Privacy Policy · Muscla

Who we are

Muscla is provided by AlbaScout L.L.C., Rruga Idriz Seferi, pn, 71000 Kaçanik, Kosovo (“Muscla”, “we”, “us”). We decide why and how the personal data described here is processed. In the language of many privacy laws, we are the controller.

This policy covers the Muscla app for iPhone and Apple Watch, the online features behind it (account, sync, Community, AI features, the AI assistant connector, the calendar feed) and the website muscla.app. It does not cover services you choose to use alongside Muscla, such as Apple Health, an AI assistant or your calendar app. Their own privacy policies apply to them.

For privacy questions, write to privacy@muscla.app. You can also reach us at support@muscla.app for anything in this policy.

How to read this policy. Each section below explains one part of Muscla: what data is involved, why we use it, the legal ground we rely on, how long we keep it and who receives it. Where we rely on your consent, you can withdraw it at any time. Withdrawal does not affect processing that happened before.

Using Muscla without an account

You can plan and log workouts, track food and water, and record your body weight without an account. Without an account, this data is stored only on your iPhone and Apple Watch. We do not receive it. You can export it as a backup file in Settings, under Data.

A few things reach us or our service providers even without an account:

Food search and barcodes. When you search the food database or scan a barcode, the search term or barcode goes to our server, which looks up matching foods. If our database does not know a barcode, our server asks Open Food Facts for it, sending only the barcode. To prevent abuse, our server counts barcode lookups per network using a salted hash of your IP address that changes every day. We do not store the address itself, and the counters are deleted after two days.
Exercise animations. Exercise animations and pictures load from jsDelivr, a public content delivery network. Like any web server, it receives your device’s IP address and the file requested.
Usage data and crash reports, unless you switch them off (see Usage data and Crash reports).
Purchases, which Apple handles (see Muscla Pro subscriptions).

Your account

An account lets you sync across devices, keep a backup on our server and use the Community, AI features, the AI assistant connector and the calendar feed. Creating an account is optional.

What: your email address if you sign in with an email code. With Sign in with Apple: the identifier Apple gives us and an email address, which can be a private relay address if you use Hide My Email, plus a token from Apple that lets us end your Apple sign-in when you delete your account. With a passkey: only its public key and technical data. The private key never leaves your devices. We also keep sign-in sessions and the time of your last sign-in. Muscla accounts have no password.
Why: to create your account, sign you in securely, keep your data in sync and send you sign-in codes. We do not use your email address for marketing.
Legal ground: performing our contract with you; our legitimate interest in keeping accounts secure.
How long: for as long as your account exists. Sign-in codes expire after 10 minutes. Passkey challenges expire after 5 minutes.
Who receives it: Supabase, which hosts our database, sign-in and file storage; Resend, which delivers sign-in code emails; Apple, if you use Sign in with Apple or passkeys stored in your iCloud Keychain.

Training, food and body data

With an account, the app syncs what you record to our server, so it is backed up and available on your other devices.

What: workouts, sets, routines, your training plan and your answers when Muscla builds it (goal, experience, equipment, training days, height, weight, target weight, birth year and sex), custom exercises, working weights, body weight and goal weight, your food diary, your own foods, favourites, portions and meals, water, nutrition goals, supplements and when you took them, reminders, weekly goals, notification settings, your time zone and your app settings. Entries an AI assistant made for you carry its name.
Why: to provide Muscla: plan your training, track your progress, calculate your goals and keep your data in sync.
Legal ground: performing our contract with you. Some of this data says something about your health: your training, your food and your body measurements. Before such health-related data is stored on our servers, we ask for your explicit consent in the app, and this consent is our legal ground for it. You can withdraw it at any time in the app. We then stop storing health-related data on our servers and delete what we hold there. It stays on your iPhone, and features that need it on our servers, such as sync across devices, the Community, leaderboards and groups, stop working for that data. Access to Apple Health is also covered by the iOS permission (see Apple Health).
How long: for as long as your account exists. When you delete an entry, its content is removed from our server. A small marker without content remains, so your other devices learn about the deletion.
Who receives it: Supabase, as our hosting provider. Nobody else, unless you share it in the Community, connect an AI assistant or subscribe to your calendar feed.

Apple Health

Connecting Apple Health is optional. iOS asks for your permission for each type of data, and you can change it at any time in the Health app.

