Privacy Policy

Effective Date: October 2, 2026

Last Updated: October 25, 2026

Sojourundo is a fitness application owned and operated by MilForge Labs LLC (“MilForge Labs,” “we,” “us,” or “our”). This Privacy Policy explains how Sojourundo collects, uses, shares, stores, and deletes personal information.

Sojourundo is currently intended for users who are at least 18 years old and is intended for availability in the United States.

1 Information We Collect

Account and Profile Information

When you create and use a Sojourundo account, we may collect information including:

• First and last name;
• Email address;
• Age in years used to support fitness personalization;
• Sex;
• Height and weight;
• Measurement preferences;
• Fitness level;
• Fitness goals;
• Injuries or physical limitations;
• Weekly workout frequency; and
• Other profile preferences you choose to provide.

Your first name may be used to personalize your experience, such as displaying a welcome message on the Home screen.

For age eligibility, you enter a birthdate before signup, or once when an existing account has not completed screening. Our backend processes it temporarily to determine whether the entered date indicates an age of at least 18. We do not save the birthdate in your account, database, or app storage, intentionally log it, or send it to OpenAI. This is self-reported age screening, not identity or document verification.

For an eligible entry, the app temporarily stores a signed eligibility proof containing no birthdate or numeric age. The proof expires after 24 hours and is removed when applied to an account or discarded by the age-check flow. For eligible accounts, we retain the account identifier, an adult-eligibility result, the screening method, a server-recorded check date, and a random proof identifier used to prevent reuse. These records are removed when the account is deleted, subject to existing backup and provider-log retention. Under-18 entries are blocked from continuing through signup, and no birthdate or rejected eligibility record is saved by this screening feature. Normal provider request metadata may still be logged as described below. Privacy and Terms are available to read before entering a birthdate.

Profile age in years remains separate and is used for fitness personalization under your optional AI-sharing choices. We also record your AI permission, optional sharing choices, the accepted AI disclosure version, and server-recorded acceptance and update dates.

We separately record Privacy Policy review acknowledgments, including your account identifier, the document version, whether that version was a draft or published policy, and a server-recorded date. A review acknowledgment does not grant AI permission or constitute acceptance of the Terms. A new published policy version requires a new acknowledgment.

Support and Privacy Correspondence

When you contact support@sojourundo.com or privacy@sojourundo.com, we receive your email address and the message, attachments, and diagnostic information you choose to send. Support email drafts may include the app version, build number, device model, and operating-system version. You can review and edit the draft before sending it.

Please do not send passwords, password-reset links, identification documents, or unnecessary sensitive health information.

Equipment and Saved Spaces

Sojourundo allows you to identify fitness equipment manually or by taking or selecting a photograph for AI-assisted equipment recognition.

You may save confirmed equipment in named “Spaces,” such as “Home” or “Hotel 1.” A Space name is a user-created label and does not represent or require a physical address or GPS location.

Optional Profile and Space Photos

You may choose to add a profile photo or photos for your saved Spaces. These images are stored privately with your account and synchronized across your signed-in devices. They are not displayed to other users.

Before uploading, Sojourundo crops and resizes the selected image for display. Profile and Space display photos are separate from equipment photos submitted for AI recognition and are not sent to OpenAI.

Choose images you have permission to use, and avoid including unnecessary sensitive information.

Equipment Photos

When you choose AI-assisted equipment recognition, an equipment photo is processed for the purpose of identifying equipment shown in the image.

Sojourundo does not archive equipment photos in its server database or server storage as part of your account.

The mobile application creates temporary device files when selecting or capturing a photo and preparing it for recognition. Sojourundo attempts to remove the app-created cache files it tracks after recognition, when you remove photos or leave the equipment screen, and when processing fails. This does not delete an original photograph in your photo library or your saved equipment list. An interruption, forced app closure, or file-access error may leave temporary copies in the device cache; we do not guarantee immediate removal of every cached copy.

Equipment photos are transmitted to OpenAI for AI-assisted recognition. You should avoid including people, identification documents, addresses, computer screens, mail, name badges, or other unnecessary personal or sensitive information in equipment photographs.

