1. Who is responsible
The data controller for MSCL App (iOS and Apple Watch) and msclapp.com is Mohamed Najim Zaitouni Zaitouni, sole trader registered in Spain, Calle Centelles 25, 3-2, 12500 Vinaròs (Castellón), Spain ("MSCL", "we"). Contact: info@msclapp.com.
2. Data stored on your phone
Your profile (age, sex, height, weight, target weight, level, equipment, goals, sleep times, foods to avoid), your workouts and sets, meal plans, scanned meals and their photos, water, weight and sleep logs are stored on your device (and on your Apple Watch when paired). Routines and standard diets are generated on your device. Data leaves your phone only as described in sections 3 to 6.
3. MSCL account
An MSCL account is needed to start the free trial and to use the ranking, friends and cloud copy. You can create it with email and password, Sign in with Apple or Google. We store: email, username, sign-in provider, country and city (for the ranking), language, the date you joined, your trial status and a session token. Apple or Google only tell us your email and a user identifier; we never receive your passwords for those services. We also receive daily activity totals (workouts, minutes, volume lifted, meals logged, steps, distance, active calories) so you can appear in the ranking you choose (global, country, city or friends).
4. Cloud copy
While you are signed in, the app uploads an encrypted copy of your local data (section 2, including a reduced copy of your recent meal photos) to our server so you can restore it on a new phone. One copy per account, replaced on each upload (the previous version is kept as a fallback), deleted when you delete your account or press “Delete copy”. It is never shared with other users or used for any other purpose.
5. AI features
Meal photos: the photo is sent over an encrypted connection to api.msclapp.com and forwarded to an AI vision provider (Anthropic, PBC) to identify food and estimate portions; the photo is processed and discarded, we keep only a one-way hash with the nutrition result (so the same photo returns instantly), an anonymous counter for the daily fair-use limit and technical logs (time, model, token counts). Personal strategy: when you finish signing up and once a month, your profile figures, your calculated targets, foods to avoid and 30-day summaries (sessions, minutes, steps, sleep, weight trend) are sent to the same provider to write your strategy. Coach requests: when you write a wish for a routine or a diet, that text and your profile figures are sent to write the plan. Written meals and food search send only the text you type. Nothing identifying you (no name, email or photo) is included in AI requests. AI providers do not use this data to train their models under our agreement.
6. Friends and public profile
If you add a profile photo, post a workout, meal or progress, or add friends, that content is visible to the users you choose (friends) and your username, country, city, badges, number of workouts and ranking position are visible to any MSCL user who searches for you. You can delete posts, remove friends and remove your photo at any time; deleting your account removes all of it. If you join through a friend's invite, the invite is linked to both accounts to grant the referral reward.
7. Apple Health and watch
With your permission the app reads heart rate, resting heart rate, HRV, sleep, steps, active energy and workouts from Apple Health and writes workouts, water and nutrition back. Apple Health data is used on your device; it is not uploaded except the daily totals you rank with (steps, distance, active calories) and the summaries in your cloud copy and personal strategy (sections 4 and 5), and only while you are signed in. It is never shared with third parties for advertising.
8. Music
Apple Music playback is controlled on your device through Apple's player. The “Open Spotify” button simply opens the Spotify app; we receive no data from Spotify.
9. Subscriptions
Payments are handled by Apple through the App Store. We do not see or store your card details; Apple's privacy policy applies to the purchase.
10. Website
If you leave your email on msclapp.com we store it (Cloudflare D1) to send you the download link and launch news; ask us to delete it at any time. The website uses no advertising or tracking cookies; it remembers your black or white mode choice in your browser only.
11. Notifications
Reminders are scheduled locally on your device and can be switched off in the app or in iOS Settings.
12. Retention and deletion
Local data disappears when you delete the app. Account data, ranking totals, posts, photos and the cloud copy are kept while your account exists and deleted within 30 days of deleting the account (Profile › Account › Delete account) or writing to us. Scan logs are kept for a maximum of 12 months. Backups of our server are kept for 7 days.
13. Processors and transfers
Anthropic, PBC (AI analysis, United States) · Render Services, Inc. (hosting of api.msclapp.com, United States) · Cloudflare, Inc. (website hosting and email form, DNS) · Zoho Corporation (email, EU) · Apple Inc. (distribution, subscriptions, Sign in with Apple) · Google LLC (Google sign-in) · Open Food Facts (barcode data). Transfers outside the EEA rely on the EU standard contractual clauses or the EU–US Data Privacy Framework where the provider is certified.
14. Legal basis
Performance of the contract with you (providing the app and your account), your consent (Apple Health, photos, notifications, friends features) and our legitimate interest in keeping the service secure and sustainable (fair-use limits, technical logs).
15. Children
MSCL App is for adults aged 18 and over. We do not knowingly collect data from anyone under 18.
16. Your rights
Under the GDPR you have the right to access, correct, export or delete your data, to restrict or object to processing and to withdraw consent. Write to info@msclapp.com; we answer within 30 days. You may also complain to the Spanish Data Protection Agency (aepd.es).
17. Changes
Changes are posted on this page with a new date; material changes are also announced in the app. Previous version: 29 October 2026.