What Muscla reads, with your permission: height, weight, date of birth and sex for your calorie goal; weigh-ins from your scale; workouts from other apps for your training week; heart rate during a workout on Apple Watch; and, if you switch it on, sleep, resting heart rate and heart rate variability for your recovery.
What Muscla writes, with your permission: your finished workouts (from Apple Watch with heart rate), your weigh-ins and, if you switch it on, what you eat and drink.
What leaves your device: values you import into Muscla, such as weigh-ins or your height for the plan, become Muscla entries and sync like your other data. The days on which Health recorded a workout (the last 21 days) sync, so your groups’ weekly goal can count them. Heart rate, sleep, resting heart rate and heart rate variability are used on your device only.
Never: Health data is never used for advertising or marketing and never sold. Readings that stay on your device, such as heart rate, sleep, resting heart rate and heart rate variability, are never shared with anyone, including AI assistants. Values you import, such as weigh-ins, become Muscla entries and follow the choices you make for them.
Legal ground: your consent, given in the iOS permission dialog. For values that sync to our servers, also your explicit consent described in Training, food and body data.
How long: Health data stays in Apple Health under your control. Values you import into Muscla are kept as described in Training, food and body data. Of the workout days from Health, our server keeps the last 21 days.
Who receives it: what syncs is stored by Supabase, our hosting provider. Nobody else receives data from Apple Health through Muscla.

Community

The Community is optional. It starts when you create a profile. You decide, for each kind of data, who may see it.

Your profile. Your profile holds a name (2 to 30 characters), an optional picture, your city and country, and your birth year. We ask for the birth year only to confirm that you are at least 16. Nobody else sees it. Other members who come across you, for example through your invite link, a group, a leaderboard or a comment, see your profile card: name, picture, city, country and how many followers and followed people you have. There is no public search for profiles.

Followers. People follow you only after you accept their request. Your followers are the people whose request you accepted. You can remove followers, block people and mute them at any time. Blocked people do not see you, and you do not see them.

Who sees what. In the Community settings you choose an audience for each kind of data: nobody, your followers, or selected followers.

Your workouts and personal bests: visible to your followers by default.
Your body weight, food, photos and leaderboards: visible to nobody by default. Body weight, food and leaderboards (which show your body weight next to your lifts) are shared only after you give explicit consent in the app.
Posts are snapshots of a workout or a meal. Who sees a post is decided each time it is read, under your settings at that moment. Calories and protein of a meal show only if you choose to show them.
Your profile numbers (workouts, weeks in a row and bests) are visible to whoever may see your workouts. Your best squat, bench press and deadlift appear on your profile under the same rule as your friends leaderboards.

Leaderboards. Friends leaderboards show your lifts to the followers you share leaderboards with. City and country leaderboards are public within the app. You appear there only if you join them, and only after 90 training days, three workouts with the lift and a weigh-in within 30 days of the value. A public list shows your name, picture, the lift (weight, reps and estimated maximum), its date, your body weight and the number of sessions with that lift, to other members in your city or country. Lists open from 20 people. Automated checks reject values above a record limit and hold other values that look implausible, for example a large jump in a short time, until a moderator decides (see Automated decisions). You can appeal a rejection once in the app. To check jumps, we keep a history of the values you held in public lists for up to about 400 days.

Verified lifts. You can confirm a lift in three ways. A video goes only to our moderators (see Photos and videos). Witnesses are two other members who confirm your set in the gym. We record who witnessed which set, and the witnesses see the set they confirm. A competition link connects your account to your name in the public OpenPowerlifting results, with an optional note to the moderators. It is voluntary.

Groups. Joining a group is your consent to show its members your name, training days, progress towards the weekly goal and your challenge values. Members can give each other a thumbs-up. When you leave, you stop sharing.

Messages. You can send messages to people who follow you and whom you follow. A message is text, or a card with a workout or a best (workout name, duration, volume, sets, best). Messages are stored on our server and are not end-to-end encrypted. Moderators see a message only if the recipient reports it. Messages are kept until the account of the sender or of the recipient is deleted. Read receipts are on by default and work both ways. If you switch them off, you neither send nor see them.

Activity and safety. The app shows you likes, comments, new followers and group events from the last 30 days. Names and texts pass an automated word filter. Members can report posts, comments, profiles, groups, messages and leaderboard values. Moderators see the reported item, the person behind it and, for leaderboard checks, the last five weigh-ins. Three reports hide a post, comment or group until a moderator decides. Moderators can remove content, reject values and suspend accounts.

