Paul & Michele — Privacy policy

Effective date: 8 October 2026

Publisher: Leutrim

Privacy/support contact: dev2@leutrim.ch

App: Paul Michele for Android and iOS, ch.leutrim.PaulMichele.

1. Our approach

Paul Michele is an offline workout and meal planner. The installed app has no registration, publisher-operated account, advertising, analytics SDK, tracking service or publisher-operated remote database. Its normal operation makes no network requests. We do not automatically receive, upload, sell, rent or disclose your profiles, workout records, meals, measurements or walking records.

The information you enter is kept on your device to make the app work. It leaves the app only when you choose an export/share destination or deliberately include it in a message or feedback. Store services and TestFlight beta testing are described separately below.

2. Information processed on your device

Depending on what you choose to use, the app stores profile names; optional age, gender, height, weight and activity level; goals and calorie/protein targets; weight history; exercise plans, loads, repetitions, times and completion history; meal plans, recipes, nutrition values and notes; water intake; walking/step records; reminders; and language, theme, sound and other preferences. Derived progress, estimates and milestones are calculated locally.

These records are used to display your plans, remember your choices, calculate estimates and show your history. Local profiles are not online accounts and do not automatically synchronize between devices. You can use a nickname and leave optional personal measurements blank. Different profiles share the same installed app; anyone with access to the unlocked app may be able to switch between them.

3. Optional permissions

Notifications: local reminders you enable. Reminder text may appear on your lock screen according to your device settings. Disable reminders or hide notification previews if necessary.
Motion/physical activity: an optional device step counter while the app is open and active, on supported hardware. Step records and supporting counter metadata stay on the device. Permission can be withdrawn in system settings.
Chosen files: imports, exports and sharing use system pickers/share sheets. The app accesses the file or destination you select; it does not scan your general file library.

The app does not request GPS location, camera, microphone or contacts access, and does not connect to Apple Health/HealthKit, Health Connect or Samsung Health. It has no advertising identifier or fingerprinting integration.

There is no automatic sharing of your personal records. If you export or share a file, the destination app, person or storage provider receives the copy you selected and handles it under its own privacy policy.

Profile JSON exports can contain names, sensitive measurements, recipes and history. Plans-only exports omit personal history. Progress images omit names, dates and numbers, but the chart shapes can still reveal personal trends. Preview exports before sharing and obtain permission before sharing another person's records. Exported JSON files are not password-encrypted by this app.

Temporary export/share files may remain in the app's local cache until replaced, cleared during a full reset, or removed by the operating system. A recipient's saved copy is not erased by resetting or uninstalling Paul Michele.

5. Local retention, backups and deletion

Your saved records remain on the device until you edit, delete or reset them, clear the app's storage, or remove the app. Settings offers a reset of the active profile's personal records while keeping its identity/preferences and other profiles. To erase every profile and app settings, explicitly select “Delete all profiles too”, which is unchecked by default. You can also delete a profile when another profile remains.

On Android, system cloud backup and automatic device-to-device transfer of app data are disabled. On iOS, saved app records and native reminder/step metadata are marked for exclusion from automatic backup. There is no publisher cloud backup or recovery service. Device/OS behavior and backups you create independently are outside our control. On iOS, offloading an app can preserve its data; use Delete App or the full in-app reset when you want removal.

Delete any exported copies separately from the destination, including cloud drives, emails and their trash. We have no remote access to erase or restore the records kept on your device.

6. Stores, operating systems and TestFlight

Apple, Google, your operating system and any export destination provide separate services under their own terms and privacy policies. They may process distribution, security, diagnostic or account information independently of the offline app. This policy does not promise that those services retain no information.

TestFlight beta builds: Apple automatically collects beta crash/usage information and shares it with the developer. Email-invited testers' identity/contact and invitation information can also be visible to the developer. Feedback you submit can include screenshots, comments and device details. This is a TestFlight service, not an analytics SDK added to Paul Michele. We use information made available through beta testing to administer the test and investigate app issues, not for advertising, and do not forward it to other third parties. We keep no separate copy of your local profile database unless you deliberately supply one. Copies we deliberately retain for an issue are removed when no longer needed for the test/support purpose, subject to any applicable legal obligation. Apple's own retention is controlled by Apple.

See Apple privacy, TestFlight & Privacy and Google privacy.

7. Contact, choices and rights

If you email support, we receive the sender address, message and attachments you choose to send. The mailbox service processes that correspondence separately from the offline app. We use it to respond and resolve your request. We delete copies under our control when no longer necessary for that purpose, except where law requires retention. Do not send health records or a full profile export unless you deliberately intend to disclose them.

You can view, correct, export and delete local records in the app and revoke permissions in system settings. Contact dev2@leutrim.ch about publisher-held support or beta information and applicable access, correction or deletion rights. We cannot recover deleted local records or delete copies controlled by Apple, Google or recipients; contact the relevant provider for those copies. Any mandatory rights, including the right to contact a competent data-protection authority, remain available.

8. Audience, security and changes

The app is intended for adults and is a general wellness tool. Local storage uses the operating system's app sandbox and protection mechanisms; there is no separate app password or guarantee against access through an unlocked or compromised device. Keep the device protected and manage shared profiles and exported files carefully.

An updated policy will describe any future change in data handling. New data practices requiring permission will not be authorized merely by publishing an updated policy. This statement covers the installed app; requests to a hosted policy/support website are covered by that site's separately verified hosting notice.