PowerClaw Privacy Policy

Updated: 2026-10-16

This policy applies to the PowerClaw mainland China service operated by 北京贰零贰零科技发展有限公司 (“we” or “us”). Privacy contact: support@erlingerling.com.

1. Your choices

When you first open the app, you can read this policy and the Terms of Service and decide whether to agree.

Declining consent does not prevent you from using offline Basic Training: built-in exercise instructions, a timer, and a set counter for the current page require no sign-in and do not upload training data.

The timer and set count in Basic Training are cleared when you leave the page.

You can view the agreements without signing in. To display the latest documents, the app connects to servers in mainland China, which receive the IP address and other information necessary for the connection. Your privacy choice and the versions you agreed to are stored on your device. After you select Basic Training, reopening the app does not automatically retrieve the agreements online; you can choose to view them again.

2. Information we process and why

Accounts and WeChat sign-in: When you choose WeChat sign-in and authorize it in WeChat, we receive the authorization result, your WeChat account identifiers (OpenID and, when returned, UnionID), and the nickname and profile image within the authorized scope. We use these to create an account, verify your identity, and display your profile. We do not obtain your WeChat password, chat history, or contacts. Declining WeChat authorization does not affect offline Basic Training. On iOS, you can also choose Sign in with Apple. We receive the app-specific user identifier, identity token, and any name and email address you authorize (which may be a private relay address) to verify your identity and create an account. We do not obtain your Apple Account password.
Profile and training services: The nickname, age, gender, height, weight, training goals, experience, schedule, and available equipment you provide, together with exercises, sets, repetitions, weights, perceived exertion, and notes, are used to display records, sync across devices, and generate personalized training suggestions. “Training location” means a training setting you select, such as a gym or home; it does not mean GPS location access.
Health-related content: Injuries, physical limitations, and medical or health information you choose to provide in conversations may constitute sensitive personal information. Processing this content may affect your privacy and rights. Please provide it carefully and do not upload identity documents, original medical records, or other people's health information. Offline Basic Training does not require this content. If you do not provide it, personalized suggestions will lack that context.
AI coach and plans: Your messages, model replies, and the profile and training context needed to generate suggestions are stored by our server and submitted to the domestic model services listed below to generate replies and plans and maintain conversation continuity. AI output may be inaccurate and is not medical diagnosis or treatment advice.
Profile image and photo library: We request photo library access only when you choose to change your profile image, and process the image you select. You can decline this permission or withdraw it in system settings without affecting other training features.
Operation and security information: When you use online features, the service may receive your IP address, request time, API and error information, app version, operating system platform, language, and time zone to provide the service, investigate faults, and protect security.
iOS notifications: After you sign in and allow system notifications, we process the device push identifier assigned by Apple and associate it with your current account to send service notifications to that device. The China service delivers them through Apple Push Notification service (APNs). You can turn notifications off in iOS settings; declining them does not affect other training features.

Membership payments are not currently enabled in the China service. We do not process payment accounts, bank cards, or transaction information there, and no third-party advertising service is integrated. Declining optional permissions does not restrict unrelated features.

3. Third-party SDKs and services

Apple Push Notification service (APNs, iOS only)

Provider: Apple Inc.
Purpose and trigger: Delivering service notifications after sign-in and after you allow system notifications.
Information processed: Device push identifier, app identifier, notification title and body, and data necessary to open the relevant page. Notifications do not include complete workout records, health profiles, or coach conversations.
Controls: You can turn notifications off in iOS settings. When you sign out, withdraw consent, or switch service regions, the app stops push registration for the current service region and requests that the association be removed.
Apple Privacy Policy.

微信OpenSDK Android (WeChat OpenSDK for Android)

Registered SDK name: 微信OpenSDK Android.
Developer: 深圳市腾讯计算机系统有限公司 (Shenzhen Tencent Computer Systems Company Limited).
Platform: Android; SDK package: com.tencent.mm.opensdk.
Purpose and trigger: Completing authorization through the WeChat client when you choose WeChat sign-in. Agreeing to the Privacy Policy does not automatically sign you in.
Processing and information: When called, the SDK checks whether WeChat is installed, interacts with the WeChat client, and handles the app identity and authorization request. Our server receives the authorization code, account identifiers, and authorized nickname and profile image through server APIs. See WeChat's rules for the scope and controls of its processing.
SDK privacy policy: 微信OpenSDK Android personal information processing rules.

WeChat Open SDK (iOS only)

Provider: Shenzhen Tencent Computer Systems Company Limited.
Purpose and trigger: Completing authorization through the WeChat client when you choose WeChat sign-in. Agreeing to the Privacy Policy does not automatically sign you in.
Processing and information: The SDK interacts with the WeChat client and handles the app identity and authorization request. Our server receives the authorization code, account identifiers, and authorized nickname and profile image through server APIs. The SDK reads and stores the device model locally for sign-in compatibility and may use the system clipboard to transfer authorization-related information.
WeChat Open SDK personal information processing rules.

Tencent Cloud

Provider: 腾讯云计算（北京）有限责任公司.
Purpose: Providing network services and storing and transmitting account information, training records, conversations, and related files.
Processing and information: Cloud servers, databases, and file storage process this business information, along with IP addresses, access records, and other information necessary to provide the service.
Tencent Cloud Privacy Statement.

