Skip to content
MuscleFlare

Legal

Privacy Policy

Last updated: 23 September 2026. MuscleFlare is operated by Conjora Limited, a company registered in Ireland ("we"). We are the data controller for personal data processed through muscleflare.com. Contact: hello@conjora.ie.

The short version

  • The calculators work without an account, and what you type into them stays in your browser.
  • If you create an account, we store what you choose to save — check-ins, results and profile — to show it back to you. We never sell it.
  • We use no advertising or tracking cookies.
  • You can export (Pro) or delete your MuscleFlare data at any time from your account settings.

What we collect and why

Calculator inputs (no account). Processed in your browser. Your basic numbers (sex, age, height, weight, body fat) and unit preference are remembered in your browser's local storage for convenience; they are not sent to us.

Account data. Email address and password (handled by Google Firebase Authentication). Legal basis: contract.

Health and fitness data you choose to save. Bodyweight, body-fat estimates, body measurements, lift estimates, notes and saved calculator results. This can be health data under GDPR Article 9; we process it only because you explicitly choose to save it, for the single purpose of showing you your progress (Article 9(2)(a) — explicit consent, which you give by saving and can withdraw by deleting it). It is stored in Google Cloud Firestore and is accessible only to your signed-in account through our servers.

The Flare Analyst. When you ask a question, a summary of your saved data and your question are sent to Google's Gemini model via the Vercel AI Gateway to generate the answer. Neither provider may use it to train models under their terms. We do not store your conversations.

Payments. Handled by Stripe. We receive your subscription status and a customer reference — never your card details.

Product analytics. Cookieless PostHog analytics (EU region) in memory-only mode record anonymous usage events such as "calculator used" so we can improve the product. No cross-site tracking, no advertising profiles.

Emails. We send transactional emails (welcome, password reset). No marketing emails without your consent.

Processors

Google (Firebase Authentication, Firestore, Gemini), Vercel (hosting, AI Gateway), Stripe (payments), PostHog (analytics), Google Workspace (email). Where data leaves the EEA, it is protected by Standard Contractual Clauses or an adequacy decision.

Retention

Account data is kept while your account exists. Deleting your MuscleFlare data in Settings removes your profile, check-ins and saved results immediately. Payment records are kept as required by Irish tax law.

Your rights

You can access, correct, export, restrict or delete your data, object to processing and withdraw consent at any time. Email hello@conjora.ie. You can also complain to the Data Protection Commission (dataprotection.ie).

Children

MuscleFlare is for adults. Accounts are not intended for anyone under 16.