Your data stays on your phone.

Whole (“the app”, “we”, “us”) is published by Commotion Labs, a sole proprietorship in Saskatchewan, Canada. You can reach us at gideon@commotionlab.com.

This policy covers the Whole iOS app (bundle identifier com.commotionlab.overload) and this website, whole.commotionlab.com. It does not cover services you choose to connect to Whole, such as Apple or Spotify. Those are run by other companies under their own policies, and we point to them below.

Whole is built to work on your iPhone without a Whole account in the cloud. We do not operate a server that receives your training, health, photo or mindfulness data, so for almost everything described here, the answer to “where does it go?” is “nowhere except your phone.”

This website. The site is a static page. It sets no cookies and runs no analytics or scripts. It is hosted on Cloudflare, which may process technical request data such as your IP address to deliver pages and protect against abuse.

This is everything the app works with, why, and where it lives. None of it is sent to us.

Whole does not ask for your location, contacts, calendar, camera, microphone or advertising identifier, and it does not collect device fingerprints.

Whole uses the information above for one purpose: to run the features you ask for, on your phone. That means building and adjusting your training program, suggesting weights and reps, summarising your week, giving recovery context, playing generated sounds, and scheduling reminders.

• All planning and recommendations are calculated on your device with fixed, published rules. No AI or machine-learning service receives your data.
• We do not build advertising profiles, send marketing, sell data, or make decisions about you that have legal or similarly significant effects.
• We do not combine your Whole data with data from other sources.

Connecting Apple Health is optional. Whole asks for read access and write access separately, and the app works fully without either.

What Whole reads, if you allow it

Body weight, sleep analysis, resting heart rate, heart rate variability and step count. These appear as recovery context next to your training.

What Whole writes, if you allow it

Your completed workouts, saved to Apple Health.

Our commitments for Health data

• It is used only to show you context in the app and to save workouts you finish.
• It is never used for advertising, marketing or data mining, and it is never sold.
• It is never disclosed to third parties, never sent to our servers (we have none that receive it), and never stored in iCloud by Whole.

Changing your mind

Open Settings › Health › Data Access & Devices › Whole to turn any category off. Workouts Whole has already saved remain in Apple Health until you delete them there.

When you add a progress photo, Whole uses Apple’s photo picker. Whole only receives the photos you pick, and it cannot browse the rest of your library.

• Selected photos are resized and stored as JPEG files in the app’s private storage on your device.
• They are never uploaded, and they are not added to your Photos library.
• They are removed when you delete them in the app, delete your account in the app, or delete the app.
• They are included in a backup file only if you choose to include them (see Backups and exports).

Notifications are optional. Whole uses local notifications only: rest-timer alerts during a workout and weekly workout reminders on the days you train. They are scheduled on your phone, and Whole does not use remote push notifications, so no device token is sent to us or anyone else.

If you wear an Apple Watch, iOS may mirror these alerts to it. You can change or turn them off in the app or in Settings › Notifications › Whole.

Whole uses Sign in with Apple so the data on your phone belongs to one Apple ID. Apple may share a stable user identifier and, the first time only, your name and either your real email address or a private relay address, depending on what you choose.

• These details are kept in your iPhone’s Keychain and are not sent to us.
• Whole uses your first name to greet you and checks your Apple sign-in status with Apple while the app is in use.
• If a different Apple ID signs in on a phone that still holds another person’s Whole data, the app erases that data first.
• To stop using Sign in with Apple for Whole, go to Settings › your name › Sign-In & Security › Sign in with Apple › Whole and choose Stop Using Apple Account. Whole then signs you out.

Apple’s handling of your Apple Account is covered by Apple’s Privacy Policy.

If you connect Spotify, Whole can pick a playlist that suits your workout, show what is playing, and start, pause or skip music. Spotify Premium is required for playback control.

How the connection works

• You sign in on Spotify’s own sign-in page, shown in a secure system sheet. Whole never sees your Spotify password.
• Whole asks for these permissions: read playback state, modify playback state, read currently playing, and read your private and collaborative playlists.
• Whole talks to Spotify directly from your phone over encrypted HTTPS connections (accounts.spotify.com and api.spotify.com). Nothing passes through a server of ours.
• Your access and refresh tokens are stored in the iPhone Keychain. Your Spotify display name, genre choices and recent workout themes are saved on your device.
• Whole sends Spotify only what it needs to control playback and read playlists. It does not send Spotify your training, health or mindfulness data.

Disconnecting

In Whole, go to Profile › Workout music and choose Disconnect. This deletes the tokens and saved Spotify details from your phone. Deleting your account in Whole also disconnects Spotify. You can also remove Whole’s access in your Spotify account under Apps.

