Privacy policy
Privacy, in plain words.
Last updated: 22 July 2026
The short version: Secondwind does not require an account and does not contain advertising. Your programme, full session log, settings and saved Coach conversation are stored on your device. Before the first custom Coach question is sent, Secondwind asks for permission to send the question and a short programme context to Kovus and Anthropic so the Coach can answer. Post-session Coach notes and the six quick answers stay on the device. Apple and RevenueCat process subscription information. We do not sell personal information or use it for advertising.
Who we are
Secondwind is developed by Josh Waller, trading as Kovus, in Perth, Western Australia. Contact josh@kovus.dev for privacy questions or requests.
Information stored on your device
Secondwind stores the information needed to run your programme locally, including:
- onboarding answers such as age band, training history, available equipment, preferred schedule, joint considerations and pre-exercise screening responses;
- the generated programme, exercise substitutions, completed sets, weights, repetitions and effort feedback;
- reminders, units, audio and Apple Health preferences;
- personal-best and progress records;
- Coach messages; and
- an anonymous installation identifier used for Coach rate limits.
The app has no name, email, password or Secondwind account. You can export the app data from Settings. You can also delete local app data from Settings.
Custom Coach questions
The six quick answers shown in Coach and post-session Coach notes are built into the app and work offline. Before the first custom question leaves the device, Secondwind shows the data recipients, context and retention and asks you to choose Agree and send. Choosing Not now sends nothing. The choice is stored on this device, can be reset in Settings and will be requested again if the data, recipient, purpose or retention materially changes. If you approve and send a custom question, Secondwind sends the following over an encrypted connection:
- your question;
- a short programme summary, including training schedule, session length, equipment and joint considerations;
- the current programme week;
- today's active or completed session evidence, including session stage, Day Dial state and note, current exercise, and any logged sets, repetitions or weights;
- up to three recent session summaries;
- up to six messages from prior online custom questions and answers, excluding built-in quick answers and post-session notes; and
- a random installation identifier used to enforce the daily limit.
The request goes to a Kovus-operated Supabase Edge Function and then to Anthropic's commercial API. Kovus stores daily request and token counters against the random identifier. It does not store the question in the Coach service database. Your copy of the conversation remains on your device.
Anthropic states that standard API inputs and outputs are automatically deleted from its backend within 30 days, subject to exceptions for services with different retention, agreed terms, usage-policy enforcement and legal requirements. Read Anthropic's commercial data retention information.
Do not include information that identifies you or another person in a Coach question. Coach is an optional programme-support feature, not medical advice.
Subscriptions and purchases
Purchases are processed by Apple. Secondwind uses RevenueCat to validate receipts, display subscription status and unlock paid features. RevenueCat receives an anonymous app user identifier and purchase history. It does not receive your Secondwind programme, Coach messages or Apple Health data. See RevenueCat's privacy policy and Apple's privacy policy.
RevenueCat also sends Kovus subscription lifecycle events so we can investigate entitlement and billing-delivery problems. Kovus stores the event identifier and type, anonymous app user identifier, product identifier, price and event timestamps, together with the event payload supplied by RevenueCat. These records do not contain payment-card details, your Secondwind programme, Coach messages or Apple Health data.
Kovus does not receive your payment-card details.
Apple Health
If you enable Apple Health sync, Secondwind asks permission to save completed functional strength workouts. Secondwind does not upload Apple Health data to Kovus or Anthropic. A workout already saved to Apple Health is managed in the Health app and is not removed when you delete Secondwind's local app data.
Notifications
Session and renewal reminders are scheduled locally on your device. Secondwind does not use a push-notification server in version 1.
Apple Maps professional search
When you choose Find a pro nearby, Secondwind opens an Apple Maps search for the professional type you selected. Secondwind does not request location permission, receive your location or receive the resulting listings. Apple handles the search under its own privacy policy.
Analytics and diagnostics
Version 1 records a small set of product events only in the running app for development diagnostics. Those events are not transmitted to Kovus or an analytics provider in the release configuration. If this changes, this policy and the App Store privacy disclosure must be updated before release.
Where service data is processed
The Secondwind Supabase database is configured in Sydney, Australia. RevenueCat stores customer data in the United States and may use service providers in other jurisdictions. A custom Coach question is processed by Anthropic and its service providers and may be processed outside Australia under Anthropic's commercial terms and data-processing arrangements. Overseas providers can be subject to the laws of the countries in which they operate.
Retention and deletion
Local information remains until you delete it in Settings or remove the app. Deleting local app data clears Secondwind's SQLite records, persisted app state, local Coach history, reminder schedules and Kovus Coach installation identifier.
Kovus keeps Coach rate-limit counters for up to 31 days. Kovus keeps RevenueCat subscription event copies for up to 24 months for entitlement support, reconciliation and service security. Apple, RevenueCat and Anthropic also retain information under their own legal and operational obligations as described above.
Access, correction and privacy complaints
Email josh@kovus.dev to ask what personal information Kovus holds about you, request correction or deletion, or make a privacy complaint. Include the anonymous identifier shown by the app if available; without it, Kovus may not be able to connect a server record to your device. We will acknowledge a complaint and respond within 30 days. If you are not satisfied, you may contact the Office of the Australian Information Commissioner.
Security
Custom Coach requests use encrypted HTTPS connections. No system can be guaranteed completely secure. Keep identifying, medical and highly sensitive information out of Coach questions.
Children
Secondwind is designed as a strength-training app for adults. It is not directed to children and does not knowingly collect a child's personal information.
Changes
We may update this policy when the app or its service providers change. The current version and update date will remain available at https://kovus.dev/apps/secondwind/privacy.
Contact
Email josh@kovus.dev.
Read the terms of service or visit Secondwind support.