‹ Yosh

Privacy

Last updated 12 September 2026

Yosh is a training planner run by an individual, not a company. This page explains what it stores, who can see it, and how to get rid of it. Plain language, no legal padding.

What is stored

Data	Why
Email address and sign-in identity	To let you back into your account (handled by Google Firebase Authentication). If you try Yosh as a guest, there is no email: your data sits under an anonymous account on this device until you save it with Google or an email. Signing out of a guest account loses its data.
Profile: name, age, sex, height, weight, sports, level, goals, available days, equipment, injuries or limits, deadline, language	To build training plans that fit you
Plans, logged sessions, weekly reviews	The core of the app
Weight history, and, if you enable nutrition, daily targets and the meals you log	Nutrition targets and progress charts
Push subscription and time zone, if you turn reminders on	To send the daily reminder
Club membership and role, if you join a club	Coach access and the club feed
Answers to the question of the day (for example position, club, recurring injuries, sleep, how demanding work is, what you enjoy), fitness test results, and tournaments you add	To make the plan personal; you can change any answer in Profile → My profile
If you connect a sports watch: activities, heart rate, sleep, HRV, resting heart rate and readiness	Recovery-aware plans and the activity view
Which features you use (counts only, no content)	To see what is worth improving
The date you gave consent, and the version you agreed to	Proof of consent

Health-type data and consent

Some of this, such as injuries, sleep, heart rate and weight, counts as health data under the GDPR. Yosh processes it only because you explicitly agreed to it when you created your account (or when asked once afterwards), and only to build and adjust your training. You can withdraw that consent at any time by deleting your account in Profile, which erases the data.

Where it goes

• Google Firebase (Firestore and Authentication) stores your account and data.
• Vercel hosts the app and runs its server functions.
• AI model providers — Google Gemini, and OpenRouter as a fallback — receive the parts of your profile and logs needed to write a plan, a weekly review or a meal estimate. Photos you send for meal estimation are processed by the same providers and are not stored by Yosh.

Exercise photos and instructions come from the public-domain Free Exercise DB and are served from Yosh's own domain, so viewing them contacts no one else. The Watch on YouTube button is an ordinary link: it opens a YouTube search in your browser or app only when you tap it, and Yosh sends YouTube nothing about you.

Yosh does not sell your data, does not show ads, and does not share anything with anyone else.

Who can see your data inside the app

• You — everything.
• Coaches of any club you join — your plans, logged sessions and weekly reviews, so they can coach you, and your watch recovery data only if you switch on sharing. If you belong to several clubs, every one of their coaches sees the same training picture, including sessions that belong to your other clubs. Never your nutrition, your meals or your weight.
• Other members of your club — only the sessions you finish, and only while you keep yourself visible in the club feed and leaderboard. You can hide yourself at any time in the Club tab.

Leaving a club ends coach access immediately.

Your choices

• Export — Profile → Export my data gives you everything as a JSON file.
• Delete — Profile → Delete my account erases your profile, plans, logs, meals, weights and club membership, and your sign-in account. This is immediate and cannot be undone.
• Nutrition is optional; turn it off in Edit setup and nothing about food is stored.
• Reminders can be switched off, which deletes the push subscription.

Under the GDPR you also have the right to access, correct, restrict or object to processing, and to complain to your data protection authority. The export and delete buttons cover access and erasure directly; for anything else, get in touch.

How long it is kept

Until you delete it. There is no automatic expiry, because training history is more useful the longer it runs.

Children

Yosh is not intended for anyone under 16. If a minor plays in your club, they should use it through a parent or coach account.

Security

Traffic is encrypted. Database rules restrict every document to its owner, with the narrow coach exception above. No system is perfect; please don't store anything here you would be upset to lose or reveal.

Contact

To delete your account and all your data, follow these steps (in the app or on the website, no install needed). Questions or corrections: use the contact address on Yosh's Google Play page or in the repository this is built from.