Workout Information

Sojourundo may collect and store information related to your workouts, including:

• Available workout time;
• Workout objectives and preferences;
• Generated or selected workouts;
• Completed workouts;
• Exercises performed;
• Sets and repetitions;
• Weight or resistance used;
• Workout history; and
• Progress and performance information.

This information is used to provide the service, maintain workout history, and support workout personalization.

When you complete a set or exercise without entering an actual weight, Sojourundo records the prescribed load where one is specified. Repetitions or duration may also be recorded as prescribed rather than individually entered. These records do not independently verify that the prescribed work was performed.

2 How We Use Information

We use personal information to:

• Create, authenticate, and maintain your Sojourundo account;
• Provide and personalize Sojourundo features;
• Display profile information and personalized interface elements;
• Save equipment and Spaces;
• Generate workouts based on information you choose to provide;
• Maintain workout history and progress;
• Recognize fitness equipment from photographs you choose to submit;
• Maintain security, diagnose technical problems, and prevent misuse;
• Provide account-related and support communications; and
• Comply with applicable legal obligations.

Sojourundo does not currently use your email address to send marketing or product-update emails. Product-update communications may be offered in the future through a separate opt-in process. If such communications are introduced, this Privacy Policy and applicable choices will be updated as appropriate.

3 Artificial Intelligence Processing

Sojourundo uses OpenAI through server-side services to provide AI-assisted workout generation and equipment-photo recognition.

Before Sojourundo sends information to OpenAI, the application presents an AI disclosure and requests your explicit permission. The server checks your recorded permission before workout generation, exercise substitution, or equipment-photo recognition.

With AI permission, workout requests include confirmed equipment, available time, selected workout type and focus, fitness level, goals, limitations, sex, and measurement preference. Equipment recognition sends the equipment photos you choose to submit; those photos are not resent when generating a workout from the confirmed equipment list.

Information Sojourundo Must Not Intentionally Include in AI Requests

Sojourundo is designed so that the following information must never be intentionally included in requests sent to OpenAI:

• First name;
• Last name;
• Email address;
• Exact birthdate;
• Emergency-contact information;
• Avatar or profile photo; and
• Cover photo.

These exclusions apply regardless of your optional AI personalization settings.

Profile and Space display photos are not sent to OpenAI.

Because users may enter information into free-text fields or submit photographs, personal information could nevertheless be included accidentally in content supplied by a user. You should not enter unnecessary identifying information into fields that may be processed by AI and should avoid including personal information or people in equipment photographs.

AI requests use an explicit server-side allowlist rather than complete profile records. This does not automatically remove identifying information you choose to put in free-text fields or photographs.

Optional AI Personalization Information

You may separately choose whether Sojourundo may include the following information in AI requests for workout personalization:

• Age;
• Body measurements;
• Weekly workout frequency; and
• Relevant workout history.

These choices are optional, default OFF, and can be changed in Profile → Connections. Allowing core AI features does not automatically enable an optional category.

Body measurements include height and weight. Weekly workout frequency is your saved weekly target. Relevant workout history includes exercise names and completed sets, recorded repetitions, weights and units, and durations from up to three recent saved workouts; the complete account or workout record is not transmitted.

Sharing these details may help Sojourundo tailor workouts to your goals and experience. It does not guarantee that a workout will be better, safer, or more effective. You can still generate workouts without sharing these optional details.

Turning off an optional sharing category stops Sojourundo from intentionally including that category in future AI requests. It does not delete the underlying information from your Sojourundo account.

Withdrawing AI Permission Entirely

You may withdraw permission for Sojourundo to send information to OpenAI.

Because AI processing currently provides core Sojourundo functionality, including workout generation and equipment-photo recognition, those AI-dependent features will not function while AI permission is withdrawn.

Withdrawing AI permission does not automatically delete your Sojourundo account or information already stored in your account. You may separately delete your account.

You may choose to provide AI permission again later.

