Privacy Policy

Last updated: 1 November 2026

This policy says what Perdura collects, why, who else handles it, how long we keep it, and what you can do about it. Because Perdura stores health information, it also has a separate Consumer Health Data Policy.

Who is responsible

Perdura (perdura.fit) is run by Eduardo Ventura, an individual domiciled in El Salvador. He decides why and how your personal data is used, which makes him the "responsable del tratamiento" under El Salvador's Ley para la Protección de Datos Personales and the "controller" under laws such as the GDPR. Write to support@perdura.fit for anything in this policy. Letters go to his mailing address, a mail-forwarding address in the United States that is not his domicile: Eduardo Ventura Ventura, SN-214955, 243 Quigley Blvd, Unit E, Global Shopaholics LLC, New Castle, Delaware 19720, United States.

What we collect

  • Account data from Google sign-in: your email address, name, and profile picture. We never see your Google password.
  • If you sign in with an email and a password instead: your email address, and your password stored only as a scrambled one-way hash (scrypt) that cannot be turned back into the password. We never store, log or email the password itself. To prove the address is yours we email you one-time links (to confirm it, or to set a new password); a sign-up you never confirm is removed within two days.
  • If you ask for the email course (Out of skinny fat), with or without an account: your email address, the language of the page, which version of the consent box you ticked, and how many of its five emails have gone. Nothing is sent until you confirm the address from the first email. Every course email has a link that stops it at once, and stopping, finishing the fifth email or deleting your account deletes the address; a request you never confirm is deleted within two days. We use it for the course only, never for anything else.
  • Fitness data you enter: workouts, body weight, body scans, measurements (including your height, if you add it, which only sizes the body figure on your screen), nutrition logs (the foods you log, meal by meal, any foods and meals you save, the days you mark finished, any notes you write about your food and the water you log), and hours slept, minutes walked and steps if you enter them, plus your program configuration (phases, routines, targets). Searching everyday foods happens on your device, against a food database we ship ourselves (USDA FoodData Central, public domain). When you search for a brand or packaged product, the words you type go to our server, which looks them up in Open Food Facts and USDA FoodData Central. They receive the search words only, never who you are or what you log, and we do not keep searches with your account. When you scan a product's barcode, our server looks the number up in Open Food Facts, an open food database: it receives the barcode only, never who you are or what you log.
  • Data you import from your watch, only if you choose to and only after you agree to it separately on Rest › Watch: from a Samsung Health export, each day's steps, active calories, heart rate (average, lowest and highest) and sleep, and the blood pressure readings with their time and pulse. Your device reads the export and sends us only those daily totals and readings, never the file itself or the minute-by-minute records in it.
  • Data from a service you connect, only if you choose to and only after you agree to it separately on Connect: from Polar (your Polar Flow account), your walks, rides and other activities (their day, start time, length and distance), each day's steps and each night's sleep. Our server holds the connection's access key, encrypted, and reads these from Polar when you sync; we keep only those records, each with Polar named as its source, never your Polar password. Disconnecting removes our access at Polar and deletes the key, and you choose whether to keep or remove what was brought in.
  • Your updates: which announcements and notifications you have read, and which kinds of notification you turned off. Notifications are made from what Perdura already holds (a Community follow request or invitation, reactions or comments on something you shared, new messages from a partner, which name the partner and how many but never their words, a connection that needs you) and are shown only to you, inside Perdura; nothing is sent by email or to your phone.
  • Community, if you join it: the Community name, handle, bio and picture you choose; who you follow, who follows you, who you blocked and who may ask to follow you; what you post and share (words, photos, workouts, milestones, routines, playlist links), your comments, likes and reactions; the groups and challenges you join; your messages with partners; and the reports you send. See "Community" below.
  • Setup answers: what you type during setup (your goal, sex, age, height, weight, body fat, training days and routine) is kept until setup finishes or you delete your account, so you can pick up where you left off. If you start training before answering the health questions, setup finishes when you answer them, so your plan can be completed without typing these again. The plan it builds does not keep your sex or age, only values worked out from them (the lowest calories and body fat Perdura plans for you).
  • Health questions: your answers to the health questions during setup, and to the questions before you start lifting, are used on your device only, to decide whether Perdura sets calorie targets for you and whether it leaves out all-out sets. They are never sent to us or stored. Your plan records only those two outcomes, never which answer led to them.
  • An invitation, if we send you one: your email address, so that you can open an account. It is deleted when you delete your account, and we remove an invitation you do not use when you ask.
  • What you agreed to: when you agree to our terms and to the use of your health information, we record what you agreed to and when, and, for your health information, the full name you typed to sign that consent.
  • Profile text you choose to write: an optional display name and an optional one-line note about why you are doing this. Both are shown only to you.
  • A profile photo, if you add one: your device crops it to a small square and removes its details (such as where it was taken) before it is uploaded. It is stored in our database, shown only to you next to your name, and deleted when you remove it or delete your account.
  • Photos you add to your routines, if you add any: kept the same way as a profile photo. Your device crops each one to a small square and removes its details before it is uploaded; it is stored in our database, shown only to you on that routine (anyone you share your plan with sees the routine's picture instead), and deleted when you remove it or delete your account.
  • Photos you add to your recipes and planned meals, if you add any (Premium): kept the same way. Your device crops each one and removes its details (such as where it was taken) before it is uploaded; it is stored in our database, shown only to you (anyone you share your plan with sees no photo, or the starter recipe's), never used to work out what or how much you ate, and deleted when you remove it, when nothing you keep uses it any more, or when you delete your account.
  • Photos and short videos you add to an exercise that has no video, if you add any: a photo is kept the same way. Your device crops each one and removes its details before it is uploaded; it is stored in our database, shown only to you on that exercise and in your lists (anyone you share your plan with sees no photo), and deleted when you remove it or delete your account. A video (up to a minute and 60 MB) is too large for our database: your device removes where it was filmed, then sends it to a private file store at Vercel, our host, where it is kept in a folder named by your account number, never your email. Only you can play it, through a link that works for an hour; it is deleted when you replace or remove it, or when you delete your account. One small still from it, shown in the exercise's circle, is kept in our database with it and goes with it.
  • API keys, if you make one (Premium, Settings › Developer): the name you give it, a fingerprint of it (we never keep the key itself) and when it was made, last used and revoked.
  • Subscription data, if you buy Premium: your plan, its status, when it renews and whether it will cancel. Our payment provider, Polar, sends us this. We never receive your card number.
  • Feedback, if you send it (the Feedback tab or Send feedback): what you wrote and its kind (an improvement, a problem or other), with the page you were on, the app's version and your browser. Nothing you logged is attached. Only Perdura reads it, to improve the service, and it is deleted with your account.
  • Technical data: standard server logs kept by our host (they can include your IP address), and cookieless, aggregate usage analytics (Vercel Web Analytics) that count page views. We also count, per day, how often parts of Perdura are used (for example, how many shorter workouts were started), in our own database. These counts hold no account, email, address, health value or anything you typed, and are kept 13 months. Page addresses in our host's logs can include the date of a workout or the name you gave a routine (for example /training/workouts/2026-10-17/Upper).

