This Privacy Policy explains how NORDIC APP STUDIO LTD ("we", "us" or "our") processes personal data when you use the Big III app for iPhone and iPad, communicate with us, or use related services (together, the "Service"). Big III is a strength training app for the squat, bench press and deadlift.
NORDIC APP STUDIO LTD is the data controller for processing that we determine. Apple and the other providers named below act as independent controllers or processors for their own services, and their privacy notices also apply.
1. Data stored on your device and in your private iCloud
Big III stores the information it needs to build your programme and record your progress. Depending on what you provide, this can include:
- your chosen display name, preferred units and plate scale;
- age or age bracket, gender, height and body weight that you enter yourself;
- training experience, current and estimated lifts, goals, schedule, equipment and spotter access;
- injuries or limitations you report, and safety preferences;
- planned and completed workouts, sets, repetitions, weights, missed repetitions and notes;
- progress calculations, estimated and confirmed maxes, streaks, plate badges and other achievements; and
- messages exchanged with the in-app coach.
This data is kept with Apple's on-device storage. If iCloud is available and enabled for Big III, it is also stored in your private CloudKit database so it synchronises across your Apple devices. That database belongs to your iCloud account. We cannot read it, and Apple controls the iCloud infrastructure.
The legal basis is performance of our contract with you. Optional fields are processed because you choose to provide them.
2. Apple Health data
With your explicit permission, Big III reads body mass, height, date of birth and biological sex from Apple Health, to calibrate strength standards and programming. It also reads heart rate variability, resting heart rate and sleep, to show a daily readiness to train and suggest a lighter workout on a poorly recovered day. Big III never writes to Apple Health.
Readiness is worked out on your device and is not stored. When you ask the coach a question, it may be told your readiness level (for example “low”) through Apple’s Private Cloud Compute. Your heart rate, heart rate variability and sleep values are never included.
Values read from Apple Health are kept only on the device that read them. They are not saved to your iCloud database, are not sent to us, and are not used for advertising or marketing. If you type a value into Big III yourself, it is treated as your own profile entry and synchronises like the rest of your profile.
The legal basis is your explicit consent. You can withdraw access at any time in the iOS Settings or Health app. Deleting Big III removes the Health values it kept on the device.
Voice
If you tap the microphone, Big III uses your iPhone’s microphone and Apple’s on-device speech recognition to turn what you say into text in the message field. Audio is processed on your device, is not recorded or stored, and is not sent to us. The text is handled like anything you type.
3. Apple Intelligence and Private Cloud Compute
Where your device supports Apple Intelligence and it is enabled, Big III uses it in two ways:
- Simple workout logging, such as "same weight, four reps", is interpreted on your device by Apple's on-device model. The text, the current exercise, your unit and the selected weight stay on the device.
- Coaching questions and explanations are processed by Apple's Private Cloud Compute. With your question, Big III sends a limited training context: your age in years, current body metrics, equipment, injury flags you reported, lift estimates and their confidence, your completed-session count, the current workout, recent conversation and training history, and relevant passages from the app's built-in reference library. It never sends your exact date of birth, account identifiers or analytics settings.
Apple states that Private Cloud Compute processes a request only to fulfil it, does not store it, and does not make it accessible to Apple. We do not receive the content of these requests. Big III stores coach conversations in your private iCloud database so you can see them again (section 1). Apple's terms and privacy information apply to Apple Intelligence.
If Apple Intelligence is unavailable, workout logging and the rest of Big III still work. Coaching questions are never quietly answered by a different model.
4. Subscriptions and purchases
Subscriptions are sold through Apple's App Store using StoreKit. Apple processes your payment and Apple Account. We never receive your full payment card details.
Big III uses RevenueCat to record subscription events for purchase analytics and entitlement support. Data can include product identifier, purchase and subscription status, transaction information, country or currency information from the store, and a pseudonymous app user identifier generated by RevenueCat. It is not linked to your name or used for tracking.
The legal basis is performance of the subscription contract, our legitimate interest in understanding and supporting purchases, and legal obligations for accounting and tax.
5. App recommendations and advertising
Unless you subscribe to Big III Pro and turn recommendations off, Big III shows one app recommendation at a time. It is either a recommendation for Two Plates, our bench-press app, or an advert from Kickstart Exchange, a cross-promotion network for independent Apple developers operated by Hudson Heavy Industries Ltd.
