Privacy Policy
Dubl is a tool that fitness coaches use to reply to their clients (an AI twin in messages) and to guide them through workouts with the coach's own AI voice (Live Training), together with a public catalog of coaches. This policy explains what data we process, why, how long we keep it and what you can ask of us.
The Dubl app is available in Serbian and English. Where we name a screen or button, we give its Serbian name from the app followed by the English name in parentheses.
Who is responsible
Empedoc AI LLC, Dover, Delaware, USA. Contact: hello@dubl.fit.
What we collect
From coaches: the identifier of the Apple or Google account they sign in with (we do not store the email address), the name and description they enter in their profile, chat histories with clients that they upload themselves (WhatsApp/Viber exports), the rules and guidelines they write, links to exercise videos, answers to questions about how they work (text or voice recording), training plans and programs, nutrition plans (with optional per-meal figures: kcal and macronutrients), and changes to today's workout with a message to the client, made with “Prilagodi današnji trening” (Adjust today's workout). This data is used for the coach's work with clients and so that the system can learn the coach's style and rules.
Team (Elite plan): the name an assistant enters when joining the team and the identifier of the Apple or Google account they sign in with; the team code, who created it, until when it is valid and when it was used. When someone enters an incorrect team code, we record the identifier of that sign-in and the time of the attempt — only to prevent code guessing (no more than 10 failed attempts in 24 hours).
Coach's voice (Live Training): voice recordings that the coach records personally in the app, with written consent (the name they signed with, and the version and time of the consent). From these recordings our voice processor (ElevenLabs) creates a digital voice model that speaks the workout sentences and the answers to clients' questions. The sentences the voice speaks come from the coach's exercise descriptions and the rules the coach has personally approved. The coach can revoke the voice at any time.
Public catalog profile (only if the coach publishes it and Dubl approves it): name, short description, specialties, city, training program and a short sample of the AI voice. This data is publicly visible in the app.
From a coach's clients and catalog members: nickname, messages the client sends to the coach, optional measurements they enter themselves (body weight, waist circumference), check-offs of completed exercises, the lifts they log themselves (weight and number of reps, one entry per exercise per day, for the day the exercise was done), the form of address (“uradio si” or “uradila si”, the masculine or feminine form of “you did”; optional, and the coach can also set it), the plan notification setting, and the course of a Live Training session: completed sets, duration, effort rating (1–10), the chosen voice mode and a post-workout note. Clients and members sign in without an email address, phone number or name — the account is tied to the device.
Photos and videos (clients with a personal coach): photos and short videos (up to 30 seconds, with sound) that a client sends to the coach in Poruke (Messages), and progress photos they add in Napredak (Progress). They may show the body, meals or exercise. Before sending, the app re-encodes the photo on the phone without EXIF data (location, device, time taken) and removes location metadata from videos. With each file we also store a thumbnail, its dimensions, duration and the time it was sent. Catalog members do not send photos or videos.
Questions during a workout: the microphone turns on only when the user taps the “Pitaj …” (Ask …) button, e.g. “Pitaj Stefana” (Ask Stefan), and records only that question (at most 15 seconds). The audio of the question is sent for speech recognition and is not stored; only the text of the question and the answer are stored, so that the coach can review what their AI voice said. Outside workouts, the microphone is used only while a client records a video for the coach (the sound is part of the video) and while a coach records a sample of their voice; the camera is used only when the user chooses “Uslikaj” (Take a photo) or “Snimi video” (Record a video).
Purchases: transaction identifiers that the App Store and Google Play send us to verify subscriptions. We do not see payment card details.
Technical data: a device identifier for sign-in; a push notification token (only if you allow notifications on your phone — notifications are delivered via the Apple Push Notification service or Google Firebase Cloud Messaging and contain a name and the beginning of a message; for a message with only a photo or video, a label such as “Slika” (Photo) or “2 slike” (2 photos), never the photo itself); request times; the number of photos and videos uploaded during the day (for the daily limit); and error logs without message content. Photos and videos you send or open are kept temporarily in the app's cache on your phone and are deleted when you sign out.
How we use data
Content a coach uploads is used exclusively to provide the service to that coach, in their own separate space. One coach's data is never used to train a model for another coach or a general model. The coach reviews and approves every suggested reply in Messages before the client sees it (on the Elite plan, an assistant from their team can do this too), and in Messages the client always sees that replies are suggested by an AI twin — on accounts with a team, also that they are read and approved by the coach or a team member.
The twin learns from the coach's replies: when the coach sends a reply in the app — an edited suggestion from the twin or a reply of their own — the client's message and the coach's reply are stored as an example in that coach's knowledge base, so that future suggestions sound more like the coach. Before an example is stored, client names, email addresses, phone numbers and @usernames in the text are replaced with a placeholder. Messages that the system recognizes as health-related or personal are not stored, nor are messages with a photo or video or replies sent by assistants. The coach can see and delete these examples in the app — Dvojnik → Naučeno (Twin → Learned) — and can turn learning off. Deleting a client's account also deletes the examples created from that client's messages.