Withdrawal is available in Profile → Connections and applies to future requests. It does not recall requests already initiated or erase information already processed by OpenAI.

4 Service Providers and Information Sharing

We use service providers to operate Sojourundo.

Supabase

Supabase provides authentication, database, and related backend infrastructure.

Optional profile and Space display photos are stored privately with your account using Supabase Storage so they can synchronize across your signed-in devices.

Routine operational and authentication logs may contain information such as timestamps, request metadata, IP addresses, authentication events, status codes, and diagnostic information. Under Sojourundo's current configuration, routine provider logs are normally retained for up to seven days.

Sojourundo's optional Supabase authentication audit archive in the application database is disabled.

OpenAI

OpenAI processes information sent by Sojourundo for AI-assisted workout generation and equipment recognition.

Sojourundo currently sends applicable OpenAI requests with store: false. This setting does not mean that Sojourundo has Zero Data Retention with OpenAI.

Under OpenAI's standard API practices, abuse-monitoring records may contain submitted content and may normally be retained for up to 30 days, subject to OpenAI's applicable safety, security, and legal exceptions.

OpenAI states that API inputs and outputs are not used to train its models by default unless the customer affirmatively opts in to data sharing for that purpose.

MilForge Labs has disabled OpenAI's organization-level options for sharing API inputs and outputs, model feedback, and evaluation/fine-tuning data for model improvement. Sojourundo does not claim Zero Data Retention. These settings do not remove the provider's standard abuse-monitoring or applicable safety and legal retention described above.

Transactional Email Provider

Sojourundo uses Resend to deliver necessary account-related messages, including email verification and password resets through its authentication service, and relevant policy-update notices. Resend processes recipient email addresses, email contents (including verification or reset links), and delivery and diagnostic metadata needed to deliver and troubleshoot those messages.

Under Resend's published retention practices applicable to Sojourundo, email and log data is retained for 30 days. Resend's separate account-termination policy provides for deletion of remaining customer data within 90 days after termination of our provider account; deleting your Sojourundo account does not terminate MilForge Labs' Resend account or immediately erase Resend's delivery records.

Sojourundo does not use transactional account emails as consent for marketing communications.

Microsoft 365 and SharePoint

MilForge Labs uses Microsoft 365 shared mailboxes for support and privacy correspondence. Resolved support correspondence may be exported to a restricted SharePoint location for historical troubleshooting and reference if an issue recurs. Correspondence needed for an ongoing dispute or legal obligation may also be retained in Microsoft 365 or SharePoint.

These correspondence systems are separate from Sojourundo's account database and from the transactional email provider used for verification and password resets. Moving an email to SharePoint does not delete or end retention of that information.

5 Data Retention

Active account information, profile information, saved Spaces and equipment, and workout history are retained while needed to provide your Sojourundo account and services, unless you delete your account or applicable law requires otherwise.

Removing or replacing a profile or Space photo removes the previous image from active storage. If removal cannot be confirmed, the app displays a message asking you to contact support. Existing backup and service-provider retention practices remain as described elsewhere in this Privacy Policy.

For account-related policy-update emails, we retain minimal notice records while your account exists to prevent duplicate notices and troubleshoot delivery. These records include your account identifier, recipient email address, document version, attempt dates, processing status, and the email provider's message identifier. They do not include workout or health information. Account deletion removes these account-linked notice records from active systems. Existing backups and the email provider's records follow their separate retention periods described in this policy. These notice records are separate from routine technical logs.

Routine Supabase operational and authentication logs are normally retained for up to seven days under the current provider configuration. Provider security, safety, legal, or other specialized records may be subject to separate retention practices.

Sojourundo receives daily managed database backups with a rolling seven-day retention window. Backups are maintained for disaster recovery rather than analytics or marketing.

OpenAI maintains its own provider-level retention practices as described above.

Resolved support correspondence is retained for up to 24 months after resolution to investigate recurring issues, including copies archived in SharePoint. At the end of that period, we delete the correspondence unless a legal hold or another exception described below applies.