The Two Plates recommendation is a plain link to the App Store and sends nothing when it is shown. Kickstart Exchange matches apps, not people. Its SDK sends app-level details only: the Big III key and bundle identifier, platform, app and SDK versions, and App Store country. It may briefly verify that Big III is a genuine App Store installation using Apple's signed app transaction, which Kickstart Exchange does not retain. It records impressions and taps per app, not per person, and keeps delivery records for about 30 days. Read the Kickstart Exchange privacy notice.
The legal basis is our legitimate interest in funding and promoting our apps without tracking. Big III Pro subscribers can switch recommendations off in Settings.
6. Two Plates membership on the same device
Big III and Two Plates are both published by NORDIC APP STUDIO LTD. They share a small storage area on your device (an Apple App Group) where each app records only whether you currently subscribe to it and when that was last checked. Big III uses this to offer Two Plates subscribers member pricing, and Two Plates can do the same for Big III subscribers. This information stays on your device and is not sent to us.
7. App settings service (Supabase)
When it starts, Big III downloads its current settings from our configuration service, hosted by Supabase. These settings control things like update notices, announcements, and which recommendation or member offer is shown. The request contains no personal data, account or device identifier. Like any web request, Supabase processes your IP address and basic request information to deliver the response and keeps it in short-lived service logs. Read the Supabase privacy policy.
8. Analytics and crash reporting
Big III does not currently use analytics or crash-reporting services. The app contains Google Firebase components that are switched off and have no project connected. If we enable them, we will update this Policy first and ask for your consent in the app before any data is shared.
9. Website and communications
BIGIII.COM is a static website without advertising trackers or analytics cookies. Like most web servers, it may temporarily log your IP address, browser or device information, requested pages, timestamps and errors, for delivery, security and troubleshooting. The legal basis is our legitimate interest in operating and protecting the website.
If you email us, we process your email address, your message and anything you choose to include, in order to respond and keep appropriate records. Please avoid sending unnecessary health information by email.
10. Service providers and recipients
- Apple: App Store, StoreKit, iCloud and CloudKit, HealthKit, Apple Intelligence and Private Cloud Compute.
- RevenueCat: subscription event recording and purchase analytics.
- Kickstart Exchange (Hudson Heavy Industries Ltd): app cross-promotion, as described in section 5.
- Supabase: delivery of app settings, as described in section 7.
- Hosting and email providers: website delivery and support communications.
- Professional advisers and authorities: where reasonably necessary to establish legal claims, protect rights or comply with law.
11. International transfers
Some providers may process data outside the EU or EEA. Where GDPR transfer rules apply, transfers rely on an adequacy decision, the European Commission's Standard Contractual Clauses or another lawful safeguard.
12. Retention and deletion
- On-device data, including Apple Health values, stays until you delete it, reset Big III or remove the app.
- Settings → Reset in Big III deletes your profile, workouts and coach conversations from the device and from your private iCloud database. You can also manage Big III's iCloud data in iOS Settings → [your name] → iCloud.
- Purchase records are kept as long as needed to administer subscriptions and meet legal obligations.
- Support correspondence is kept while needed to resolve your request and protect legitimate legal interests.
- Website logs are kept for a limited period for security and troubleshooting.
Deleting the app does not cancel an App Store subscription. Manage subscriptions in your Apple Account settings.
13. Your privacy rights
Subject to applicable law, you may have the right to access, correct, erase or port your personal data, to restrict or object to processing, to withdraw consent for future processing, and to complain to a data protection authority. Most Big III data is under your direct control on your device and in your iCloud account.
To exercise a right, email dataprotectionofficer@nordicapp.studio. We may need to verify your identity first. In Sweden, you may complain to Integritetsskyddsmyndigheten (IMY) at imy.se, or to the authority where you live or work.
14. Security
We rely on Apple's device and iCloud protections and on technical and organisational measures intended to prevent loss, misuse and unauthorised access. No system is completely secure. Protect your device and Apple Account with a passcode and two-factor authentication.
15. Children
Big III is not directed to young children. If local law requires parental consent for a minor to use the Service, the minor must use it only with that consent. Contact us if you believe a child has provided personal data unlawfully.
16. Changes to this Policy
We may update this Policy when the Service, providers, law or our data practices change. Material changes will be communicated in a reasonable manner where required. The date at the top shows the latest update.
17. Contact
For privacy questions or requests: dataprotectionofficer@nordicapp.studio.
For Big III support: SUPPORT@BIGIII.COM.