Photos and videos: in the app, they are seen only by the client who sent them and their coach — on Elite accounts with a team, also by that coach's assistants. Progress photos are not part of the conversation: only the client and the coach (and the coach's team) see them. AI does not process photos or videos: the twin does not see them and does not suggest a reply to such a message — the coach replies personally. They are stored in private Google Cloud Storage (USA, us-central1 region), without public links; the app downloads them only for a signed-in user.
Logged lifts are seen by the client (next to the exercise, as “Prošli put” (Last time)) and by the coach (and the coach's team) in the client's file. The form of address is used so that the AI voice, the twin's suggestions and the answers to “Pitaj” (Ask) address the client correctly — which is why it is also passed to AI processing (Vertex AI) as part of the context. The assistant's name is seen by the account owner and the team; clients see only the coach's name (and that the account has a team, not who is on it). Assistants have access to the account's clients only while the account has the Elite plan: when it no longer does (the subscription expired or the plan was changed), their access is paused — they see nothing and receive no notifications — until Elite is active again or the owner removes them.
Live Training: the voice in workouts is synthesized (AI), and this is clearly labeled in the app before the first workout and during every workout; in the first workout the voice also says so out loud (and in the next one, if you stop the first workout before completing the first exercise). The workout script consists of the coach's words and neutral system phrases (counting, rest). Answers to questions are generated automatically, within the rules the coach has approved; pain, injury and health topics are not interpreted — the workout stops and a message goes to the coach. The coach can later see the transcripts of their workouts. The minutes of members' completed workouts are used to calculate the coaches' revenue share.
We use Google Cloud Vertex AI to generate suggestions and for speech recognition. Data is processed on Google Cloud infrastructure and is not used to train Google's models, in accordance with Google Cloud's terms for business customers.
Who we share data with
We do not share data with anyone for marketing purposes. We do not sell data and do not show ads. We use the following processors, only to the extent necessary to provide the service:
• Google Cloud (hosting, database, storage of photos, videos and other files, AI and speech recognition);
• ElevenLabs (voice synthesis: the coach's voice model and the text of the sentences being spoken);
• Apple and Google (sign-in and subscription billing).
Some processing takes place in the USA, under standard contractual clauses and with the processors' obligation not to use the data for their own purposes.
How long we keep data
Coach data: for as long as the account exists. When a paid subscription expires or is cancelled, the account moves to the free Start plan and, like every Start account, is kept until the coach deletes it.
Coach's voice: until the coach revokes it or deletes the account. Revoking deletes the voice model at the processor, the recordings and all synthesized audio; Live Training is then turned off for all of the coach's clients.
Client and member data: for as long as the relationship with the coach lasts, or until the user deletes the account. Audio of questions asked during workouts is not stored.
Photos and videos from messages: they remain in the conversation until the client deletes their account or the coach deletes theirs. An attachment that a client adds but does not send is deleted after 24 hours (immediately, if they remove it before sending).
Progress photos: until the client deletes them or deletes the account. The client can delete a photo themselves, immediately and permanently: Napredak → slika → Obriši (Progress → photo → Delete).
Logged lifts and form of address: like other client data, until the account is deleted.
Failed attempts to join a team: kept only to enforce the 24-hour limit; records older than two days are deleted at the next failed attempt anywhere in the system.
Team assistant: while they are on the team. When they leave the team or the owner removes them, their account (name and sign-in) is deleted immediately; only a record that the team code was used (with the assistant's sign-in identifier) remains, for as long as the owner's account exists.
Deleting your account
Every user can delete their account in the app: Nalog → Obriši nalog (Account → Delete account). For clients and members, this deletes messages (including photos and videos), progress photos, measurements, logged lifts, the form of address, plans and workouts — and the files in storage; for catalog members, for every coach they have trained with. For a coach, the account, the voice (including at the processor), the public profile and the access of clients and assistants are deactivated immediately, and the photos, videos and logged lifts of their clients are deleted immediately; other data is deleted within 30 days. A team assistant has Nalog → Napusti tim (Account → Leave team): only the assistant's own account is deleted, while the owner's account and the clients remain. A subscription purchased in the App Store or Google Play must also be cancelled in the store's settings. You can also request deletion without the app — instructions: dubl.fit/en/delete-account.html.
Your rights
Access, rectification, erasure, data portability, objection to processing and withdrawal of consent — write to hello@dubl.fit; we reply within 30 days. If you are in the EU, you also have the right to lodge a complaint with a supervisory authority.
Children
The app is not intended for people under 16. Coaches are responsible for inviting their clients accordingly.
Health-related content
Messages between a coach and a client may contain information about the body and health, and photos and videos may show the body. We process them only within the coach–client relationship that both parties have entered into voluntarily; AI does not process photos or videos. Dubl is not a medical device and does not give medical advice; the system recognizes health-sensitive topics and always forwards them to the coach for personal assessment. In Live Training, if pain or injury is mentioned, the voice stops the workout.
Changes
We notify users of material changes in the app. The effective date is shown at the top.
This policy is published in Serbian and English; if the versions differ, the Serbian version prevails.