For completed privacy requests, we retain a minimal record of the request and its resolution for up to 24 months after completion. We remove unnecessary attachments and supporting information sooner when they are no longer needed to handle the request. These periods apply to copies in both Microsoft 365 and SharePoint; moving a record between those systems does not restart its retention period.

Records needed for an ongoing dispute, legal obligation, or the establishment, exercise, or defense of legal claims may be retained for as long as necessary for that purpose. Such records may be exported from Microsoft 365 to restricted SharePoint storage. Exported copies remain subject to the applicable retention decision; deletion from a mailbox alone does not remove archived copies.

We do not represent that every copy of information is removed from every provider or technical system immediately when information is deleted from Sojourundo's active systems.

6 Account Deletion

You can initiate permanent account deletion through More → Account → Delete Account within Sojourundo.

After you select Delete Account, Sojourundo presents a confirmation before proceeding. Once you provide final confirmation, there is no undo or account-recovery period.

Account deletion is designed to remove your active:

• Authentication account;
• Profile;
• Saved Spaces;
• Saved equipment;
• Retained profile and Space photos;
• Workout history and associated workout records;
• AI permission and optional sharing records;
• Privacy Policy acknowledgment records;
• Terms acceptance and adult-eligibility records; and
• Account-linked policy-update email notice records.

Account deletion does not automatically erase separate support or privacy correspondence. Such correspondence follows the retention practices above, and you can contact privacy@sojourundo.com with a request concerning it.

Deleting your account removes retained profile and Space photos from active storage before completing account deletion.

Information removed from active systems may remain temporarily in existing managed database backups until those backups expire through the normal seven-day rotation.

Provider operational, security, safety, or legal records may have separate retention requirements or practices.

MilForge Labs does not retain deleted profile or fitness information merely for future marketing or ordinary business use. We may retain particular information when reasonably necessary or required for security, fraud prevention, legal compliance, dispute resolution, or the establishment, exercise, or defense of legal claims.

7 Security

MilForge Labs uses administrative and technical measures intended to protect Sojourundo information. No method of electronic storage or transmission can be guaranteed to be completely secure.

API credentials used to communicate with OpenAI are maintained server-side and are not intended to be included in the Sojourundo mobile application.

Application-level AI error logging is designed not to intentionally record equipment photographs, workout prompts or AI responses, names, passwords, or credentials.

8 Adults Only

Sojourundo is intended only for individuals who are at least 18 years old.

Individuals under 18 may not create or use a Sojourundo account. If we learn that an individual under 18 has provided personal information through an account in violation of this restriction, we may take appropriate steps to delete the account and associated information.

9 Your Choices

Depending on the feature, you may:

• Review or update profile information;
• Replace or remove your profile photo through More → Account → Edit Profile, and manage a Space photo through that Space’s editing screen;
• Change optional AI-sharing preferences;
• Withdraw permission for AI processing;
• Delete your Sojourundo account; and
• Contact us with privacy questions or requests.

Some features may become unavailable when the permission necessary to provide that feature is withdrawn.

10 Changes to This Privacy Policy

We may update this Privacy Policy as Sojourundo changes or as necessary to reflect changes in our practices, services, providers, or applicable requirements.

When a change is material, we will provide an in-app notice and, where relevant, an account email. Sojourundo will present a review prompt requiring you to acknowledge the updated Privacy Policy before continuing to use affected features. These service-related notices are separate from marketing communications.

Acknowledging a Privacy Policy update does not itself grant permission for new AI sharing or enable optional personalization categories.

Versioned Privacy Policy review acknowledgments are recorded separately from AI permission. In-app review prompts require a new acknowledgment when a new policy version is introduced.

Material changes to the personal information shared with a third-party AI provider, the purposes for that sharing, or other aspects of AI processing will be evaluated to determine whether updated disclosure and permission are required before the changed processing occurs.

11 Contact Us

For privacy questions or requests:

MilForge Labs LLC

Sojourundo Privacy

Email: privacy@sojourundo.com

For general application support:

support@sojourundo.com

12 U.S. Availability

Sojourundo's initial release is intended for users in the United States.

Back to top ↑