Legal

Privacy Policy

Last updated: 19 July 2026

Mozaik Software Solutions Ltd ("Mozaik", "we", "us", "our") operates the Crunch mobile application (the "App"). This Privacy Policy explains what information we collect when you use Crunch, how we use it, who we share it with, and the choices and rights you have. By using the App, you agree to the collection and use of information as described here.

1. Who we are

Mozaik Software Solutions Ltd is the data controller responsible for your personal data. You can contact us at any time at info@mozaiksoftwaresolutions.com.

2. Information we collect

Account information

• Email address and authentication credentials, used to create and secure your account.

Profile and preference information

• Fitness goals, training experience, available equipment, and dietary preferences you provide during onboarding.

Health and fitness data

• Workouts, exercises, sets, reps, weights and training logs you create.
• Body weight entries and progress data.
• Food diary entries, meal descriptions, barcode scans, and nutrition/macro data.
• Weekly check-in responses, including sleep, recovery, adherence and stress ratings.

Content you send to AI features

• Messages you send to the AI Coach Chat.
• Meal descriptions or photos you submit for automatic food logging.
• Check-in answers used to generate a weekly verdict (hold, adjust, deload, diet break, or pause).

This content is sent to our AI provider, Anthropic, solely to generate the response, plan, or verdict you requested. See "AI processing" below.

Device permissions

• Camera — used only when you choose to scan a barcode or photograph a meal for logging.
• Photo library — used only when you choose to attach an existing photo for meal logging.
• Notifications — used to send reminders and updates you have opted into, such as check-in prompts.

Technical information

• App version, device type and operating system, collected for compatibility and troubleshooting.

3. How we use your information

• To provide the App's core features: workout logging, AI-generated training programs, nutrition plans, coach chat, weekly check-ins and progress analytics.
• To personalise programs, meal plans and coaching responses to your goals and history.
• To maintain your account and keep it secure.
• To respond to support requests sent to us directly.
• To diagnose bugs and maintain the reliability of the App.

We do not use your data for advertising, and we do not sell your personal data to anyone.

4. Legal basis for processing (UK GDPR)

• Performance of a contract — processing needed to provide the App's features you request.
• Explicit consent — for health-related data (body weight, nutrition, check-in wellbeing data), collected when you choose to enter it.
• Legitimate interests — for technical diagnostics and keeping the App secure and working correctly.

You may withdraw consent for health-related processing at any time by deleting the related entries or your account, as described in Section 8.

5. AI processing

Crunch uses the Anthropic API to generate training programs, nutrition plans, coach chat responses, and weekly check-in verdicts. The relevant inputs (such as your goals, training history, check-in answers, or chat messages) are sent to Anthropic strictly to produce that output. Under Anthropic's standard API terms, data submitted through the API is not used to train Anthropic's models. AI-generated content is provided for informational and motivational purposes only — see our Terms & Conditions for the related disclaimer.

6. Who we share information with

We share personal data only with service providers who help us run the App, under appropriate confidentiality and data protection terms:

• Supabase — our database, authentication, and backend infrastructure provider. Your account and app data are stored in Supabase's PostgreSQL database, protected by row-level security so that only you can access your own records.
• Anthropic — processes the content described in Section 5 to generate AI responses.
• Expo / EAS — provides app build, update and push notification infrastructure.
• Apple and Google — the app stores through which you download and install the App, and which may process limited data as part of app distribution.

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

7. International data transfers

Some of our service providers, including Anthropic, Supabase and Expo, may process data on servers located outside the UK or European Economic Area. Where this occurs, we rely on appropriate safeguards, such as standard contractual clauses, to ensure your data remains protected to UK GDPR standards.

8. Data retention and deletion

We retain your account and app data for as long as your account remains active, so the App can continue to provide personalised features. You can request deletion of your account and associated data at any time by contacting info@mozaiksoftwaresolutions.com. We will delete your personal data within 30 days of a verified request, except where we are required to retain limited information for legal or accounting purposes.

9. Security

We use industry-standard measures to protect your data, including encryption in transit, secure credential storage on your device, and database-level row security so that each user can only access their own records. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Request a portable copy of your data.
• Withdraw consent at any time, without affecting past processing.
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us at info@mozaiksoftwaresolutions.com.

11. Children's privacy

Crunch is not directed at children under 16, and we do not knowingly collect personal data from anyone under that age. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and, where appropriate, communicated within the App.

13. Contact us

Mozaik Software Solutions Ltd
Email: info@mozaiksoftwaresolutions.com