Privacy policy

This policy explains what Working Weekends LLC collects when you use the 21 Minutes app or this website, why we collect it, and what you can do about it.

The short version

• We collect what the product needs to work, and not more.
• Health data never reaches advertising or analytics. Not ours, not anybody else's.
• We do not sell your data. There is no version of this where we do.
• You can get a copy of everything, or have it deleted, without signing in.

What we collect

When you create an account

• Your name and email address
• Your date of birth, which sets the age gate described below
• Your training goal and the conditions you choose to tell us about

If you choose to add them

The app asks for these a little at a time, says why each time, and works without them.

• Your country, which sets the body ranges the tools use, such as BMI cut-offs
• How you eat (vegetarian, eggetarian, vegan, Jain or non-vegetarian), so tips fit
• What you train for, in your own words, which the app shows back to you on hard days and in a comeback reminder
• Your usual training times and the daily moment you tie them to, which set when your reminders come and what they say
• A target weight, if you are 18 or over
• A phone number, if you are 18 or over. It is used only to call or message you back about a help request you send, never for marketing, and never shared.

When you train

• Sessions started and completed, and when
• The walks after a meal, one-minute snacks, interval walks, Morning 3, body checks and heel drops you do in the app: when each one ended, how many heel drops, and your body check results, so they are there on every phone you sign in on
• Your streak, XP and Time Bank total
• Manual measurements you enter
• Progress photos, if you take them. These are stored encrypted.

When you ask for help

• Your request and our replies, its topic, and any screenshots or screen recording you add. Screenshots have their location and camera details removed on your phone first.
• If you leave "Include app details" on: the app's version, your phone's model and system, and your plan and day. Never your health answers.
• A closed request and its files are deleted 180 days after it closes, and all of them when you delete your account.

When you invite a friend

• Your invite code, who invited whom, and the golden frame you both earn. Each of you sees only the other's first name, never an email.

Saved

• The articles and moves you save, so they are there on every phone you sign in on.

Tenzo coins

• The points you earn and what earned them (a session, your water goal, a walk after a meal, a one-minute snack or Morning 3), on which day, and the streak freezes you buy with them. Coins are never money: they cannot be bought, sold or cashed out.

When you join a circle

• The circle you start or join (for 18 and over), the cheers you give and get, and whether its board is on. The people in your circle see your first name, whether you trained today and how many days this week. Never your email, weight, measurements or health answers. Leaving the circle removes you from it at once.

Kept on your phone only

• How you feel before and after a session, if you answer. It is never sent to us.

Health data, if you allow it

With your explicit permission the app reads your steps and sleep from Apple Health or Health Connect. We read them, we never write anything back, and you can withdraw the permission in your phone's settings at any time without losing anything else.

If you are 18 or over and connect them in Measurements, the app also reads your weight and body fat, for example from a smart scale. These are asked for separately and are saved with your measurements on our servers, exactly like a value you type, so they show on every phone you sign in on. You can stop at any time in Measurements and delete any value there.

Steps and sleep are used to calculate your Health Score and to shape your session, and they stay on your phone. None of this health data is shared with advertising networks or analytics providers, and it is excluded from our logs and error reports by configuration rather than by convention.

Technical data

Device model, operating system version, app version, and crash reports. This is how we find out something is broken before you have to tell us.

Users under 18

You tell us your age when you sign up. If you are under 18 you get the full training experience, streaks, XP, your Time Bank, the library and health sync. Image processing features are not available to you. No progress photo analysis and no body projection. The feature is switched off for the account, not the account restricted. The app does not ask you for a target weight or a phone number, and our servers do not keep either for anyone under 18.

Legal basis

In the EU and UK we rely on contract for the data needed to run your account, explicit consent for health data, and legitimate interest for security and fraud prevention. In India we process under the Digital Personal Data Protection Act on the basis of the consent you give at sign-up, which is specific, informed, and withdrawable.

Who we share it with

We use a small number of processors, each under contract, each for one job:

• Hosting and database, to run the service
• Apple and Google, who handle subscription billing and never send us your card
• Email delivery, for account and support email

That is the list. There is no advertising partner on it.

How long we keep it

• Account and training data: while your account exists, then deleted
• Support messages: two years, then deleted
• Crash and security logs: ninety days
• Transaction records: as long as tax law requires, and no longer
• Backups of our database: fourteen days, so a deleted account leaves them within fourteen days

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, object to processing, or withdraw consent. Email privacy@21minutes.co, or use the delete account page, which needs no sign-in.

We answer within thirty days. If you are not satisfied you can complain to your local data protection authority, and in India to the Data Protection Board.

Security

Everything travels over TLS. Progress photos are encrypted at rest. Access to production data is limited to the people who need it, logged when it happens, and reviewed.

Changes

If we change this policy in a way that matters, we will tell you in the app before it takes effect rather than quietly updating the date at the top.

Contact