Legal ground: performing our contract with you (the Community features you choose to use); your consent for body weight, food, leaderboards and groups, which you withdraw by changing the audience, leaving the leaderboard or leaving the group; our legitimate interests in a safe community and fair leaderboards; legal obligations where we must act on illegal content.
How long: until you delete the item or your account. We keep reports and moderation decisions for as long as the reported item or account exists, and limited records after that where we need them to prevent repeated abuse or to meet legal obligations.
Who receives it: the members you share with, our moderators, and Supabase as our hosting provider.

Photos and videos

Profile pictures and photo posts. Before a picture is stored, our server sends it to Google Gemini, which checks it for nudity, violence, hate symbols and drugs. Google receives the image only, without your name or account. The app redraws every photo before upload, which removes location, capture time and camera data. Photo posts are kept in private storage. When someone loads a photo, our server checks whether this person may see the post. Photos can be cached briefly on the way, so a change of audience, a block or a deletion can take a short moment to apply everywhere. Profile pictures are stored so that the app can load them by link. Anyone who has the link can see the picture.

Videos for verified lifts. A video you record to verify a lift is exported without sound. It goes to private storage that only our moderators can open, through a link valid for 10 minutes. Other members never see it. A video is deleted 30 days after the moderators’ decision. A video that never finished uploading is deleted after one day.

Legal ground: performing our contract with you; our legitimate interest in keeping the Community free of harmful images.
How long: photos until you delete the post or your account; profile pictures until you change or remove them or delete your account; videos as described above. Deleted images and videos leave storage within a few hours.
Who receives it: Supabase (storage), Google (image check), our moderators.

Muscla Pro subscriptions

Muscla Pro is sold and billed by Apple through the App Store. We never see your payment details.

What: when you subscribe, the app sends us the transaction as Apple signed it. We store the original transaction ID, the product (monthly or yearly), the expiry date, the status (for example active, in a grace period, expired or refunded), whether it renews, the Apple environment and the account it belongs to. Apple also notifies our server of renewals, cancellations and refunds.
Why: to unlock Muscla Pro on all your devices and to prevent misuse of subscriptions.
Legal ground: performing our contract with you; our legitimate interest in preventing fraud.
How long: for as long as your account exists.
Who receives it: Apple (as the seller), Supabase (hosting).

Deleting your account does not cancel your subscription. Cancel it in your Apple account settings.

Notifications

Reminders, such as your training reminder or the note before a trial ends, are scheduled on your iPhone. Community notifications, such as a new message, a comment or a friend’s workout, come from our server through Apple Push Notification service.

What: a device token for your iPhone, linked to your account, your notification settings and your time zone (for quiet hours from 22:00 to 8:00). A notification contains the kind of event and the name of the person involved.
Legal ground: your consent, given in the iOS permission dialog and in the app’s notification settings.
How long: the device token until you sign out, delete your account or Apple reports it as invalid. Pending notifications are deleted after 30 days at the latest.
Who receives it: Apple (delivery), Supabase (hosting).

Calendar feed

You can subscribe to your training plan in a calendar app. The feed is a secret link. It lists your routines and planned days and, if you choose, your finished workouts. Anyone who has the link can read the feed, so share it carefully. You can renew the link in the app, which stops the old one from working. The feed is deleted with your account. Legal ground: performing our contract with you. Your calendar provider receives the feed under its own terms.

AI features

Muscla can read nutrition labels and estimate meals from a photo or a short description. These features need an account, may need Muscla Pro, and work only after you agree in the app. You can withdraw that consent in Settings, under AI, at any time. Nothing is sent after that.

What: the photo or text you submit and your app language. Our server forwards it to Google Gemini and checks the answer before it reaches you. You check the result before anything is saved. We count how many requests your account made each day and month, to keep usage within limits.
Why: to fill in nutrition values for you.
Legal ground: your consent.
How long: Muscla does not keep the photo or the text. Only what you save becomes part of your food diary. Usage counters are kept while your account exists.
Who receives it: Google, as our service provider. Google receives the content without your name or account. It processes the content to return the result and may keep it for a limited time under its terms, for example to detect abuse.

AI assistants

You can connect your Muscla account to an AI assistant such as Claude (Anthropic) or ChatGPT (OpenAI). This is optional. It only happens when you set it up in the assistant and allow it on Muscla’s consent page.

