Privacy policy
Applies to the Passboken app (iOS and Android) and the service at passboken.se. Last updated 2026-10-25. This is a translation of the Swedish policy; if they differ, the Swedish version applies.
Who is responsible
Itendi AB, Sweden, is the data controller. Contact: support@itendi.se.
What we store
- Account: your name and email address, and how you sign in: with Google or Apple (a technical id from the provider is then stored) or with email and password. The password is never stored in plain text, only as a salted hash (PBKDF2) that cannot be reversed.
- Training data you enter yourself: workouts, exercises, weights and repetitions, planned workouts, programs, cardio sessions, body weight and measurements, how you feel, goals, notes and any photos you choose to save.
- Settings: language, weight unit, your gym equipment and exercise swaps.
- Technical: one push token per device if you allow notifications, when you registered and last signed in, what kind of device you signed in from (iOS, Android or web), and server logs with IP address kept for at most 30 days for operations and troubleshooting.
What we use it for
Only to make the app work: show your training on all your devices, calculate records and statistics, put programs in the calendar, suggest nutrition based on your goal and send reminders you have turned on yourself. We also compile aggregated statistics about how the app is used – for example the number of users, how many train per week and which programs and exercises are used most – in order to run and improve it. We do not sell data, show no ads and share nothing with third parties for marketing.
Who can see the data
Itendi AB's administrator can see account details and the data you have saved, including photos, in an internal administration tool. It is used for operations, troubleshooting, support and the statistics above. When a new account is created the administrator receives an email with the name and email address. The data is not passed on to anyone else.
Legal basis
Contract (delivering the service you created an account for), legitimate interest for operations, security, support and aggregated usage statistics, and, for optional features such as notifications and calendar writing, your consent, which you can withdraw in the app at any time.
Where the data is
On servers in Sweden run by Itendi AB. The data is also stored locally in the app on your phone so that it works offline.
Your phone's own services
If you turn it on, the app writes your planned workouts to your phone's calendar. This happens locally on the phone and can be turned off in the app or in the phone's settings.
Apple Health and Health Connect
If you turn it on under Settings, the app reads body weight, steps, sleep and workouts (type, time, distance, heart rate and calories) from Apple Health (iOS) or Health Connect (Android). The app only reads – it never writes anything to Apple Health or Health Connect.
- Weight and workouts are saved as measurements and cardio sessions on your account, just as if you had entered them yourself, so that they show on all your devices.
- Steps and sleep stay on the phone and are only shown in the app's calendar. They are not sent to our servers.
Health data is only used to show your training, your progress and your daily needs in the app. It is not used for advertising, not sold and not shared with third parties. You can turn off reading in the app or remove the permission in the phone's settings at any time; data already saved on the account is deleted like all other data (see below).
How long
As long as you have an account. If you delete the account (Settings → Delete account, or via passboken.se/en/delete.html) all your data is removed from our servers immediately. Backups are overwritten within 14 days. If you remove individual items in the app – a workout, a measurement, a photo, a goal – they disappear from your devices right away and are purged from the server within 30 days.
Your rights
You can export all your data as CSV from the app, correct data in the app, or delete the account at any time. Under the GDPR you have the right to access, rectification, erasure, restriction and data portability, and the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Third-party content
The exercise library is based on data from RepDB (repdb.co). RepDB receives no data about you.
Changes
If the policy changes in substance we will let you know in the app. The latest version is always on this page.