather than the device coordinates. The device fix is not saved in chat history, profile fields or AI memories. Ordinary questions and opening saved chats do not request GPS. When AI uses your logged outdoor activities, it receives limited activity summaries such as sport, time, duration and distance, not the recorded GPS trail.

1.3 Where information comes from

• Directly from you: account details, onboarding answers, logs, chats, uploads, choices and support messages.
• From your device: app and device information, permissions, camera or microphone input, local health platform data and watch signals.
• From services you choose: Apple, Google, sign-in providers, connected health platforms, app stores and subscription services.
• From April Food Database: food, product, barcode, ingredient and nutrition records used to provide food results.
• From April's operation: derived plan settings, safety flags, trend summaries, entitlement state, security events and service diagnostics.

1.4 Why April uses your information

For people in the European Economic Area, these legal bases are interpreted under the EU GDPR. For people in the United Kingdom, they are interpreted under the UK GDPR and Data Protection Act 2018. Elsewhere, April relies on consent, contract, legitimate interests, legal obligation or another authority permitted by applicable local law. You are not required to grant optional device permissions or supply optional health context, but the related feature may be less tailored or unavailable without it.

1.5 Connected health data

The connected-health view in April's phone app requests read-only access to Apple Health or Health Connect. The Apple Watch companion separately asks for permission to save workouts to Apple Health. When you use a workout session on Apple Watch, HealthKit may collect and save associated sensor measurements, such as heart rate and active energy. When you complete the workout on your watch or paired phone, or end it early on your watch, April can save the workout's timing, duration and available HealthKit session data to Apple Health, subject to your permissions. Raw connected-health samples are not copied into a server-side April health-history database. If you ask AI to use health context, a limited summary needed for that request can be processed by April's server and the selected providers. You can revoke access in your operating-system settings.

1.6 How AI requests are processed

1. 01
   You send a request.

   April receives the prompt, your selected model, any attachment, and only the enabled April context relevant to the request.

2. 02
   Safety checks run.

   April uses rule-based safety checks on messages and answers. The selected AI provider may also apply its own safety checks.

3. 03
   Attachments are described.

   A raw image or file is first analysed using OpenAI. The resulting limited description, not the raw attachment, is then sent to the selected answer model. Supported saved chats keep original images privately for later viewing; other raw file payloads are not retained by April after processing.

4. 04
   The selected model responds.

   The prompt and limited context are sent only to the AI service needed to return the response. When a web-enabled feature is used, supporting tools receive only the query or page needed for that request.

5. 05
   Chats are saved according to your choice.

   Saved chats and memories remain until you delete them. Temporary Chat is kept out of your history and does not use saved memory or past chats. An encrypted copy of the result may be kept for no more than 24 hours to recover interrupted delivery.

On supported app versions, images sent in saved chats stay private to your April account so you can reopen them on your devices. Viewing requires authentication; April does not create public image links. Deleting the last saved chat or branch that uses an image removes its stored original; the image can remain while another saved chat or branch still references it. Deleting your account also removes these originals. Temporary Chat does not keep image originals on April's servers; temporary copies on your device are cleared on session or account changes and expire automatically. Images already discarded by older app versions cannot be recovered.

1.7 Service providers

April shares information only for a described purpose, at your direction, to complete a transaction, to protect the service or people, or where law requires it. Current provider categories include:

A provider may act as April's processor, service provider, or independent controller depending on the service. April does not authorise providers to use health information for advertising. If April adds a provider that materially changes the data path, this policy and any required consent will be updated first.

1.8 Where information is processed

April is operated from the United Kingdom under the project name April Technologies and uses providers that may process information in the United Kingdom, United States, European Economic Area and other countries where they or their approved subprocessors operate. Privacy protections can differ between countries.

Where UK law requires a transfer safeguard, April will use an applicable adequacy regulation, the UK International Data Transfer Agreement, or the UK Addendum to approved standard contractual clauses, together with a transfer-risk assessment and technical or organisational protections. For transfers governed by EU law, including transfers involving people in Ireland, April will use an EU adequacy decision, approved Standard Contractual Clauses or another valid EU GDPR transfer mechanism, with supplementary protections where required. Where other regional transfer rules apply, April will use the locally required consent, contract, assessment or comparable protection.

1.9 How long information is kept

These are April’s retention rules. An expiry marker stops access or reuse where specified; physical cleanup can complete afterwards. April may remove information sooner and can retain a narrowly scoped record longer where law, a court order, fraud prevention, safety, accounting or a live dispute requires it.

1.10 How April protects information

April uses encryption during transfer and provider encryption for stored data. Access rules limit data to the right account, servers check permissions, and app-integrity checks help detect tampering. Service credentials and retention periods are limited. Logs are designed to exclude prompts, answers and health information where they are unnecessary. Only people and systems with an authorised need can access the data.

No online service is risk-free. Keep your phone, watch, email account and sign-in methods secure. If April confirms a breach that requires notification, April will notify affected people and regulators within the deadlines that apply, including the US Federal Trade Commission Health Breach Notification Rule where applicable.

1.11 Website analytics and cookies

trainwithapril.com does not set advertising cookies or build advertising profiles. It uses Cloudflare Web Analytics for aggregated page-view, referral, device and performance information. Cloudflare states that this service does not collect or use visitors' personal data and does not track individual visitors across customers' websites. Hosting and security systems can still create ordinary request and security logs. If non-essential cookies or similar technologies are added, April will update this notice and provide consent controls before using them where the law requires.

1.12 Age requirements

April is not directed to, and does not permit accounts from, children under 13. The onboarding flow blocks a date of birth showing an age below 13. If April learns that an ineligible child supplied personal information, April will close the account and delete the information, subject to the narrow retention exceptions above.

If you are 13 to 17, a parent or guardian should review April, these documents, any subscription and material training or nutrition changes with you. April may require adult permission where local law or the nature of the information requires it. April does not sell young people's personal information or use it for targeted advertising.

In Ireland, where April relies on consent to process a child's personal information for an online service, a user under 16 may need consent or authorisation from a parent or guardian. Other lawful bases and child-safety rules may apply depending on the feature and context.

1.13 Your privacy rights

Depending on where you live and which law applies, you can ask April to confirm processing, provide access or a portable copy, correct information, delete it, restrict processing, withdraw consent, object to some uses, limit sensitive-data use, or explain a significant automated decision. April does not discriminate against you for using a privacy right.

Send a request to privacy@trainwithapril.com. State your country or US state and the right you want to use. April may request limited information to verify your identity and authority. If April denies a request, the response will explain why and how to appeal where an appeal right applies.

How to make a privacy complaint

Email privacy@trainwithapril.com with the subject “Privacy complaint.” April will acknowledge it, review the facts and relevant systems, involve a provider where needed, and send a reasoned response within the period required by applicable law. The response will identify any correction or other action and the regulator or appeal route available if you remain dissatisfied.

1.14 Changes to this policy

April may update this policy when the product, providers or law changes. The updated date will appear at the top. If a change materially affects your choices or requires consent, April will provide additional notice in the app or ask for consent before the new processing starts.