What data: you choose per kind of data what the assistant may read and what it may add, change and delete: training (workouts, sets, routines, plan), body weight (weigh-ins, goal weight) and food (diary, goals, water). The assistant receives only what you allowed, and only when it asks for it in a conversation. Readings from Apple Health that stay on your device, such as heart rate or sleep, are never shared with an assistant.
What Muscla stores: which assistant you connected (its name and the address it returns to), what you allowed and when, when it last accessed your data, its access keys (stored only as a hash) and counters for usage limits. Entries an assistant adds or changes for you are stored in your account with its name (“via Claude”). So that days and times are right, Muscla uses your phone’s time zone.
Why: so the assistant can answer your questions with your data and, at your request, make entries.
Legal ground: your explicit consent for each kind of data, which you can withdraw at any time. No advertising, no selling, no profiling.
How long: access keys last 1 hour, refresh keys 30 days. Expired keys are deleted every hour. A connection and the record of what you allowed stay with your account until you delete it, also after you disconnect, so we can show what an assistant was allowed to do. Limit counters are deleted after one day.
Who receives it: what you share goes to the assistant’s provider. The provider processes it under its own responsibility and privacy policy. Muscla does not control what it keeps.
Your control: in the app under Settings, AI, AI assistants, you see every connection, change what it may do and disconnect it, effective immediately. Deleting your account ends all connections.

Sharing foods with Open Food Facts

When you create your own food with a new barcode, you can switch on “Share with everyone”. Then its name, brand, barcode and nutrition values go into Muscla’s food database and to Open Food Facts, a public food database, under the Open Database License (ODbL). Nothing about you is shared. Open Food Facts receives only a code derived from your account, so it can tell contributions apart. You can share up to 20 foods a day. Legal ground: your consent. Once published under an open licence, the data stays public and others may copy it. If you delete your account, the contribution is no longer linked to you.

Usage data (not linked to your account)

To see where the app works well and where it does not, the app counts a few events, such as app opens, the steps of the first setup, views of the Muscla Pro screen, trials and purchases started, and your first workout.

What: the name of the event, its time, a few fixed details (for example which setup step or which offer was shown), the app version and a random installation ID. The app creates this ID on your iPhone when you first open it. It is the same for all events from this installation until you switch usage data off. No account, no name, no email address, no workouts and no body values. Our server does not store your IP address with these events. To limit abuse, it counts requests per network using a salted hash of the address that changes every day and is deleted after two days.
Why: to improve the app, for example to find the step of the setup where people give up.
Legal ground: our legitimate interest in understanding and improving Muscla. This data is pseudonymous, not anonymous: it is linked to the random installation ID, but not to your account, name or email address, and we do not try to find out who is behind an ID.
How long: 400 days.
Who receives it: Supabase (hosting).
Your choice: usage data is on by default. You can object at any time by switching it off in Settings, under Data (the switch is currently labelled “Anonymous usage data”). The app then deletes events not yet sent and its installation ID, and sends nothing more. If you switch it on again, a new ID starts. Because the data is not linked to your account, we cannot find or delete the events already sent for you.

Crash reports

When the app crashes or hits an error, it sends a crash report to Sentry. This happens only in released versions of the app and only while usage data is switched on.

What: the error, where in the code it happened and technical details such as device model, iOS version and app version. No screenshots, no screen contents, no record of your actions or network requests, no account and no name. Sentry is set not to store IP addresses. Our server also reports its own errors to Sentry, with the error type, message, code location and function name, after removing IDs, email addresses and access keys.
Why: to find and fix errors.
Legal ground: our legitimate interest in a stable and secure app.
How long: Sentry deletes crash reports automatically after a limited retention period.
Who receives it: Sentry, as our service provider.

The waitlist

Before launch, you can join the waitlist on muscla.app.

What: your email address, the language and page you signed up from, when you signed up, confirmed and unsubscribed and when we sent you confirmation emails. When you first click into the email field, the page loads Cloudflare Turnstile, which checks that you are a person and not a bot. Cloudflare processes your IP address and technical information about your browser for this check. To limit sign-ups per network, we record every sign-up that passes this check with its time and a salted hash of your IP address, separately from your email address.
Why: to send you one email when Muscla is available in the App Store. We first send a confirmation email. Only after you confirm do you count as signed up.
Legal ground: your consent, which you withdraw by using the unsubscribe link in every email.
How long: while the waitlist exists, or until you ask us to delete your entry. After you unsubscribe, we keep the address marked as unsubscribed so we do not email it again. The records with the hashed IP address are deleted after one day.
Who receives it: Supabase (hosting), Resend (sending the emails), Cloudflare (Turnstile).

