Privacy policy

Filta is a personal workout planner. It finds workout videos you might like, fits them around your calendar and learns which ones you actually finish. This page says what information Filta holds about you, why, and how to get it removed. Filta is run by its founder in the United Kingdom.

What Filta collects

• Account: your email address, and, if you sign in with Google, your name and profile picture; plus the country your connection appears to come from when you sign in. If you sign in by email instead, Filta emails you a link that works once and expires after 15 minutes, and keeps only a fingerprint of that link and the address it went to for a day.
• Training profile: the goals, weekly commitment, preferred times, equipment, likes and dislikes and any restrictions you type in during set-up. Restrictions such as “post-partum” or “bad back” can be health information; they are used only to filter which workouts are offered. Filta asks for your permission before storing any of it and you can withdraw that in Settings, which deletes those answers.
• Calendar busy time (only if you connect a calendar): the start, end and title of events on your own calendar, so workouts are never planned on top of them. Filta does not read attendees, descriptions, locations, your calendar settings or calendars other people share with you.
• What you do in Filta: which workouts were planned, started, completed, skipped or rated, and how much of a video was watched in Filta’s player. Filta adds these up across everyone to show, next to a workout, how many Filta sessions it had this week, what share of them were finished and how people rated the effort. Those figures are totals only, are never shown for fewer than five sessions or ratings, and nothing in them can be traced back to you. Your name, ratings and any notes you type are never shown to anyone else.
• YouTube likes (only if you connect YouTube): the workout videos you have liked and the names of channels you subscribe to.
• Messages you type into the “Tell Filta” box, which are interpreted by a language model to work out what to change on your plan.

Subscription: if you subscribe, Stripe takes your card details; Filta never sees them. Filta stores only your Stripe customer id and whether the subscription is active.

Filta does not collect location or contacts, and runs no advertising or third-party analytics. It counts its own page views: each visit is recorded as the date, the page, the website you came from (its name only), the country the connection appears to come from, and a code made from your connection and browser that changes every day and cannot be traced back to you or followed across days. No cookie is involved. The only measurements it holds are the ones you type in yourself: weight and height, and the sex and age band you choose to give.

Google user data

Signing in with Google gives Filta only your name, email address and profile picture. Calendar and YouTube access are asked for separately, each at the moment you choose to connect it, and each with the narrowest permission Google offers for the job:

• Google Calendar (see, create, change and delete events on calendars you own): Filta reads the start, end and title of events on your primary calendar so workouts are planned in free time and moved when a meeting lands on one, and it creates, updates and deletes the workout events it placed there. It never edits an event it did not create, and it never touches calendars that are shared with you.
• YouTube (view your YouTube account, read-only): Filta imports the videos you have liked and the channels you subscribe to, keeps only the ones that look like workouts, and uses them to start your recommendations from your taste. Nothing is posted, liked, subscribed or changed on your behalf.

This data is used only to plan your week and to learn what you like. It is never sold, never used for advertising, never used to build or train artificial-intelligence or machine-learning models (personalised or otherwise), and never shared with anyone else. No person at Filta reads it, except with your explicit permission to resolve a support request you have raised, or where the law requires it. You can disconnect either connection in Settings, which deletes the stored access token straight away and, for YouTube, the liked videos and subscriptions Filta imported; you can also remove Filta’s access at any time from your Google account permissions, and Filta removes the imported YouTube data as soon as it learns of that. Filta’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

YouTube

Filta uses YouTube API Services to search public workout videos, show their titles and a still or thumbnail served by YouTube, play them in the official YouTube player and, if you connect your account, read your liked videos. By using Filta you also agree to the YouTube Terms of Service, and Google’s handling of your information is described in the Google Privacy Policy. Filta stores the id, title, channel and length of videos it has shown or imported for up to 30 days before refreshing them, and the record of what you liked or completed for as long as you have an account.

Where it is kept and who can see it

Your data is stored in a database in London (Neon) and served from London (Vercel). The only other services that receive any of it are Google (sign-in, calendar, YouTube, and the mailbox behind the contact address below), Stripe (your email and name, to bill you), Anthropic (the text you type into the “Tell Filta” box, together with a summary of your plan, to interpret the request; not used to train models) and, if configured, OpenAI for the same purpose. Nothing from your Google Calendar or YouTube account is sent to Anthropic, OpenAI or Stripe. Nobody else sees your data.

How Filta protects your data

The calendar and YouTube data above is the most sensitive information Filta holds, and it is protected in these specific ways:

• Encryption in transit. Every connection between your browser and Filta, and between Filta and Google, Neon, Stripe and Anthropic, uses HTTPS (TLS 1.2 or later). Filta serves nothing over plain HTTP.
• Encryption at rest. The database and its backups are encrypted at rest (AES-256). On top of that, the Google access and refresh tokens for your calendar and YouTube connections, and any private calendar link you paste, are encrypted a second time by Filta itself (AES-256-GCM) with a key that lives only in the server’s configuration, never in the database, so a copy of the database alone cannot be used to reach your Google account.
• Tokens never leave the server. Google tokens are stored and used only on Filta’s server. They are never sent to your browser, never written to logs, and never shared with any other service.
• Least access. Filta requests the narrowest Google permission that each feature needs, and only when you turn that feature on. The database accepts connections only from Filta’s servers, over TLS, with credentials held as server secrets. Only the founder has administrative access, protected by two-step verification, and that access is used for running the service, not for reading your data.
• Minimal storage. Filta keeps only the fields it uses: for calendar events the start, end and title; for YouTube the video id, title, channel and length. Anything else Google returns is discarded on arrival and never stored.
• Deletion you control. Disconnecting a calendar or YouTube in Settings, revoking Filta at Google, or deleting your account removes the tokens and the imported data from the live database immediately; database backups age out within 30 days.
• If something goes wrong. Should Filta discover a breach affecting your Google data, it will tell you and the UK Information Commissioner’s Office without undue delay and within 72 hours of becoming aware of it, and revoke and rotate every affected token and key.

Cookies

Filta sets a sign-in cookie, a cookie that remembers you have seen the tab tour, and, on the draft site, a cookie for the site password. Signing in with Google, or connecting Google Calendar or YouTube, also sets a few short-lived cookies that only carry that round trip and expire within fifteen minutes. There are no advertising or analytics cookies, and Filta keeps nothing else on your device. The YouTube player runs in YouTube’s privacy-enhanced mode, which sets no cookie until you press play; from then on YouTube, and Stripe’s checkout page, set their own cookies under their own policies.

How long, and how to delete it

Filta keeps your data while you have an account. Disconnecting a calendar removes the stored token and mirrored busy time straight away; disconnecting YouTube removes the stored token and the imported liked videos and subscriptions straight away. Settings → Account → Delete account erases your account and everything in it immediately. It also asks whether to delete the workouts Filta placed in your calendar, and removes them unless you say otherwise — they are events in your own calendar, so the choice is yours. To get a copy of your data, or if you would rather we did the deletion, email privacy@filta.tv and it will be done within 30 days.

Not medical advice

Filta suggests workouts and volumes from what you tell it. It does not assess your health. Check with a professional before starting a new exercise programme, especially after an injury, illness or pregnancy.

Your rights

Under UK data protection law you can ask to see, correct or delete your data, and object to how it is used. Use the contact above. You can also complain to the Information Commissioner’s Office.

Changes

This page will change as Filta develops; the date at the top says when it last did.