Last updated 2 June 2026
Aretia is built to work offline, with no account. What you put into the app stays on your device. Information only leaves it in four narrow cases that you choose: sending feedback, opting in to encrypted backup, joining the waitlist, or applying as a tester. The detail is below.
The app keeps your workouts, meals, bodyweight log, daily notes, training profile, your name, and settings in a private database on your device. The food lookup also runs on-device, from a database bundled inside the app, so a food search makes no network request.
In normal use this information is not sent to us and is held on no server we run. If you uninstall the app, on-device data is removed with it, so keep a device backup of anything you want to hold onto.
Information leaves your device only in the cases below. Each is something you choose to do.
a. In-app feedback. If you use Send feedback in Settings, the optional name and the message you write go to a Google Apps Script that records them in a private Google Sheet in our Google Workspace and emails us a copy. We use this only to read and act on your feedback, and we do not ask for your email here.
b. Encrypted cloud backup (currently the in-browser beta only). If you opt in to the recovery-code backup, the app encrypts a copy of your data on your device and uploads it to backup.aretia.app, a Cloudflare Worker with key-value storage. It is designed so we cannot read it: a recovery code you control derives the encryption key (PBKDF2-HMAC-SHA-256), your data is encrypted with AES-GCM-256 before it leaves your device, and the server stores ciphertext only. You can delete it any time with Revoke in Settings. The installed app keeps your data on-device and does not currently use cloud backup.
c. Waitlist. If you enter your email to join the waitlist, we store it in a private Google Sheet so we can tell you when Aretia is ready. That is the only use.
d. Tester application. If you apply to be a tester, the name, email, and two short answers you give are stored in a private Google Sheet and emailed to us, so we can review applications and contact selected testers.
The websites are static and hosted on Cloudflare. As with any website, the host processes standard request data such as IP address and browser type to serve pages and keep the service secure. We set no analytics, tracking, or advertising cookies. The demo runs the real app in your browser, and what you enter stays in your browser's local storage on your device.
When the app is distributed through the Apple App Store or Google Play, those stores process download, installation, and crash or usage statistics under their own policies, which we do not control.
Aretia uses no AI. Every figure it shows comes from a deterministic engine that cites the published study behind it, and nothing you log is sent to any model provider. We run no third-party analytics, no advertising, and no tracking pixels. We do not sell, rent, or trade personal information, and we never use it for advertising or profiling.
We keep the list short and functional.
Bodyweight, measurements, and nutrition and training information are health information, treated as sensitive information under Australian privacy law and as special-category data under the GDPR. It is held on your device. It leaves your device only if you opt in to the encrypted backup, where it is encrypted before upload and stored only as ciphertext we cannot read. We use it for no purpose beyond the features you use.
On-device data is protected by your device's operating-system app sandbox and any passcode or encryption you have enabled. The cloud backup is encrypted on your device, so the server stores ciphertext only. Records we receive sit in access-controlled Google Workspace storage limited to our team. No method is perfectly secure, so we collect as little as we can and keep what we receive tightly scoped.
You can access or correct the information we hold, delete it (uninstall the app for on-device data, use Revoke for the backup, or email us to remove waitlist, application, or feedback records), and withdraw consent for any optional feature. To do any of these, email service@flow-through.com.au.
If you are in the European Economic Area or the United Kingdom, you also have rights under the GDPR and UK GDPR, including access, rectification, erasure, restriction, portability, and objection. Our legal basis for the optional features is your consent, and for hosting and security logging it is our legitimate interest in delivering and protecting the service. Because our providers are in Australia and the United States, your information may be processed in those countries under those providers' standard contractual protections. You may complain to your local supervisory authority. In Australia, that is the Office of the Australian Information Commissioner (oaic.gov.au).
Aretia is intended for adults managing their own training and nutrition and is not directed to anyone under 18. We do not knowingly collect personal information from a person under 18. If you believe a minor has provided information to us, contact us and we will delete it.
If this policy changes, we will update it here and move the date at the top. For anything significant, we will give clear notice on the site or in the app.
Aretia is made by Flow Through Logic Pty Ltd (ABN 15 697 017 842, ACN 697 017 842) in Australia, and we handle the little information we hold in keeping with Australian privacy law. For any privacy question, or to have information removed, write to service@flow-through.com.au.