Privacy Policy

Circa has no account and shows no ads. Your workouts live on your iPhone and in your own iCloud. A few things leave your phone only when you ask for them: building a workout with AI, and spoken move names. This page says exactly what, where it goes, and what is kept.

Last updated November 15, 2026. Circa is made and sold by Palo Alto Software, Inc. (“we”).

The short version

No account. We don’t know your name, email or Apple Account.
Your workouts are stored on your iPhone and, when you’re signed in to iCloud, in your own private iCloud. We can’t read them.
When you build a workout from text, your voice or a photo, the text or photo is sent to our server and on to Google’s Gemini AI to be read. Our server doesn’t keep it.
Spoken move names (when Voice is on) are sent to our server, and new ones are spoken by Google’s AI and stored as audio that anyone’s Circa can use. They aren’t linked to you.
A random install number is sent with those requests so we can limit how many each phone makes in a day.
No ads, no analytics, no tracking, in the app or on this website. We don’t sell or share data for advertising.

What stays on your iPhone

Your workouts, their names and notes, when you last ran each one, your settings, and spoken move lines downloaded for your workouts are stored in the app on your iPhone. Running a workout happens entirely on the phone: the timer, the beeps, the spoken cues and the Live Activity on the lock screen send nothing to us.

iCloud

When you’re signed in to iCloud, Circa keeps your workouts in sync across your devices through Apple’s iCloud, in your private iCloud database. That data is stored by Apple in your account, under Apple’s privacy policy. We can’t see it. Settings › Your workouts in Circa shows whether syncing is on.

Building a workout with AI

You can build a workout by typing or pasting text, by saying it out loud, or from photos and screenshots (for example of a whiteboard). When you do:

Simple timers stay on the phone. Something like “8 x 20/10” is read by Circa itself and never sent.
What’s sent: the text, or the photos you picked (up to 6), shrunk and with their location and camera details removed first. For a spoken workout, your words are first turned into text by Apple’s speech recognition, on your iPhone when it can, otherwise by Apple. Only the text is sent to us, never the recording.
Where it goes: to our import server, which runs on Cloudflare, and from there to Google’s Gemini API, which reads it and returns the workout. Nothing else from your phone is sent with it except the install number below.
What our server keeps: nothing of what you sent. It records a short line for each request: whether it was text, a voice description or photos, how many photos or characters, which AI model read it, how long it took and what it cost. Never the text or the photos.
What Google keeps: we use Google’s paid Gemini API. Under Google’s terms for it, Google doesn’t use what we send to improve its products, and keeps it for a limited time (up to 55 days) only to detect abuse and for legal reasons.
You always see the result first. Circa shows every AI-built workout on a review screen, with anything it wasn’t sure about marked, before it can be run or saved.

Please don’t include other people’s personal details in what you send. Photos of a gym whiteboard are fine; if a photo shows people’s names, they are read by the AI along with the workout and then left out.

Spoken move names

When Voice is on in Settings, Circa says each move out loud. To do that, the app sends the move names of a saved workout, with the chosen voice and language, to our server. Lines we already have are sent back as audio. New ones are spoken by Google’s Gemini speech model, then stored on our server (in Cloudflare storage) as audio files, filed under the words themselves, so the same line can be played for anyone whose workout has it. These files aren’t linked to you or your phone. The server only speaks short lines made of ordinary words, and refuses anything that looks like a web address.

With Voice off, nothing is sent and the app uses tones only.

The install number

The first time Circa needs it, the app makes a random number for this install and keeps it on the phone. It isn’t tied to you, your Apple Account or your device, and deleting the app deletes it. It’s sent with AI builds and spoken-line requests so our server can limit how many each install makes in a day. The server counts per install for the current day only and clears those counts every day at midnight UTC. It keeps daily totals for all installs together for 30 days, so we can see what the service costs, with no install numbers in them.

Plans and purchases

Purchases are made through Apple. We never see your payment details or your Apple Account. To know how many AI builds a plan includes, the app sends our server the purchase record Apple signs. The server checks Apple’s signature and keeps only a one-way scrambled form (a hash) of Apple’s purchase number, with the count of builds used. It can’t be turned back into the number.

Workout links and this website

A workout link carries the workout inside it, after the # in the address. Browsers don’t send that part to any website, so opening one sends us nothing about the workout. The page reads it in your browser.
A tag in a link such as ?src=coach-ann says where the link was posted. That part does reach our website, like any address you visit.
The web timer runs entirely in your browser. It saves nothing and sends nothing.
This website uses no cookies, no analytics, no ads and no third-party scripts. Like every website, it’s served through a hosting company (Cloudflare), which processes your IP address and the address you asked for in order to deliver the page and protect the site.
In the app, Circa can see whether your clipboard probably holds a web link (iOS tells it yes or no, without the contents), so it can offer “Paste your workout”. It reads the clipboard only when you tap Paste.

Permissions Circa asks for

Each is asked only when you first use the feature, and each is optional:

Camera, to take a photo of a workout to build from.
Microphone and speech recognition, to describe a workout out loud.
Notifications, so a running workout can alert you if the app can’t play its cues.

Photos you pick from your library are chosen in Apple’s picker; Circa doesn’t get access to the rest of your library. Circa doesn’t use your location, contacts or Apple Health.

Deleting your data

On your iPhone: delete workouts in Circa, or delete the app to remove everything on the phone, including the install number.
In iCloud: deleting a workout in Circa deletes it from iCloud too. To remove all of Circa’s data, open the Settings app › your name › iCloud › Manage Account Storage (or Manage Storage) › Circa › Delete Data.
On our server: nothing we keep identifies you, and the per-install counts are gone at the end of each day. If you have a question or a request, email support@circafitness.app and we’ll answer within 30 days.

Children

Circa is a general fitness app and isn’t aimed at children under 13. It has no accounts and collects nothing that identifies a person.

Your rights

Depending on where you live, you may have the right to ask what personal information a company holds about you, to have it corrected or deleted, to object to how it’s used, and to complain to your data protection authority. We don’t sell or share personal information, and we don’t use it for advertising. Since we hold nothing that identifies you, there’s usually nothing for us to look up; write to us and we’ll tell you what we can.

Changes to this policy

If what Circa does with data changes, we’ll update this page and the date at the top before the change reaches the app.

Contact

Palo Alto Software, Inc.
support@circafitness.app