Privacy policy

Last updated 16 October 2026

Who is responsible for your data

azīma is run by Sarah Koundakjian, trading as azīma, who decides why and how your data is used (the "controller"). Questions or requests about your data: hello@azimarooted.com.

What azīma collects

Only what you choose to enter or connect:

• Your account email and first name, your goal, training days per week, and kg or lb.
• Training: sessions, sets, the weights and reps you lift, effort and notes, plus your bodyweight if you log it.
• Food you log, with portions, calories and macros.
• Daily check-ins: mood, energy, stress, motivation, sleep rating, muscle recovery, hours of sleep and a note.
• Gut check-ins: bloating, pain, bowel movements, the meals they followed and suspected triggers.
• Menstrual cycle tracking, only if you turn it on.
• Sleep, recovery, heart rate variability and resting heart rate from a device you connect, only if you connect one.

azīma does not ask for medical history.

Connecting a device (WHOOP, Oura)

Connecting a device is optional and off until you do it. You approve access on the device company's own page, and azīma never sees your password.

• What azīma asks for: your sleep (with stages), recovery score, heart rate variability and resting heart rate. If you also switch on heart-rate sharing, your workouts and their heart rate.
• What azīma does not ask for: your profile, email, body measurements, location or raw heart-rate readings every second. Workout heart rate is kept as low and high values for each stretch of about three minutes.
• Who sees it: you, and your coach. Your coach sees sleep and recovery next to your check-in. Workout heart rate is shown only to your coach, only if you turn on that separate option, and not on your own screens.
• Your device company keeps its own copy under its own terms and privacy policy. azīma does not control that copy.

Why azīma uses your data, and the legal basis

azīma uses your data to run the app and let your coach support you. Health information (check-ins, gut and cycle data, device data) is used only on your explicit consent, which is the legal basis under the GDPR (Article 6(1)(a) and Article 9(2)(a)).

You give consent in separate, optional steps: the core use of azīma, AI features, device connection, and sharing workout heart rate with your coach. You can say no to the optional ones and still use azīma. Withdrawing the core consent means deleting your account, because azīma cannot work without storing your data.

Who sees it and who processes it

Your coach can see what you record, to follow your progress. No other client can see your data. These companies handle data for azīma:

• Supabase stores the database, in Frankfurt, Germany (EU). Backups are kept for about 7 days after deletion.
• Cloudflare serves the app files to your phone. It sees the technical request details any web host sees, such as your IP address, and not your records.
• Resend sends the emails azīma needs to send, such as your invitation and password reset links. It receives your email address and the content of those emails, and handles them in Ireland (EU). It does not receive your health or training data.
• Anthropic writes your daily readiness note and estimates meals from words or photos, only if you switch those AI features on. They receive your latest check-in and a training summary, or what you type, say or photograph. Your photo is not saved.
• YouTube shows exercise pictures and videos. It can see your device's IP address and which pictures were asked for. A video plays only when you tap play, through the no-cookies player.
• WHOOP or Oura, only if you connect that device, as described above.

What azīma never does with device data

• It never sends sleep, recovery, heart rate variability, resting heart rate or workout heart rate to any AI feature.
• It never uses your data for advertising, and it never sells it.
• Workout heart rate is shown only to your coach, and it is included in the copy of your data you can download.

How long azīma keeps it

• Device data: azīma keeps sleep, recovery and workout data for a rolling 30 days, then deletes older days.
• Disconnecting a device: new data stops straight away, and access is revoked on the device company's side. You can choose to delete what azīma already saved. Workout and heart-rate data is always deleted when you disconnect.
• Deleting your account: removes all your data immediately. It cannot be undone. Backups made before that are discarded after about 7 days.
• Everything else is kept until you delete it or your account.
• If you remove azīma in the WHOOP or Oura app: new data stops, azīma deletes its access keys, and what it already saved is deleted within 30 days. You can reconnect during that time.

Your rights and how to use them

Under the GDPR you can ask to see, correct, delete, restrict or move your data, and you can withdraw consent at any time.

• Download a copy of your data from Account. It includes saved heart-rate summaries from a connected device.
• Delete your account and all data from Account. It takes effect immediately.
• Disconnect a device, or switch off heart-rate sharing, in Connections, at any time.
• Anything else: email hello@azimarooted.com.

You can complain to the Office of the Commissioner for Personal Data Protection in Cyprus, or to the authority in the country where you live.

Transfers outside the EU

Your azīma data is stored in the EU (Frankfurt). The only provider that receives it outside the EU is Anthropic, and only if you switch the AI features on.

• Anthropic is a US company. It processes data for azīma under a data processing agreement that includes the EU Standard Contractual Clauses.
• WHOOP and Oura: azīma only receives data from them, with your approval. They keep their own copy under their own terms.

Each device company is responsible for its own copy of your data, wherever it keeps it.

Security, age and changes

• Security: data is encrypted in transit and at rest. Each person can read only their own records, and device access tokens are kept in an encrypted vault, not in the app.
• Age: azīma is for adults only (18 and over).
• Not medical care: azīma is a training and wellbeing tool. It does not diagnose anything. If something concerns you, speak to a doctor.
• Changes: if this policy changes in a way that matters, you will be asked to read and accept it again in the app.
• Last updated: 16 October 2026.