Why we use it, and on what legal basis

Under El Salvador's law, your health information rests on your consent in writing, and the rest on your consent to these terms and on what the service you asked for needs to work. If you are in the EU or UK, the GDPR asks us to name the legal basis for each use, as below.

  • Running your account and your plan (sign-in, storing and showing your data, charts and targets, export, deletion): we need it to provide the service you asked for (contract).
  • Your health information (body weight, measurements, scans, food and the foods you log, sleep, walking and steps, workouts, setup stats): your explicit consent, given before setup and separate from the terms. You can withdraw it at any time (see "Your rights").
  • Data you import from your watch (steps, active calories, heart rate, sleep and blood pressure): a second explicit consent, asked only when you first import and separate from the first. You can withdraw it on Rest › Watch, which deletes the imported data at once.
  • Telling you about your account, these terms, a price change or a security problem: we use your email address for that, and only for that (contract, and legal obligation where a law requires the notice). We send no marketing.
  • Premium subscriptions: contract. We share your email and account number with Polar so it can charge you and link the purchase to your account.
  • Security, fixing errors and counting page views and feature use: our legitimate interest in keeping the service safe and working and learning which parts help. The analytics are cookieless and aggregate.
  • Keeping the records the law requires, such as proof of what you agreed to while your account exists: legal obligation and legitimate interest.

Perdura works out calorie and protein targets with fixed rules from the numbers you entered. It does not profile you for advertising, and no decision with legal effect is made about you automatically.

