Privacy Policy

This English translation is provided for reference only. The Japanese version is the official text, and if the two differ, the Japanese version prevails.

Masataka Kamochi (the "Operator") sets out below how user information is handled in the smartphone app "WYBB - 筋トレ・体重記録" and its related services (the "Service").

1. Information We Collect

(1) Account information (received from "Sign in with Apple")

• A user identifier issued by Apple
• Email address (Apple's relay address if you chose "Hide My Email")
• Name (only if you chose to share it on Apple's sign-in screen)

(2) Information you enter

• Records of body weight, body fat percentage, muscle mass and so on, with their dates
• Training records (exercise, weight, reps, sets, perceived intensity, gym name, notes, etc.)
• Profile (height, date of birth, target weight and body fat percentage, the sex used as the body composition standard, the sex of the person drawn in images, and the skin tone of images)

(3) Information the Service creates

• Summaries of your records, weekly coaching text, physique images and reward card images
• Records of reaching weekly goals, and the number of times you have used paid features

(4) Paid plan information

• Subscription status (period of validity, renewals, cancellations, etc.). Payments are processed by Apple, so the Operator never receives your credit card or other payment details.

(5) Access records

• Records of access to our servers (IP address, date and time, URL accessed, type of app or browser). These are used to prevent unauthorized access and to investigate problems.

The app shows no ads and uses no external tools to analyze usage. The Operator's website uses an analytics tool, shows ads on the exercise guide pages, and embeds YouTube videos (see "10. Ads, Videos, Analytics and Cookies on the Website" below).

2. Purposes of Use

1. Providing the Service (storing, summarizing and showing records, and generating coaching and images with generative AI)
2. Providing the paid plan and managing usage limits
3. Identity verification, preventing misuse, and investigating problems
4. Responding to inquiries and sending important notices
5. Improving the Service (only after aggregating data so that individuals cannot be identified)

3. Sending Information to External Generative AI Services

To provide the paid features (and the first free reward card), the following information is sent to external generative AI services, only when you use those features. Your name, email address and Apple identifier are never sent.

Recipient	Feature	Information sent
Anthropic, PBC (United States) Claude API	Weekly coaching	Summaries of body weight, body fat percentage and muscle mass; summaries of training (exercise, muscle group, weight, reps, etc.); target body composition and current status
Google LLC (United States) Gemini API	Physique images, reward cards	Age, height, body weight, body fat percentage, lean body mass, the sex used as the body composition standard, the sex of the person drawn in images, skin tone, and previously generated images (of a fictional person)

• Under each company's terms, the information sent is not used to train their AI models. Anthropic states that it does not use API inputs and outputs for training by default, and Google states that it does not use inputs and outputs of the paid Gemini API to improve its products (the Service uses the paid Gemini API).
• Each company may store the information sent for a certain period, for example to monitor misuse. Such storage is governed by each company's privacy policy.
• The recipients are companies in the United States of America. For information about the personal information protection system of the United States, see the survey results on the website of Japan's Personal Information Protection Commission (https://www.ppc.go.jp/personalinfo/legal/kaigai/). Under their data processing agreements with the Operator (Anthropic's "Data Processing Addendum" and the data processing terms set out in Google's Gemini API Additional Terms of Service), each company commits to handling information only to the extent needed to provide the Service and within the Operator's instructions, to taking security measures, to confidentiality obligations for employees who handle the information, to cooperating with requests from individuals for disclosure, correction, deletion and so on, to deleting the information when the agreement ends, and to undergoing external audits. On this basis, the Operator considers that each company has taken measures corresponding to the eight principles of the OECD Privacy Guidelines.

4. Provision to Third Parties

The Operator does not provide personal information to third parties without your consent, except in the following cases:

1. When required by law
2. When necessary to protect a person's life, body or property and it is difficult to obtain your consent
3. When information is sent to external generative AI services to provide the Service, as described in section 3
4. When work such as running servers is outsourced to the extent needed to achieve the purposes of use

5. Storage and Deletion

• Information is stored on servers in Japan.
• Records, images and coaching history are stored while your account exists. You can delete individual records and images in the app.
• When you request deletion of your account, your data is kept for one month from that time and then all deleted. During that month, you can download the images you generated and cancel the deletion.
• Information contained in backups kept in case of failure is deleted within 30 days of the deletion above (up to about two months after the deletion request).
• When your account is deleted, the link with "Sign in with Apple" is also removed.

6. Security Measures

• All communication is encrypted (HTTPS).
• Records and images can only be retrieved after authenticating as the account holder, and images are not served from public URLs.
• Administrative access to the servers is limited to the Operator.
• The Operator handles personal information in compliance with the law and this Policy.

7. Requests for Disclosure, Correction, Deletion, etc.

You may request notification of the purposes of use, disclosure, correction, addition or deletion, suspension of use or erasure, and suspension of provision to third parties of your personal information held by the Operator. Please contact us at the address below. After confirming your identity, we will respond without delay in accordance with the law. Most records and images can be viewed, corrected and deleted directly in the app.

8. Operator Information and Contact

• Operator: Masataka Kamochi
• Address: Provided without delay upon request.
• Contact (including complaints): support@wybbapp.com

9. People Under 18

The Service is intended for people aged 18 or older, and we do not knowingly collect information from people under 18.

10. Ads, Videos, Analytics and Cookies on the Website (External Transmission)

On the exercise guide pages of the Operator's website (https://wybbapp.com), we use Google AdSense, an advertising service of Google LLC, to cover the cost of running the site.

• Third-party vendors, including Google, use cookies to serve ads based on your past visits to this site and other sites.
• Google's use of advertising cookies enables it and its partners to serve appropriate ads based on your visits to this site and other sites.
• You can turn off personalized ads in Google's Ads Settings. You can also turn off third-party vendors' cookies at www.aboutads.info.

Recipient	Google LLC (United States)
Information sent	URL of the page viewed, referring URL, browser and device type, IP address, identifiers stored in cookies, etc., and the date and time of viewing
Purpose	Serving ads, measuring ad performance, and preventing fraudulent clicks
Handling by the recipient	How Google uses information from sites or apps that use its services

YouTube videos

The exercise guide pages introduce videos from gyms' official channels using YouTube (Google LLC) embeds.

• When you open a page, video thumbnail images are loaded from Google's servers. At that time, the URL of the page viewed, browser and device type, and IP address are sent to Google.
• The YouTube player (privacy-enhanced mode) is loaded when you press the play button. When you play a video, Google records viewing information and may use cookies and similar technologies. This is handled as described under "Handling by the recipient" in the table above and in Google's Privacy Policy.

Analytics (Google Analytics)

On all pages of the website, we use Google Analytics, a service of Google LLC, to understand how much each page is read and to improve the content.

• Google Analytics uses cookies to send Google information such as the URL of the page viewed, referring URL, browser and device type, IP address, and the date and time of viewing. No information that identifies an individual, such as a name, is sent.
• The aggregated results are used only by the Operator to check page views and referrers. This is handled as described under "Handling by the recipient" in the table above and in the Google Analytics Terms of Service.
• You can stop data from being sent to Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

• Ads are shown only on the exercise guide pages. They are not shown on the top page, the terms, this Policy and so on.
• Information in your app account and your records is never used for ads or analytics on the website. The app contains no analytics tools, and we do not link browsing information between the website and the app.

11. Changes to This Policy

The Operator may change this Policy in line with changes in laws or in the Service. Important changes are announced in the Service before they take effect.

Established October 4, 2026
Revised October 18, 2026 (added information about ads and videos on the website)
Revised October 19, 2026 (added information about analytics on the website)