Privacy policy

1. Who publishes YOROI
2. No account, no server
3. What YOROI keeps on your phone
4. Apple Health and Health Connect
5. What can leave your phone
6. Usage statistics and crash reports
7. Subscription and purchases
8. Backups, sync and exports
9. Permissions requested
10. No advertising, no selling
11. Service providers
12. Retention periods
13. Deleting your data
14. Your rights (GDPR)
15. Minors
16. Transfers outside the European Union
17. Changes
18. This website

YOROI is an app to track your weight, body and workouts, designed for combat sports.

Publisher and data controller: KABUTO, SASU (simplified joint-stock company) with a share capital of 1,000 euros, SIREN 109 094 649, Marseille Trade and Companies Register, registered office 55 rue Grignan, 13006 Marseille, France.

Contact: yoroiapp@hotmail.com
App identifier: com.houari.yoroi

YOROI asks for no account, no sign up, no email address and no phone number. You install the app and start.

YOROI has no server that receives your weigh-ins, workouts, photos or health data. They are stored in the app’s storage, on your phone.

Only on your phone, in the app’s storage:

• weight, body composition, measurements, height, goals
• workouts, exercises, loads, records, timers, competitions, fights
• sleep, hydration, daily readiness, fasting, nutrition, injuries
• progress photos and videos, if you add them
• training partners you save: name, notes, voice notes, photo
• workout location, only if you tap “Ma position” (My location): the place name and its coordinates are kept with the workout
• first name, gender and onboarding answers, settings, character and theme
• your subscription status, cached

This data stays until you delete it. It is protected by your phone’s encryption, and you can lock the app with Face ID, Touch ID or fingerprint. The publisher has no access to it.

Connecting to Apple Health (iPhone) or Health Connect (Android) is optional. It is only active if you allow it, and you choose each data type yourself in the system screen.

What YOROI reads, if you allow it: weight and body composition, activity and steps, heart rate and variability, sleep, workouts with their routes and zones, water and nutrition. Advanced measurements are read only if you turn them on.

What YOROI writes, if you allow it: your weigh-ins and body fat, the workouts you log, your water and the sleep you enter manually.

Limited use. Data from Apple Health and Health Connect is used only to show you your progress and the app features you see. It is:

• never sold
• never used for advertising, targeting or marketing profiling
• never shared with data brokers or third parties, and never sent to Google Analytics for Firebase, Sentry or RevenueCat
• never used to assess creditworthiness, lending or insurance
• never read by any person at the publisher
• only taken off your phone when you decide it yourself: export, share, or copy of your backup to a cloud folder you choose (section 8)

You can withdraw access at any time: on iPhone, in Settings, Health, Data Access & Devices, YOROI; on Android, in Health Connect, App permissions, YOROI. Data already written to Apple Health or Health Connect stays there, and you delete it from those apps.

Nothing goes to a YOROI server, there is none. Here is everything that can leave, and when:

• Apple Health or Health Connect: only if you allow it (section 4). That data is then managed by Apple or Google.
• Your watch (Apple Watch, Wear OS): if you use it, YOROI sends it what it displays.
• Widgets: what you choose to show stays visible on your home screen.
• A place name: when you tap “Ma position” on a workout, or for the starting city of an outdoor workout imported from Apple Health, your phone asks its map service (Apple or Google) for the name of the place. YOROI never uses your location in the background.
• Air quality: for an outdoor workout imported from Apple Health, YOROI sends Open-Meteo (open-meteo.com) the starting position rounded to about 1 km and the date. No identifier is sent.
• Subscription: handled by RevenueCat (section 7).
• Usage statistics and crash reports, with no health data (section 6).
• Your backups, exports and shares: only when you decide (section 8).

To know which screens are useful and to fix crashes, YOROI uses Google Analytics for Firebase and Sentry. It is on by default, and you can turn it off at any time in Réglages (Settings), Données et sauvegardes (Data and backups), Mes données (My data), Confidentialité (Privacy), switch Statistiques d’usage et plantages (Usage statistics and crashes). Turning it off stops all sending immediately, crash reports included. Nothing is sent from a simulator or a development build.

What is sent: usage facts taken from closed lists written in the app’s code, without values. For example “a weigh-in was entered”, “a strength workout was saved”, “the Progress screen was opened”. Added to that are ranges and closed choices: the goal chosen during onboarding (lose, gain, fight, maintain), the declared gender, the sport family, free, trial or subscribed status, a range of workout count or days of use, plus the device model, system version and app version.

What is never sent: no weight, no measurement, no calorie, no heart rate, no workout duration or load, no Apple Health or Health Connect data, no text you write, no name, no place, no photo.

Identifiers. Google Analytics gives the app a random installation identifier and may infer the approximate country of the connection. The advertising identifier (IDFA, GAID) is never collected, and advertising storage is disabled in the code. When analytics is on, this installation identifier is also sent to RevenueCat to link a purchase to the usage statistics, with no health data. Sentry receives the technical report of a crash: numbers in error messages are masked, and the user, request and device name are removed before sending.

Local counter. A counter, shown in the same place, tells you how many events were recorded. It never leaves your phone.