What Spotify collects about you is governed by Spotify’s Privacy Policy.

The music, nature sounds, binaural beats and breath cues in Whole are generated on your device while the app is running. They are not downloaded or streamed from us.

Whole does not record audio and does not request access to your microphone, camera, location, contacts or calendar.

In Profile › Backup and restore you can create a backup file. It is a JSON file containing your profile, training preferences, programs and revisions, workout sessions, body measurements and recovery check-ins. Progress photos are included only if you choose to include them.

• You decide where the file goes using the iOS share sheet (“Share or save backup”): Files, AirDrop, email or anywhere else. We never receive it.
• The file is not encrypted. It contains personal health and fitness information, so store and share it as carefully as you would any sensitive document.
• Restoring a backup checks the file first and then replaces the data in the app. Nothing changes if the file is invalid.

Because the data stays on your phone, you control how long it is kept. It stays until you remove it. We hold no copy.

If you use iCloud Backup or back up your iPhone to a computer, iOS may include Whole’s data in those device backups. They are managed by you and Apple, not by us. Deleting data in Whole removes it from future backups.

We do not sell, rent or share your personal information. There are no advertisers, data brokers or analytics providers involved in the app.

• Apple provides the operating system, Health, Sign in with Apple, and device backups if you turn them on.
• Spotify receives requests from your phone only if you connect it.
• Legal requests. We do not hold your app data, so we have nothing to hand over in response to a request for it.
• Diagnostics from Apple. If you turn on sharing analytics with developers in iOS (Settings › Privacy & Security › Analytics & Improvements), Apple may give us aggregated, de-identified crash and usage reports. If you test Whole through TestFlight and send feedback, we receive what you choose to send, such as your email address and screenshots. We use this only to fix problems.

Whole does not track you. It does not follow you across other companies’ apps or websites, does not use the advertising identifier, and does not include advertising or analytics SDKs, so it never shows the App Tracking Transparency prompt.

We reduce risk mainly by not collecting your data in the first place. With no accounts and no servers holding your information, there is nothing to breach on our side.

• Your data is stored in the app’s protected storage on your iPhone, covered by iOS data protection and your passcode.
• Sign-in details and Spotify tokens are kept in the Keychain.
• The only network connections the app makes are to Spotify, over HTTPS, and only if you connect it.

You can help by using a passcode and Face ID or Touch ID, keeping iOS up to date, and handling exported backups carefully. No system is perfectly secure, and we cannot guarantee absolute security.

Whole is not directed to children under 13, or under 16 where local law sets a higher age, and we do not knowingly collect information from them. Since the app keeps data on the device, a parent or guardian who is concerned about a child’s use can delete the data and the app at any time. If you have questions, contact us.

Because your information lives in the app, you can exercise most rights yourself, immediately:

• Access and portability: create a backup file in Profile › Backup and restore.
• Correction: edit your profile, measurements and logs in the app.
• Deletion: use Delete account in Profile, or Delete all my data under Backup and restore.
• Withdraw consent: turn off Health, Photos, Notifications or Spotify at any time in iOS Settings or in Whole.

Depending on where you live, such as Canada (PIPEDA and provincial laws), the European Economic Area and United Kingdom (GDPR and UK GDPR) or California (CCPA/CPRA), you may also have rights to ask what is held about you, to object, and to complain to a regulator, such as the Office of the Privacy Commissioner of Canada or your local data protection authority. To the extent such laws treat us as responsible for any of your information, we process it on your device only to provide the service you request, and for Apple Health data only with your consent. We do not sell or “share” personal information as those terms are used in California law.

You can write to us at any time at gideon@commotionlab.com. We aim to reply within 30 days. Whole does not transfer your personal information to us across borders, because it does not leave your device. If you connect Spotify, its own policy covers any transfers on its side.

Whole provides general training and wellness guidance. It is not a medical device and does not diagnose, treat or prevent any condition. Recommendations come from fixed rules and your own inputs, and they are starting points, not guarantees of results.

Talk to a qualified professional before starting an exercise program, especially if you have a medical condition, an injury, or are pregnant. Stop exercising and seek care if you feel pain, dizziness or unusual discomfort. In an emergency, call your local emergency number.

If we change how Whole handles information, we will update this page and the date at the top, and describe material changes in the log below.

• November 3, 2026First published.

Questions, requests or concerns about privacy? Email gideon@commotionlab.com.

Commotion Labs
Saskatchewan, Canada

For help using the app, see Support.