Privacy Policy

Privacy Policy
Last updated: May 2026

This Privacy Policy explains how Desk to Bikini LLC (“we,” “our,” or “us”) collects, uses, and protects information when you use the Desk to Bikini® app. We have written this in plain language so you can understand exactly what happens with your data.

1. Who We Are

Desk to Bikini LLC is the company behind the Desk to Bikini® fitness app, founded by Philita Jana. You can contact us at info@desktobikini.com.

2. What We Collect

The app does not require you to create an account. Instead, it generates a random Device ID the first time you open it. All your data is tied to this ID, not to your identity.

Information you provide during onboarding:

Your first name (optional — used to personalize coach messages)
Your fitness goals, timeline, and commitment level
Your current fitness level and daily sitting duration
Physical symptoms or concerns you want to address (e.g., back pain, low energy) — these are used only to tailor your workout program
Your work schedule and workspace type

This onboarding data is stored locally on your device and sent to OpenAI to generate your personalized program (see Section 4). It is used transiently for that purpose only — raw onboarding inputs are not stored on our servers after your program is created.

Information generated as you use the app:

Your workout program (AI-generated, stored on our servers linked to your Device ID)
Workout completion records
Habit names and daily check-in records

If you contact support:

Your name, email address, and the content of your message are stored on our servers so we can respond to you.

What we do NOT collect:

No body measurements or weight data
No photos
No location data
No browsing history
No advertising identifiers
No payment card details (handled entirely by Apple)

3. How We Use Your Data

To generate your workout program — your goals, fitness level, and symptoms are sent to OpenAI to create a 12-week program personalised to you. Once your program is saved, these raw inputs are discarded from our servers.
To personalise your coach check-ins — your program name, current week, and workout completion stats are sent to OpenAI to generate motivational messages from Philita. No health or symptom data is used.
To track your progress — workout completions and habit records are stored so the app can show your streak, score, and history.
To respond to support requests — your name and email are used only to reply to you.

We do not use your data for advertising, profiling, or sale to third parties.

4. Third-Party Services

OpenAI
We use OpenAI’s GPT-4o model to generate your workout program and coach check-in messages. For program generation, your goals, fitness level, and symptoms are sent transiently to OpenAI and are not stored on our servers afterwards. For coach check-ins, only your program name, current week, and workout completion stats are sent. OpenAI processes this data in accordance with their API privacy policy. We use OpenAI’s API, which by default does not use submitted data to train their models. See openai.com/policies/privacy-policy.

RevenueCat
In-app subscriptions and purchases are managed by RevenueCat. RevenueCat receives your Device ID and purchase transaction data from Apple to verify and manage your subscription. They do not receive your name or fitness data. See revenuecat.com/privacy.

Apple
The app is distributed via the Apple App Store. Apple processes all payment transactions and may collect data according to their own privacy policy. See apple.com/legal/privacy.

5. Data Storage and Security

Your data is stored on servers hosted in the United States. All data transmitted between the app and our servers uses HTTPS encryption. Your Device ID acts as a pseudonymous identifier — we do not have a way to link it to you personally unless you contact us via the support form.

Some data (your onboarding answers and subscription status) is stored locally on your device. Your first name may be included in coach check-in requests sent to OpenAI, but is not stored independently on our servers.

6. Data Retention

Your workout programs, completions, and habit records are retained on our servers as long as you use the app. Support ticket records (name, email, message) are automatically deleted after 2 years.

You can delete all server-side data linked to your Device ID at any time using the Start Over button in the app settings. This permanently erases your programs, workouts, and habits from our servers.

7. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

Right to access — you can request a copy of the data we hold about your Device ID.
Right to erasure — you can delete all your app data using the Start Over button, or contact us to request deletion of support ticket records.
Right to portability — you can request an export of your data by contacting us.
Right to object — you can object to how we process your data by contacting us.

To exercise any of these rights, or to request deletion of support ticket data, contact us at info@desktobikini.com. We will respond within 30 days.

If you are located in the European Union or United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

8. Children

Desk to Bikini® is designed for adults and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact:

Desk to Bikini LLC
Attn: Privacy
info@desktobikini.com

About

More Links