Who we are
Ulv is made by MPiFY in Malta, the data controller for everything below. Questions, or anything about your data: hello@mpify.com.
Short version: Ulv keeps what it needs to work and nothing else. No ads, no tracking, no analytics, and your data is never sold.
Without an account
You can use Ulv without joining. Then your workouts, plans, settings and photos stay on your phone and nothing about you reaches our server, apart from what any app sends to load pictures (below). Reading a blood test report needs an account.
Apple Health and Apple Watch
If you connect Apple Health, Ulv reads the types you allow (sleep, heart rate and heart rate variability, resting heart rate, blood oxygen, breathing rate, blood pressure, VO₂ max, steps, distance, exercise and stand minutes, energy, body measurements, food and water, mindful minutes, workouts from other apps, your age and sex, and lab results in Health Records where your provider supports it) to show your Body section and tailor Bjørn's advice.
On Apple Watch, Ulv records your workout as an Apple workout (heart rate, calories, time) and saves it to Apple Health. The watch and the phone talk to each other over Apple's own encrypted link.
Health data is read and shown on your devices only. It is never sent to our server, never shared, never used for advertising or marketing, and never sold. The widgets show your numbers from the same place on your phone. Change what we can read, or switch it off, in Settings → Health → Data Access & Devices.
Blood test reports
If you choose to add a lab report (a photo or PDF), and only after you say yes to it in the app, the file goes to our server and on to Anthropic (the company behind the Claude AI, in the US), which reads the results and sends them back.
We don’t keep the report: our server passes it on and forgets it. Anthropic deletes it within 30 days (longer only if their safety checks flag it as misuse) and doesn’t train its AI on it. The results you get back are kept on your phone only.
Blood tests are health data, so we only do this with your explicit consent. You can take it back any time (Body → Blood tests → Stop AI reading of reports); reports you already added stay on your phone until you delete them. Ulv shows the lab's own ranges and doesn't diagnose anything.
What we store when you join
Your account: the name you choose, your @handle, a recovery code (stored scrambled, so we can’t read it), and when you agreed to the terms. If you sign in with Apple or Google: that account’s ID and email address (with Apple you can hide your email). We never see a password.
Your training: the workouts you log (exercises, weights, reps, sets, times, your warm-up, who you trained with, the gym you named), your plans, and your settings (such as rest time, the photo set you picked, Beast Mode). Not your Health data or blood tests.
Social things you use: friends and friend requests, your rival, chat messages, reactions, and the notifications Bjørn sends you (kept in your inbox for 90 days). To skip “your friend trained” pushes while you’re training or have the app open, we keep when you last had the app open and whether you’re mid-workout.
Photos: your profile photo, and the workout and progress photos you choose to save to your account (location data is removed first).
Your device’s push address, if you turn notifications on.
Reports and blocks: who you blocked, and reports you send (with a copy of a reported message, so it can be checked).
Why we can use it (the legal basis)
To give you the app you asked for (contract): your account, training log, plans, friends, chat, leaderboards and photos.
Because you said yes (consent): reading blood test reports with AI, push notifications, Apple Health, the camera and your photos. Say no or take it back any time, and the rest of the app keeps working.
To keep Ulv safe and running (legitimate interests): rate limits against abuse, handling reports and blocks, filtering slurs and threats, and encrypted backups. You can object by emailing us.
When the law requires it (legal obligation), for example answering a valid request from an authority.
Who sees what
Anyone using Ulv: your name, @handle, profile photo, when you joined, and your totals on the “everyone” leaderboards (kilos lifted, workouts, streak, records, best lifts).
Your friends: also your workouts in the crew feed (titles, exercises, kilos), your best lifts side by side, reactions, your chats with them, and your live progress when you train together.
Only you: your workout and progress photos, your settings, your email address, your Health data and blood tests.
You choose who your friends are, and you can block anyone.
Companies that help run Ulv
Hetzner (Germany) hosts Ulv’s server and database in the EU.
Anthropic (US) reads blood test reports, only when you add one and have said yes (above).
Expo (US) and Apple deliver push notifications to your iPhone; the notification text (for example a friend’s name and the start of their message) passes through them.
Google (Google Drive) keeps encrypted copies of the server for 30 days, as backups. They are encrypted before they leave our server, so Google can’t read them.
Apple and Google, only if you choose to sign in with them.
On the website only: jsDelivr (a content network) serves some exercise pictures, so it sees your device’s internet address when they load, as any website would. The iPhone app carries its own.
Each of them works for us under a data processing agreement, only to provide their service, and nothing else. Where data goes to the US, it’s protected by the EU’s standard contractual clauses or the EU-US Data Privacy Framework.
We don’t sell or rent your data, and we don’t share it with anyone else unless the law requires it.
Kept for how long
Your account data stays until you delete your account. Inbox notifications go after 90 days. Your internet address is held for at most an hour, to stop abuse (rate limits). Blood test reports aren’t kept on our server at all. Reports about other people are kept as long as needed to deal with them and keep Ulv safe.
Delete your account and it’s removed from our server straight away, and from the backups within 30 days.
Your rights
Delete your account any time in the app: Profile → Settings & account → Delete my account. Everything on our server goes with it, and your name leaves friends’ workouts.
You can also ask us for a copy of your data (in a format you can take elsewhere), to correct it, to delete it, to limit how we use it, or object to it: email hello@mpify.com and we’ll do it within 30 days.
Take back any consent in the app or your iPhone’s Settings (notifications, Health, camera, photos). That doesn’t undo what was done before.
You can complain to Malta’s data protection authority (the Information and Data Protection Commissioner, idpc.org.mt) or the one where you live.
Security
Everything travels encrypted (HTTPS). Your sign-in is kept in your phone’s keychain, and recovery codes and sign-in tokens are stored scrambled. Backups are encrypted. Chats aren’t end-to-end encrypted: our server keeps them to deliver them, and reads one only when it has been reported.
If something ever goes wrong with your data, we’ll tell the authority within 72 hours and tell you straight away if it puts you at risk.
Children
Ulv isn’t meant for children under 13, and we don’t knowingly keep data about them. If you think a child has joined, email us and we’ll delete the account.
Changes
If this policy changes in a way that matters, we’ll update the date above and tell you in the app.