Privacy policy

Effective October 13, 2026

Estella is an app to track your gym routines and progress. It is operated by TheFaroLab, based in Santo Domingo, Dominican Republic (“we”, “us”). This policy explains what data we keep, why, who we share it with, and how you control it.

For any question or request about your data, email [email protected].

What we keep

• Your account: email address, name, username, and how you sign in (email and password, or Google). Your password is handled by Google Firebase; we never see it.
• What you log: routines, exercises, sets, reps, weights, completed workouts, other activities (for example biking or running) and notes.
• Your settings: language, units, who can see each thing (privacy) and whether you appear in search.
• Your welcome answers: the character you choose, your goal, your experience, where you train, how many days and for how long, and how you heard about us (if you say). We use them to set up your plan and improve the app.
• Body data (only if you add it): weight and measurements. This is health data: we only keep it if you choose to log it, it is private by default, and you can delete it anytime.
• Technical data: when you use the app, our providers (see below) receive data such as your IP address and browser type, needed to deliver the app and protect accounts.

We don’t use analytics or advertising tools, and we don’t sell or share your data with advertisers.

Why we use it

• To provide the service: save your routines and progress and sync them across your devices (legal basis: performing our contract with you).
• To show your information to other people only as your privacy settings allow (legal basis: your consent, which you can change anytime).
• Body data: only to show you your progress and, if you turn it on, to adapt your mascot (legal basis: your explicit consent).
• Security, abuse prevention, and necessary emails such as account verification or password reset (legal basis: legitimate interest and performing our contract).

Who can see your data

For each kind of data you choose Only me, Friends or Everyone. By default your routines and workouts are for friends and your body data is only yours. Your email address is never shown to other people.

Friends: if “Show me in search” is on (it is by default; change it in Privacy), other people with an Estella account can find you by your name or @username. In search they only see your name, username and character. When you send or receive a friend request, the other person sees your name and username. If you remove someone from your friends, you’re removed from both lists. Your friends see your friend card: the days you trained each week, your weekly goal, your streak and your last workout (routine or activity name and the day; no weights or sets). Our server builds it from your data and nobody can edit it. If you set “Your profile” to private in Privacy, nobody else sees it; if you set “Workouts” to private, your last workout isn’t shown. It’s deleted when you delete your account. If “Routines” is shared with friends, your friends see your routines (exercises, sets and reps; no weights or notes) and can copy them. When you cheer a friend’s workout, they see your name, the cheer you picked and the workout; cheers are deleted when you delete your account.

Points and badges: our server works out your points and badges from your workouts, goals, records and activity with friends. Your friends see how many badges you have. They're deleted when you delete your account.

Providers that process data for us

• Google (Firebase Authentication and Cloud Firestore): sign-in and storage of your data, on Google Cloud servers in the United States. Google Sign-In, if you use it.
• Google Fonts: the app’s fonts (receives your IP address when they load).
• YouTube (Google): only if you tap “Watch technique” on an exercise. The video loads in YouTube’s privacy-enhanced mode; when it plays, YouTube receives your IP address and may use cookies under its own privacy policy. “Search YouTube” opens YouTube in another tab.
• GitHub (GitHub Pages): hosts the app’s files (receives your IP address and technical connection data).

If you live outside the United States (for example in the European Union), your data is transferred to the United States. Google and GitHub protect these transfers with the European Commission’s Standard Contractual Clauses and their data processing terms.

On your device

The app keeps a copy of your data in your phone or browser (local storage) so it opens fast and works offline. We don’t use tracking cookies. Signing out deletes that copy from the device.

How long we keep it

As long as you have an account. If you delete your account, we delete your data from our database right away. Providers may keep technical logs or backups for a limited time under their own policies.

Your rights and controls

Anytime, in the app (your avatar → Your account), you can:

• Download your data as a file (access and portability).
• Correct your name, username and any routine or log.
• Change who sees what in Privacy (withdraw consent).
• Delete your account and all your data.

You can also email us to exercise your rights of access, rectification, erasure, objection, restriction and portability. We reply within 30 days. If you live in the European Union, you can lodge a complaint with your data protection authority. In the Dominican Republic we apply Law 172-13 on personal data protection. If you live in California or another US state with privacy laws, you have the right to know what data we hold, ask us to delete it, and not be discriminated against for doing so; we don’t sell or “share” personal information.

Minimum age

Estella is for people 16 or older. We don’t knowingly collect data from anyone under 16. If you believe a minor created an account, email us and we’ll delete it.

Security

We use encrypted connections (HTTPS) and security rules that only let each person access their own data, except what they choose to share. No system is 100% secure; if an incident affects your data, we’ll notify you as the law requires.

Changes

If we change this policy in a meaningful way, we’ll show it in the app and ask you to accept it again. The date above shows the current version.