Health information

Under El Salvador's law, information about your body, your health and your habits is sensitive data. You do not have to give it: you can refuse, and still read Perdura's public guides, but your plan cannot work without it. We ask for it in writing, in a box of its own that you sign by typing your full name, before you start. If what you enter is wrong, the targets and charts built from it are wrong too; you can correct it at any time.

Most of what you log (body weight, body composition, measurements, food, sleep, walking, steps and workouts) is health information, and so is what you import from your watch (heart rate, blood pressure, active calories, steps and sleep). We store it only after you give your explicit consent, and use it only to run your plan and show it to you and to the people you choose. Perdura shows your watch's readings as they are: it does not judge or interpret them, and they never change your calorie targets. We do not sell it, use it for advertising, or send it to our payment provider. Read the Consumer Health Data Policy for the details.

Who else handles your data

These companies process data for us, under their own terms and only to provide their service:

  • Neon (Neon, Inc., United States, AWS US East): our database, where everything you enter is stored.
  • Vercel (Vercel Inc., United States): hosting, server logs, page-view analytics and the private store for exercise videos you add.
  • Cloudflare (Cloudflare, Inc., United States): keeps an encrypted copy of the daily backup, which it cannot read; each copy is deleted after 6 days.
  • Google (Google LLC, United States): sign-in only. Google learns that you signed in to Perdura.
  • Resend (Resend, Inc., United States): sends the account emails, only if you sign in with an email and a password, and the email course if you ask for it. It receives your email address and the message (with its one-time link, or the course's lesson), never your password or anything you log.
  • Polar (Polar Software, Inc., United States): takes payment for Premium as our seller of record. See the next section.
  • Polar Electro (Polar Electro Oy, Finland; not the payments company above): only if you connect your Polar account on Connect. Our server reads your activities, steps and sleep from it; Polar Electro learns that your Polar account is connected to Perdura, through an identifier that is not your email.
  • Anthropic (Anthropic PBC, United States): writes Ask Perdura's AI answers. Only when Perdura's own answers do not cover a question and you choose to ask the AI, the words of that question and the name of the page you are on go to Anthropic. If you have also agreed to it, so do the parts of your plan the question needs: your targets for the day, your phase, your training days and your routines' names, and this week's counts; never your email, body measurements, food log or anything else. When you ask Ask Perdura to log or copy food or to build a routine, the words of your request (for food, the foods and amounts you name), today's date and the screen's language are sent to Anthropic, which turns them into an instruction. Your saved diary, routines and other account data are not sent. Perdura carries out the instruction itself and shows you the result before anything is saved. Anthropic does not use them to train its models. Leave health details out of a question; you can turn AI answers, or the use of your plan, off in Settings › Preferences.

How to reach each of them about your data, as each publishes it (checked on 31 October 2026):

Better Stack checks from outside that the site is up; it receives no data about you.

We do not sell personal data, we do not share it for advertising, and we show no ads. We disclose data if a law or a valid legal order requires it, or to protect people from serious harm. If the business ever changes hands, we will tell you first and this policy will keep applying to your data.

Payments and Polar

When you buy Premium, Polar sells it to you as the seller of record. Polar collects your payment card, billing details and, where needed, a tax number at its checkout, sends you the receipt, and collects and pays the sales tax or VAT that applies. For that checkout data Polar has its own responsibilities under its privacy policy and checkout buyer terms. We send Polar your email address and your Perdura account number; Polar sends us back your subscription status, plan, renewal date and whether it will cancel. Polar gets none of your health information. Invoices and payment records stay with Polar, which keeps them as tax and accounting law require. We keep no copy of your card details.

Sharing your plan

Your data is visible to you and to the people you grant read-only access to from Data & privacy (in the account menu). While they have access they can also download a copy. They see your logged data and your plan (goal, phases, routines and targets), and they can see when a plan has no calorie or macro targets, which can happen when a health answer led Perdura not to set them. They do not see the limits Perdura worked out from your stats. Revoking access stops further access at once, but cannot take back a copy already downloaded. If you make an API key, any script or tool you give it to can read your logged data (never change it) until you revoke the key, which works at once; that tool is yours, not ours. The person who runs Perdura can access the database when needed to run and support the service, and does so only for that.