Sign in with Apple (iOS only)

Provider: Apple; used when you choose authorization through your Apple Account.
Processing and information: The system authorization interface interacts with Apple services. We receive an app-specific account identifier, identity token, and name and email within the authorized scope, and verify your identity through the China service. See the information below for Apple's processing during authorization.
Sign in with Apple & Privacy.

Firebase Crashlytics (iOS only)

Provider: Google LLC. Used to detect crashes, investigate faults, and improve stability, not for advertising.
Trigger and processing: The SDK is initialized and automatic reporting is enabled after you agree to the current service region's Privacy Policy. It records diagnostics on the device and sends them over the network to Google's Firebase service. The Android China build does not contain this SDK.
Information: App version, device model, operating system, runtime conditions such as memory and disk status, crash time, thread stacks, exception information, and SDK-generated installation and session identifiers. Network connections also involve technical information such as IP addresses. We additionally record service region, account region, storefront country or region, and region-switching state. We do not set an account ID, email address, or sign-in token in Crashlytics.
Logs: Reports may include activity logs from before the fault. Analytics activity summaries generated while using the international service may include screens, sign-in method, workout duration, sets and training volume, conversation identifiers and message lengths, and subscription status. Switching back to the China service does not retroactively clear existing diagnostic logs. We do not intentionally send conversation text, passwords, or complete training records as custom diagnostic fields.
Storage location and retention: Diagnostics are transmitted to Google's global infrastructure and involve processing outside mainland China. Service-region tags cannot restrict storage to mainland China. According to Firebase, removal of crash stack traces and associated identifiers from live and backup systems begins after 90 days of retention.
Withdrawal: You can withdraw consent on the Privacy Policy page. The app turns off automatic reporting. Due to SDK behavior, the iOS setting takes effect on the next launch and cannot guarantee that local recording stops immediately during the current session. Reports saved locally may be uploaded if you later consent again and enable reporting.
Firebase privacy and security information; Crashlytics logs and reporting controls. Contact the privacy email in this policy for information-rights requests.

Zhipu AI Open Platform

Provider: 北京智谱华章科技股份有限公司.
Purpose and trigger: Generating replies or training suggestions when you use the AI coach or plan generation.
Processing and information: Our server API submits the current request, necessary conversation history, training records, and personalized profile information. We do not submit WeChat sign-in credentials for this purpose. Do not include unnecessary identifying details, contact information, or sensitive material in conversations.
Zhipu AI Open Platform Privacy Policy.

DeepSeek fallback model service

An optional fallback AI service, used to complete your request only when we have enabled it and the primary AI service is temporarily unavailable. No information is sent to it when it is not enabled.
Purpose, processing, and information: A server API processes that AI request and its necessary context to complete the original request, without adding a new business purpose.
See the DeepSeek Privacy Policy for provider details and processing rules.

We transmit information to these services as needed for the relevant features and do not sell your personal information. New processing purposes, third parties, or processing that legally requires separate consent must be separately disclosed and appropriately authorized. This policy does not replace any separate consent legally required in a specific situation.

4. Storage and protection

Servers storing China-service account information, training records, conversations, and other business data are located in mainland China. iOS crash diagnostics are processed by Firebase Crashlytics on Google's global infrastructure and involve transmission and storage outside mainland China. Other third-party processing is described in Section 3. Providing personal information outside mainland China requires applicable disclosures, authorization, and other legal procedures; this policy does not replace legally required separate consent.

We retain information for the shortest period necessary for the purposes above, considering account status, user requests, and applicable statutory retention obligations. Information that is no longer needed should be deleted or anonymized. Information that must be retained by law should be limited to necessary storage and security purposes. We use access controls, transmission protection, and other safeguards, but no network or information system can guarantee absolute security. We will take remedial and notification measures required by law if a personal information security incident occurs.

5. Access, correction, withdrawal, and account closure

You can view and change editable information in your profile and training screens, manage photo library permissions in system settings, and choose “Withdraw consent and enter Basic Training” on the app's Privacy Policy page. After withdrawal, the app stops initiating account, syncing, and other business requests; requests already sent cannot be retroactively withdrawn. See Section 3 for when iOS crash-reporting changes take effect and how local reports are handled. Withdrawal does not affect processing previously authorized or automatically delete information already uploaded.

You can request account closure in the app's profile settings.

Account closure currently deactivates the account and clears sign-in sessions. It does not mean that all historical records are immediately physically deleted.

To access, copy, correct, or delete other personal information, or to object to the handling of a request, contact support@erlingerling.com. We verify the requester's identity using only necessary information and handle and respond to requests in accordance with law. If a request cannot legally be fulfilled, we explain why. Do not email passwords or complete identity documents.

6. Minors

Minors should read this policy with a guardian and use training content suitable for their circumstances. Users under fourteen should use offline Basic Training without an account and should not independently submit personal information to account, chat, or other online features. Guardians who discover that such information has been submitted can contact us at the email above.

7. Policy updates and contact

This policy is available in the app. If you have agreed to use online services, updates to the Privacy Policy or Terms of Service prompt you to read them and choose whether to agree when you reopen the app and it retrieves the new version. Declining consent still allows offline Basic Training. Users who have chosen Basic Training can choose to view the agreements again.

Operator: 北京贰零贰零科技发展有限公司

Privacy contact: support@erlingerling.com