Privacy Policy
Last updated: 29 October 2026
This policy explains how 3SD S.r.l. ("3SD", "we") processes the personal data of people who use Adoss, the workout log app available for Android, iOS and as a web app (together, "the App"), under Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003.
In short: Adoss works on your device. Until you sign in with an account, your workouts stay there and we do not receive them. We use no advertising, profiling or tracking tools.
1. Data controller
3SD S.r.l. Registered office: Via Sant'Alessandro, 55, 24122 Bergamo (BG), Italy VAT: IT04570030165 Certified email (PEC): [email protected] Email: [email protected]
2. What data we process
2.1 Data that stays on your device
Plans, workouts, sets, loads, records, body weight, measurements, goals, reminders and preferences are saved in a database on your phone or, in the web app, in your browser's storage. If you do not sign in, 3SD does not receive this data.
2.2 Account data (only if you sign in)
An account is optional on the phone and needed for the web app and to sync data between devices. It runs on 3SD's sign-in service and can be created with email and password or with Google or Apple. We process:
- the email address and name you give us, or that the provider you chose sends us;
- an internal account identifier;
- your password, only as a cryptographic hash (if you do not use Google or Apple);
- the workout data listed in 2.1, which is copied to our servers to sync it between phone and web app;
- your acceptances of this policy and of the terms: the version accepted, the date and the device used. We keep them as proof of the processing, in anonymized form too after the account is deleted.
If you sign in with Google or Apple, we receive from them only what sign-in needs (identifier, email and, if you allow it, your name). With Apple you can choose to hide your email.
2.3 Body weight and measurements
The body weight and measurements you enter may say something about your health. We process them only to show and sync them for you, based on your explicit consent, which you give with an explicit acceptance when you sign in, before your data is synced. Withdrawing the consent means deleting the account (section 9); on your device you can still delete the data you entered at any time.
2.4 Technical data
To find and fix errors, the App sends technical logs to our servers: error messages, App version, device model, operating system and, if you are signed in, your username. They do not contain your workouts.
2.5 Data you choose to share
- Feedback: if you write to us from the App, the message leaves from your own mail app and, if you choose, includes technical details (version, device, language).
- Backups and exports: backup files and CSVs are saved wherever you choose; we do not receive them.
- Photos: the photo you use as the background of a workout sticker stays on your device unless you share the image.
The App does not collect location, contacts, biometric data or advertising identifiers.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating and managing the account, syncing data, running the web app | Performance of a contract (Art. 6.1.b GDPR) |
| Body weight and measurements | Explicit consent (Art. 9.2.a GDPR) |
| Technical logs, system security | Legitimate interest (Art. 6.1.f GDPR) in a working, secure service |
| Answering your requests | Performance of a contract and legal obligations |
4. Where we process data
3SD's servers hosting accounts, synced data and logs are located in the European Union. Access is limited to authorised 3SD staff.
5. Third parties
- Google LLC and Apple Inc., if you choose to sign in with them, as sign-in providers; and as operators of Google Play and the App Store, where you download the App.
- Android automatic backup: if it is on, Android includes the App's data in your Google account backup, sign-in credentials excluded. You can turn it off in Android's settings.
We do not sell your data and do not share it for advertising.
6. Cookies and browser storage
The web app uses technical cookies only: the sign-in session, the language and a security cookie for forms. It also keeps your data and preferences (theme, language) in your browser's storage. We use no profiling or third-party cookies.
7. How long we keep data
| Data | Retention |
|---|---|
| Data on your device | Until you delete it, sign out or uninstall the App |
| Account and synced data | As long as you have the account; after a deletion request, anonymized within 30 days |
| Anonymized data and acceptances | Kept in anonymous form, because they no longer identify anyone |
| Technical logs | 12 months at most |
8. Your rights
Under Articles 15-22 GDPR you can ask for access to your data, rectification, erasure, restriction, portability (also through the App's CSV export and backup), object to processing based on legitimate interest and withdraw consent. Write to [email protected]: we answer within 30 days.
9. Deleting your account
You can delete your account at any time:
- in the App: Settings > Account > Delete account;
- on the web: by signing in to the web app and following the Delete account page;
- by email: by writing to [email protected] from the account's address.
Within 30 days of the request the account is closed and the synced data is anonymized: the username, notes and profile name are erased, while the workout data (including the names of plans, days, workouts and exercises and the exercise descriptions you wrote), body weight and measurement data stays with no link to you. Deleting the account is also how you withdraw the consent to the processing of body weight and measurements. Data on your device stays until you uninstall the App.
10. Minors
The App is not meant for people under 16. If we learn we have received a minor's data, we delete it.
11. Changes
We may update this policy. Important changes will be announced in the App; the current version is always on this page.
12. Complaints
If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of your country.