Community

Community is the part of Perdura where members follow each other, share training and keep each other going. It is off until you join it, and joining asks for your consent on its own, apart from what everyone agrees to. Nothing you log appears in Community by itself.

  • Your Community identity. You choose a handle, a name and an optional one-line bio. Your account name and email are never shown there. A picture shows beside your name only if you choose one: your Perdura picture, or one you upload only for Community; otherwise your initials. Your profile is private until you change it: people ask to follow you and you approve each one. You choose who may ask (everyone, only people you follow, or nobody) and whether people can find you in Discover.
  • What you share, one item at a time. You can post words, photos, a workout or a milestone, for your followers or for one of your groups. Photos are made smaller on your device before they are sent, which removes details such as where they were taken. A workout card shows the routine's name, the date, each exercise with how many sets you did, how many new bests you set and, only if you tick it, the total weight lifted. It never shows the weight or reps of a set, how hard it felt, notes, your body weight or measurements, food, sleep or health answers. A shared routine shows each exercise with its sets, reps and rest, never your weights, and any member can see it and save a copy. A playlist is a title and a link to Spotify, Apple Music or YouTube Music; Perdura does not contact those services.
  • Who sees it. Your followers see what you post for them; members of a group see only what is posted to that group, never what you post for your followers, and joining a group says so. People who can see a post can see its comments and like them. Reactions show as counts. Groups are private and by invitation. Joining a challenge records that you joined and when; your progress in it is worked out on your device and never stored. Someone you blocked, or who blocked you, sees nothing of yours and you see nothing of theirs.
  • Messages with partners. A partner is a member you follow who follows you back. If you both turn Messages on, which asks you to confirm you are 18 or older, you can send each other text messages. We store them on our servers so they can be delivered and so either of you can read them later. They are encrypted in transit and at rest, but they are not end-to-end encrypted. We do not read your messages or use them for analytics, advertising or AI, and we do not share them, except: if a member reports messages, we read the messages they chose to include in the report (at most five), and when the law requires it. Deleting one of your messages removes its words for both of you. You can mute a conversation, turn off incoming messages, or turn Messages off.
  • Reports. If you report a member, a post, a comment, messages, a routine, a playlist or a group, Perdura reads the report to decide what to do. The member you report is not told who reported them. A post or comment two members report is hidden until we review it, and a member whose messages two members report cannot send messages until we review them; a report counts toward this only when the account that sent it is at least 7 days old. For each decision we keep a record of who at Perdura decided, what and when, without any words from the post, comment, messages or report, for one year. If a report shows content that may be illegal, such as sexual images of a minor, we keep the report and what it points at for as long as the law requires (in the United States, one year after we report it to the National Center for Missing & Exploited Children) and report it to the authorities.
  • Removing what you shared. When you remove a post or a comment, its words, photos and workout card are deleted at once, with its reactions and the comments on it; only the fact that something was removed, and when, stays with your profile. When we remove a post or a comment after a report, we keep its words and how many photos it had (never the photos) with the report, for 180 days after we close the report. Your browser keeps a Community photo for at most 10 minutes before asking us again, so a block or a removal reaches it soon.
  • Leaving and your copy. You can download everything Community keeps about you, your messages, post photos and Community picture included, as one ZIP file from Data & privacy ("Download my Community data"). Removed posts and comments appear in it with when they went, without their words. Leaving Community deletes your Community profile and, with it, your follows, blocks, posts and their photos, comments, likes, reactions, shared routines and playlists, the groups you own and every conversation you were in (for both of you), and withdraws your consent. Reports you sent, or that were sent about you, are kept while we review them and for 180 days after we close them, with copies of any reported messages, or until either account is deleted if that comes first. Deleting your account deletes all of it.

The legal basis is your consent, given when you join Community and again when you turn Messages on, which you can withdraw at any time by turning Messages off or leaving Community.

Where it is stored, and sending it outside El Salvador

Data is stored in the United States (our database runs in AWS US East), and every provider above is in the United States, so your data is transferred there from El Salvador or wherever you live. When you agree to the terms and to the use of your health information, you also agree to that transfer; we ask for it in the same boxes, before you start. Each provider handles your data only to provide its service to us, under its terms and data processing terms, which for transfers from the EU and UK rely on safeguards such as the European Commission's standard contractual clauses. The daily backup copy is kept in El Salvador, on the operator's computer, whose disk is encrypted and which only he can open, and, encrypted with a key only we hold, in the United States with Cloudflare.