Website and analytics

Cloudflare hosts muscla.app and protects it against attacks. To deliver pages, Cloudflare processes your IP address and request details, such as the page and your browser, and keeps short-lived security logs.

We measure visits with Cloudflare Web Analytics. It uses no cookies and no fingerprinting, and does not track you across websites. We see only totals, such as page views, referring sites, countries and device types, never individual visitors.

We set no cookies on the website. If you close the language hint, your browser remembers that in its local storage until you clear it. Nothing is sent to us.

Legal ground: our legitimate interests in a secure, working website and in knowing which pages are useful.
How long: Cloudflare keeps security logs for a short period under its own terms. We see analytics only as totals.
Who receives it: Cloudflare, as our service provider.

Service providers and other recipients

Service providers. These companies process personal data on our behalf, only on our instructions and under contracts that require them to protect it:

Supabase: database, sign-in, file storage and server functions.
Resend: sign-in code and waitlist emails.
Sentry: crash and error reports.
Cloudflare: website hosting, security, web analytics and Turnstile.
Google (Gemini): AI analysis of food photos and descriptions, and checks of profile pictures and photo posts.

Independent recipients. These receive data as described in this policy and use it under their own terms and privacy policies, for their own purposes:

Apple: App Store purchases (Apple is the seller), Sign in with Apple, push notifications (Apple Push Notification service) and Apple Health on your devices.
Open Food Facts: the foods you choose to share.
The providers of AI assistants you connect, such as Anthropic (Claude) or OpenAI (ChatGPT): the data you allow them to read.
jsDelivr: a public content delivery network from which the app loads exercise animations and pictures. It receives your device’s IP address and the file requested.

Other people receive data only as you choose: the members you share with and the calendar app you give your feed link to.

We may also disclose personal data if the law requires it, to protect the rights, safety and property of our users, the public or Muscla, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to your data.

No sale, no ads, no tracking

We do not sell personal data. We do not share it for cross-context behavioural advertising, as California law uses that term. Muscla shows no ads, contains no advertising code and does not track you across other companies’ apps or websites.

Because we do none of this, there is nothing to opt out of. If your browser sends a Global Privacy Control or Do Not Track signal, our processing stays exactly as described here.

Consumer health data

Some US states, such as Washington and Nevada, have laws on consumer health data. Under those laws, data such as your workouts, body weight, food diary, the Apple Health data described above and your plan answers can count as consumer health data.

Consent: we collect consumer health data on our servers only with your explicit consent in the app, as described in Training, food and body data.
What we collect, and why: as described in Training, food and body data, Apple Health, Community and AI features, to provide the features you ask for.
Sources: you, your devices (including Apple Health with your permission), and AI assistants you connect.
Sharing: with the service providers listed above to run Muscla, and with others only at your direction: the members you share with, an AI assistant you connect, your calendar app. We never sell consumer health data.
Your rights: you can access, delete and withdraw consent for your consumer health data, and learn which third parties received it, as described in Your rights.

Automated decisions

Some checks in Muscla run automatically:

Picture checks. An AI check (Google Gemini) decides whether a profile picture or photo can be posted. A refused picture is not posted.
Word filter. Names and texts with blocked words are not accepted.
Leaderboard checks. A value above the record limit for its lift and class (more than 105 % of the all-time record, or a DOTS score above 700), or equal to a value a moderator rejected before, is rejected automatically. Other values that look implausible, for example a large jump in a short time, are held from public leaderboards until a moderator decides. You can appeal a rejected value once in the app, and a moderator decides on the appeal.
Reports. Posts, comments and groups are hidden automatically once three members have reported them, until a moderator decides.

These checks do not have legal or similarly significant effects on you. People, not machines, decide on held leaderboard values, appeals and reported content. You can ask for a person to look at any automated decision by writing to support@muscla.app.

International transfers

Muscla is available worldwide. We and our service providers may process personal data in countries other than yours, whose laws may protect data differently. Where the law requires it, we protect such transfers with appropriate safeguards, such as standard contractual clauses approved by the relevant authorities, or rely on another lawful transfer mechanism. You can ask us for more information about these safeguards.