Legal basis: the publisher’s legitimate interest in fixing crashes and improving the app (Article 6(1)(f) GDPR), with your right to object through the switch above.

The core of YOROI is free. YOROI Premium is an optional subscription, described in the terms (in French).

Payment. It is processed by Apple (App Store) or Google (Google Play). YOROI never has access to any banking data.

Subscription management. Subscriptions are validated by RevenueCat, Inc., our service provider. RevenueCat receives:

• an anonymous identifier generated by the app, which does not identify you
• the subscription purchase history: purchase, trial, renewal, cancellation, refund
• the platform (iOS or Android), the app version and the device model
• the analytics installation identifier, only if analytics is on (section 6)

This information is used only to check that your subscription is active and to unlock Premium. It is never linked to your health data, which never leaves your phone. RevenueCat policy: revenuecat.com/privacy.

• Automatic backup: every day, YOROI saves a copy of your data on your phone. You can turn it off.
• Cloud folder: if you choose a folder (iCloud Drive, Google Drive, Dropbox, OneDrive), each backup is also copied there. It is then stored by that service, under its own rules. By default it is not encrypted: turn on password encryption in the backup settings if you want it unreadable without it.
• Between your devices through the cloud: another device reading the same folder can offer to restore the most recent backup.
• Between your nearby iPhone and iPad: only with a device you paired with a 6-digit code, and only while the sync screen is open. Exchanges go through Bluetooth or direct wifi, without internet, and are encrypted with a key unique to your devices.
• Exports and shares: an export (file, PDF, spreadsheet) or a shared image leaves only when you tap the button, to the app you choose.

Every permission is optional, requested when it is needed, and can be withdrawn in your phone settings:

• Apple Health or Health Connect: read and write your health data (section 4)
• Notifications: your reminders, scheduled on the phone. No health figure ever appears on the lock screen
• Location: only when you tap “Ma position” on a workout, never in the background
• Camera and photos: profile photo, progress photos, photo of your scale, journal videos, saving your share cards
• Microphone: sound of the videos you record and voice notes about a partner
• Calendar: add a competition to your calendar, after you confirm
• Face ID or fingerprint: lock the app if you turn it on
• Local network: sync with your paired device

YOROI shows no ads, includes no ad network or ad SDK, never requests access to the IDFA (iOS) or GAID (Android), and does no tracking across apps or websites. No data is sold, rented or transferred.

Only these technical providers are involved, each for a specific role:

• Google Ireland Limited, Google Analytics for Firebase: anonymous usage statistics (section 6). policies.google.com/privacy
• Functional Software, Inc., Sentry: crash reports (section 6). sentry.io/privacy
• RevenueCat, Inc.: subscription validation (section 7). revenuecat.com/privacy
• Open-Meteo: air quality for an outdoor workout, with no identifier (section 5)
• Cloudflare, Inc.: hosting of this website

Apple and Google are also involved for app distribution, payment, Apple Health, Health Connect and maps, under their own policies.

• Data on your phone: until you delete it, or uninstall the app.
• Usage statistics: 14 months at most at Google, then deleted automatically.
• Crash reports: 90 days at most at Sentry, then deleted automatically.
• Subscription data: for the duration of the subscription at RevenueCat, then for the legal period applicable to purchase records.

Everything is done from the app, with no account and without writing to us. Step by step instructions, in French, are on the page Supprimer mes données (Delete my data).

• Erase everything: Réglages (Settings), Données et sauvegardes (Data and backups), Mes données (My data), section Zone sensible (Danger zone), Tout effacer (Erase everything), then type SUPPRIMER to confirm. Weigh-ins, measurements, workouts, photos, backups, settings and reminders are erased, the app starts fresh.
• A single category: Réglages (Settings), Données et sauvegardes (Data and backups), Mes données (My data), Confidentialité (Privacy), then the bin next to the category.
• Outside YOROI, and you can delete them yourself: what was written to Apple Health or Health Connect, backups copied to your cloud folder, and images saved to your photo library.
• Statistics already sent: turning the switch off stops sending. To have data already sent deleted, write to yoroiapp@hotmail.com.

You have the right of access, rectification, erasure, restriction, objection and portability. Since your data is on your phone, you exercise these rights directly in the app: you view it, edit it, export it (Mes données, Exporter) and erase it (section 13).

For usage statistics, crash reports and subscription data held by our providers, write to yoroiapp@hotmail.com. We reply within 30 days.

You can also lodge a complaint with the French data protection authority, the CNIL: cnil.fr.

YOROI is intended for people aged 15 and over. We do not knowingly collect any data from children under 15. If you believe a child has contacted us, write to yoroiapp@hotmail.com.

Google, Sentry, RevenueCat, Apple and Cloudflare may process data outside the European Union, in particular in the United States. These transfers rely on the safeguards provided by the GDPR, in particular the European Commission’s standard contractual clauses, under these providers’ policies.

Your health data never leaves your phone through YOROI and is therefore never transferred.

This policy may change with the app. The date at the top of the page is updated, and any important change is announced in the app.

This website sets no cookies, uses no trackers and loads no third-party services: its fonts and images are served from the site itself. It is hosted by Cloudflare, which processes the technical connection logs needed to run the hosting.