Version: 2026-08-26
GainGetter IT Solutions FlexCo
Weidenstraße 2, 4240 Freistadt, Austria
Company registration: FN 670082s (registry court: Landesgericht Linz)
VAT identification number: ATU82951245
Contact: privacy@marlo.fitness
Full provider information (Impressum): https://marlo.fitness/impressum/
Local use (no account). Workouts, routines, fitness data and settings are processed on your device. HealthKit data (such as steps, heart rate and workouts) is read on your device to power app features and is not transmitted to us for local use.
Account and sign-in. Your email address from your identity provider (Apple or Google), the name you enter, your date of birth, an internal account ID, sign-in, session and security data, other onboarding details (such as biological sex, fitness goal and experience) and app settings. We never receive your Apple or Google password.
Online synchronization. Creating an account requires your active consent to synchronize supported app data with Marlo’s online services. Once you consent, Marlo stores this data online so it can be backed up, restored and used on your signed-in devices. This includes workouts, routines, workout sessions, training details such as sets, repetitions, weights and effort ratings, notes, settings, survey answers and media attached to custom exercises. Some of this data may reveal information about your health.
When you use the in-app “Delete cloud account & withdraw consent” action, Marlo stops client synchronization and optional analytics before requesting deletion of your cloud account and synchronized data. Your local app data remains on your device. If the deletion request fails, Marlo reports the failure so you can retry.
AI features (generation, image import and conversational AI; 18+). When you request AI generation, we process the settings and instructions needed to create the requested draft. Depending on the feature, these include the Workout duration, selected equipment and muscle focus and, for a Routine, the number of Workouts and split configuration. We also process any instructions you enter, the app language and the generated result. When you use image import, we process the image you select and the extracted and generated result.
Where conversational AI is available and you use it, we process your messages, the generated responses and tool activity needed to answer or carry out the request. Depending on where you open the conversation and the permissions you choose, this can include:
These AI request inputs, tool results and generated outputs are sent through Marlo’s backend to our AI model providers hosted on Microsoft Azure. AI features are gated in the app to users aged 18 or older.
Optional AI personalization and context. You can separately choose whether Marlo may add existing details to an AI-generation request or, where available, a conversational AI request:
Where conversational AI features are available, you can also separately allow cycle context (cycle phase, related training signals and time of day) and active Workout context (Workout name, technical identifiers, equipment and muscle focus, exercise details, target sets, repetitions, weights or duration, the current exercise and set, progress and relevant history anchors) to personalize an AI response.
We read these details from your account profile, onboarding information, current app preferences and the relevant in-app context. A category is sent to the Azure-hosted AI model providers only when you explicitly allow that exact category. For generation, profile and training details can be allowed for one request; in conversational AI they can be allowed for the current conversation. They can also be remembered until you withdraw consent. Active Workout context can be allowed for the current conversation or remembered until withdrawal. Cycle context is used only while its remembered permission remains allowed. Some of these details may reveal information about your health. Generation and conversational AI remain available without allowing optional profile or training details. Image import does not currently use these optional personalization details.
You can change or withdraw remembered AI-personalization consent at any time under Settings → AI Data Access. If AI Data Access is unavailable, contact privacy@marlo.fitness. Withdrawal stops the relevant details from being used for future requests, but it does not undo completed generations or conversations and does not by itself delete earlier messages, prompts, responses, results or saved drafts. Your deletion rights described below remain unaffected.
Data export (on request). At your request we compile a copy of selected account and app data and deliver it to your signed-in account email address, as an attachment or through a time-limited download link.
Optional analytics (only with consent). With your separate analytics consent we collect usage and error-diagnostic information via PostHog (hosted in the EU) and Sentry (hosted in Germany): app version, operating system, device type, timestamps and interaction events. Workout names are not included. Navigation context can include names you give to Routines and exercises, Workout notes and detailed training values such as weights, repetitions and effort values. No screen recording and no network-content recording are used. You can withdraw analytics consent at any time in settings; refusing it does not affect local use.
Backend security logging. Technically necessary information (such as time, requested service, response status, IP address and error details) to keep the service secure and running.
We use the following processors under data-processing agreements:
We do not sell personal data and do not use it to track you across other companies‘ apps or websites. Where personal data is transferred outside the EU/EEA, appropriate safeguards apply as required by law, for example EU Standard Contractual Clauses.
We keep personal data only as long as needed for the purposes above, or as long as the law requires. Export download links are time-limited and expire. When cloud-account deletion succeeds, we delete the associated data, including stored media and export files, subject to statutory retention duties and technically necessary backups.
You have the rights to access, rectify, erase, restrict and port your data, to object to processing based on legitimate interests, and to withdraw any consent for the future. Requests: privacy@marlo.fitness. You may also complain to a supervisory authority; in Austria this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, https://dsb.gv.at/.
Marlo is intended for persons aged 16 or older. AI features are gated in the app to persons aged 18 or older.
We use appropriate technical and organisational measures, including encryption in transit, access controls and security logging. No method can guarantee absolute security.
We update this policy when our processing changes. Where a change requires consent, we ask for it before enabling the affected processing.