How long we keep data

We keep personal data only as long as we need it for the purposes in this policy. In short:

Account data, synced data, Community content and subscription data: for as long as your account exists, or until you delete the item.
Videos for verified lifts: 30 days after the moderators’ decision.
Usage data (not linked to your account): 400 days.
AI photos and descriptions: not kept by Muscla.
AI assistant access keys: 1 hour, refresh keys 30 days.
Waitlist: while the waitlist exists, or until you ask us to delete your entry.

We may keep data longer where the law requires it, or where we need it to establish, exercise or defend legal claims. Copies in our providers’ backups are overwritten in their regular backup cycle.

Deleting your account

You can delete your account in the app, under Settings, Account, Delete account. When you do:

We end your Sign in with Apple authorization, if you used it.
We delete your account and everything synced to it: workouts, plan, body weight, food diary, settings, passkeys, your calendar feed, your AI assistant connections and your subscription record.
We delete your Community profile, posts, comments, likes, messages you sent and received, group memberships, leaderboard entries and verification records. Your profile picture, photos and videos leave storage within a few hours.
Foods you shared with Open Food Facts stay public under their open licence but are no longer linked to you.

You choose whether the data on your iPhone stays there, without an account, or is removed too. Deleting your account does not cancel a Muscla Pro subscription. Cancel it in your Apple account settings.

If you cannot use the app, email support@muscla.app from the address of your account and we will delete it for you.

Security

We protect your data with encryption in transit, access rules in our database and file storage that let each person reach only what they may see, private storage for photos and videos, and the least access needed for each task. Access keys of AI assistant connections are stored only as hashes. Other secrets, such as sign-in sessions, your calendar link, the token for Sign in with Apple, and invite and witness codes, are stored in our database, where access is limited to our own systems and to the people each one is meant for: your calendar link and your personal invite code to you, a group’s invite code to all members of that group, and a witness code to you and the people you show it to. Muscla accounts have no passwords that could leak. No system is perfectly secure. If a breach affects your personal data, we will inform you and the authorities where the law requires it.

Your rights

You have rights over your personal data. Depending on where you live, they include the right to:

access your data and receive a copy;
correct inaccurate data;
delete your data;
port your data, that is, receive it in a machine-readable format;
object to processing based on our legitimate interests;
restrict processing in certain cases;
withdraw consent at any time, without affecting earlier processing;
complain to a data protection supervisory authority where you live or work.

Many of these rights work directly in the app. You can correct and delete entries, export a backup file (Settings, Data, Export backup), change who sees what in the Community, switch off usage data, withdraw AI consent and delete your account. For everything else, email support@muscla.app. We may ask you to confirm the request from your account’s email address, so that nobody else can get your data. We answer within the time the law where you live requires. If we decline a request, we tell you why, and you can appeal by replying to our answer. If you live in a US state that gives you a right to appeal and we deny your appeal, you can contact your state attorney general.

Depending on where you live, you may have additional rights under local law. For example:

California: you have the right to know what personal information we collect, use and disclose, and to access, correct and delete it. In the last 12 months we collected identifiers (such as your email address and account ID), commercial information (your subscription status), internet activity (usage events and crash reports), approximate location that you enter (city and country), and sensitive personal information (account sign-in and health-related data you record). We collected it from you and your devices, used it for the purposes in this policy and disclosed it to the service providers and independent recipients listed in Service providers and other recipients, including jsDelivr, which receives your device’s IP address when the app loads exercise animations. We use sensitive personal information only to provide Muscla. We do not sell or share personal information, and we do not knowingly sell or share the data of people under 16. You can use an authorized agent, with your signed permission. We will not treat you differently for using your rights.
Other countries and states: where local law gives you further rights, such as the right to nominate someone to exercise your rights in case of death or incapacity, or to appeal a decision on your request, you can use them by emailing us.

Children

Muscla is for people aged 16 and older. We do not knowingly collect personal data from children under 16. If you are under the age at which you may consent to data processing where you live, you may use Muscla only with the consent of a parent or guardian, where the law requires it. If we learn that someone under 16 has an account, we delete the account and its data. If you believe a child is using Muscla, please email support@muscla.app.

Changes to this policy

We update this policy when Muscla or the law changes. The date and version at the top show the current version. If a change matters for you, we tell you in the app or by email before it takes effect, and we ask for your consent again where the law requires it. You can ask us for earlier versions.

Contact

AlbaScout L.L.C.
Rruga Idriz Seferi, pn, 71000 Kaçanik
Kosovo

Privacy questions: privacy@muscla.app
Email: support@muscla.app