How long we keep it

  • Your account and everything you logged: until you delete your account. Deletion removes it from our database at once and cannot be undone.
  • Backups: our database provider keeps a short history so a mistake can be undone (today 7 days), and once a day we keep a copy of the database on the operator's computer and an encrypted copy with Cloudflare (see above), each copy deleted within 7 days. A deleted account can remain in them for up to 7 days and then is gone.
  • Server logs: kept by our host for the short period its plan allows. We keep health data out of them and scrub email addresses from them.
  • Payment records: kept by Polar for as long as tax and accounting law require. Deleting your account also deletes your customer record at Polar, which cancels any subscription at once and removes your personal details there.
  • Proof of what you agreed to: deleted with your account.
  • API key records, revoked or not: deleted with your account.
  • Community, messages included: while you are in Community; leaving deletes it. A post or comment you remove loses its words and photos at once. Reports, with copies of reported messages and what we removed after one: while we review them and 180 days after we close them, or until either account is deleted if that comes first, unless the law requires us to keep them longer (see "Reports" above). Records of moderation decisions, without any words: one year.

You can export your logged data as JSON at any time from Data & privacy, and delete your account and all associated data yourself from Settings → Account. You can also email support@perdura.fit from your account address.

Your rights

Under El Salvador's law you have the rights to access, correct, delete, object to, restrict and take a copy of your data, and to be forgotten, free of charge. Depending on where else you live (for example under the GDPR, UK GDPR, California or Washington law) you may have the same or similar rights. In practice, you can:

  • know what we hold about you and get a copy: Data & privacy, Download backup, gives you what you logged (weights, measurements, scans, workouts, nutrition, rest, watch data); for the rest (your plan and settings, profile, subscription record), write to us and we send it;
  • correct it (edit it in the app, or write to us);
  • delete it (Settings → Account, Delete account);
  • take it with you in a common format (JSON export);
  • withdraw your consent to health-data processing, which for Perdura means deleting your account, because it cannot work without that data; your separate consent for watch data can be withdrawn on its own on Rest › Watch, which deletes that data;
  • object to processing that rests on our legitimate interest, or ask us to restrict it;
  • appeal if we refuse a request, and complain to El Salvador's Agencia de Ciberseguridad del Estado, to the data protection authority where you live or, in Washington, to the attorney general.

Write to support@perdura.fit from your account address. We answer within 20 business days. If a request needs longer we tell you why within that time, and never take more than 20 business days more. We do not charge for this and we do not treat you differently for using your rights. We do not sell or share personal information for advertising.

Security and breaches

Connections are encrypted, every request is checked so that people reach only their own data, testing uses a separate database with no real data, and secrets are kept out of the code. No system is perfectly secure. If a security incident affects your personal data, we tell you without delay, with what happened, what data was involved and what to do. Within 72 hours of finding out we notify El Salvador's Agencia de Ciberseguridad del Estado and the Fiscalía General de la República, as the law there requires, and any other authority the law of your country requires. We keep a record of every incident.

Cookies and storage on your device

We use only the cookies needed to sign you in and keep you signed in (a session cookie plus short-lived security cookies set during Google sign-in). Our usage analytics are cookieless. No third-party advertising or tracking cookies. Changes you make in Perdura are also kept in your browser's storage until they reach your account, so a closed tab or a lost connection does not lose them; signing out or deleting your account removes them from the device. So the gym screen opens without signal, your browser also keeps the last copy of Today, Training and the gym screen as you last opened them, for up to 14 days. It is used only when there is no connection, never kept while you view someone else's shared data, and removed when you sign out or delete your account.

Age

Perdura is for adults, 18 and over. If we learn that an account belongs to someone younger, we delete it.

Changes

When we change this policy in a way that matters, we ask you to read and agree again before you continue, and the date at the top changes. Small clarifications only change the date.

Contact

support@perdura.fit · Eduardo Ventura, El Salvador

Mailing address: Eduardo Ventura Ventura, SN-214955, 243 Quigley Blvd, Unit E, Global Shopaholics LLC, New Castle, Delaware 19720, United States

Inside Perdura, “Contact us” can open a chat with us on WhatsApp. It only opens WhatsApp: Perdura sends nothing about you. What you write there is handled by WhatsApp (Meta) under its own terms, and we use it only to reply to you.