Legal - Limitless

Effective Date: June 23, 2026

Last Updated: June 23, 2026

1. Who We Are

Donum AI is operated by:

Yaroslav Vlokh
Königstraße 13
48683 Ahaus
Germany

In this Privacy Policy, “Donum,” “Donum AI,” “we,” “our,” or “us” refers to the operator of the Donum AI website and platform.

Donum AI provides an AI-powered fitness coaching platform for workout planning, workout logging, progress review, and general training guidance.

For the purposes of applicable data protection laws, we are the controller of the personal data described in this Privacy Policy.

2. Important Health and Fitness Notice

Donum AI is a fitness and training product. It is not a medical service.

Donum AI does not provide:

medical advice;
medical diagnosis;
medical treatment;
physical therapy;
rehabilitation services;
emergency services;
professional healthcare services.

Donum AI is not a substitute for a doctor, physical therapist, certified personal trainer, or other qualified professional.

You should not use Donum AI to submit:

medical records;
diagnoses;
prescription information;
laboratory results;
insurance information;
detailed medical history;
other highly sensitive medical information.

If you choose to enter training limitations, injury-related notes, discomfort, or similar information, Donum AI may process that information only to personalize general fitness guidance and help avoid unsuitable exercise suggestions.

If you have a medical condition, injury, pain, or any concern about whether exercise is safe for you, you should consult a qualified medical professional before using Donum AI’s recommendations.

3. Information We Collect

We collect information needed to operate, secure, personalize, and improve Donum AI.

3.1 Account and Authentication Information

We may process:

your name, if provided;
your email address;
your FrameAuth user identifier;
account status;
onboarding status;
authentication and session information;
account deletion status.

Authentication credentials are processed by FrameAuth. Donum AI does not directly receive or store your account password.

3.2 Fitness Profile Information

We may process fitness profile information that you submit, including:

training goal;
experience level;
target training days per week;
available equipment;
preferred weight unit;
preferred weight increment;
training limitations or injury-related notes that you choose to provide;
onboarding responses;
settings and preferences.

3.3 Workout and Progress Information

We may process workout and training information, including:

workout dates;
workout session names;
exercises;
sets;
repetitions;
weights;
weight units;
bodyweight exercise entries;
workout notes;
exercise notes;
training consistency information;
exercise progress;
personal records;
progress summaries;
Donum Momentum and other training metrics.

3.4 AI Chat and Interaction Information

When you use the AI Coach or workout logging features, we may process:

messages you send to the AI Coach;
AI responses;
workout logging messages;
clarification responses;
AI-generated summaries;
AI-generated training suggestions;
tool and workflow outputs needed to provide the Service.

We use this information to generate responses, personalize coaching, log workouts, review training history, and improve the reliability of the Service.

3.5 Payment and Subscription Information

When paid subscriptions are available and you start a free trial or subscription, payments are processed by Stripe.

We may process limited subscription information, including:

Stripe customer identifier;
Stripe subscription identifier;
subscription status;
plan or price identifier;
trial status;
billing period dates;
cancellation status;
payment status.

We do not directly collect or store your full payment card number. Stripe processes payment information according to its own privacy and security practices.

3.6 Technical, Security, and Usage Information

When you access the Service, we and our service providers may automatically process:

IP address;
browser and device information;
operating system;
date and time of requests;
pages and API endpoints accessed;
request status;
response time;
security logs;
error logs;
request identifiers;
authentication and session data;
cookie and local storage information;
general usage information needed to operate and secure the Service.

We use this information to operate, secure, debug, protect, and improve Donum AI.

3.7 Support and Account Deletion Information

If you contact us or request account deletion, we may process:

your name;
your email address;
your FrameAuth user identifier;
your communications with us;
the date and status of your request;
the number of deleted workout and session records;
administrative notes needed to complete the request.

4. How We Collect Information

We collect information in the following ways:

directly from you when you create an account, complete onboarding, update settings, log workouts, use AI chat, start a trial or subscription, or contact us;
automatically when you access or use the Service;
from service providers that help us operate authentication, hosting, infrastructure, AI workflows, payments, and support.

5. How We Use Your Information

We use personal information only for legitimate product, security, support, legal, and operational purposes.

5.1 Providing the Service

We use account, profile, workout, preference, and chat information to:

create and maintain your Donum AI account;
save and display your fitness profile;
save and display workout history;
generate training summaries;
display progress analytics;
calculate Donum Momentum;
display exercise progress and personal records;
allow workout editing and deletion;
personalize AI fitness responses;
adapt training suggestions around saved limitations;
provide account and subscription functionality.

5.2 AI Fitness Features

We use workout data, profile data, training limitations, and AI chat messages to generate AI-assisted fitness responses.

AI-generated output may be incomplete, inaccurate, or unsuitable for your individual circumstances. You are responsible for reviewing any recommendation before acting on it.

Donum AI does not use AI to provide:

medical diagnosis;
medical treatment;
rehabilitation plans;
emergency services;
legal, financial, or professional healthcare decisions.

Donum AI does not use solely automated processing to make decisions that produce legal or similarly significant effects concerning users.

5.3 Security and Reliability

We process technical, security, and usage information to:

authenticate users;
prevent misuse, fraud, and unauthorized access;
apply rate limits;
investigate errors;
debug technical issues;
monitor service reliability;
protect Donum AI, our systems, and our users.

5.4 Service Improvement

We may use limited usage, performance, and error information to:

understand how the Service works;
improve design;
fix bugs;
improve reliability;
improve user experience.

We do not currently use analytics cookies or marketing cookies. If we add non-essential analytics or marketing technologies later, we will update this Privacy Policy and request consent where required.

5.5 Customer Support

We use support information to:

respond to questions;
resolve issues;
process account deletion requests;
maintain records of user requests;
communicate about your account or subscription.

5.6 Legal Compliance and Protection

We may process and retain information where necessary to:

comply with legal obligations;
respond to lawful requests;
establish, exercise, or defend legal claims;
enforce our Terms of Service;
protect the security, rights, and property of Donum AI or others.

6. Legal Bases for Processing

Where the General Data Protection Regulation or similar laws apply, we rely on the following legal bases:

Contract: to provide the Service, account features, AI Coach, workout logging, progress tracking, and subscription functionality.
Consent: where you voluntarily provide training limitations or injury-related notes, where required for optional cookies, or where we otherwise request consent.
Legitimate interests: to secure the Service, prevent misuse, debug errors, improve reliability, and respond to support requests.
Legal obligation: where processing is necessary to comply with applicable law.
Legal claims: where processing is necessary to establish, exercise, or defend legal claims.

7. Service Providers and Data Sharing

We may disclose personal information to service providers that help us operate Donum AI.

Current or planned providers include:

FrameAuth — authentication and account management;
Framer — website hosting and frontend delivery;
Cloudflare — API infrastructure, security, rate limiting, and technical logging;
Airtable — storage of Donum profiles, preferences, workouts, workout sessions, and account deletion requests;
Voiceflow — AI conversation management and workflow orchestration;
Stripe — payment processing, free trials, subscriptions, billing, and subscription management;
United Domains or email provider — domain and email services.
Resend — transactional email delivery, support form notifications, and email infrastructure;

These providers may process information only as needed to provide their services to Donum AI, subject to their own terms, privacy policies, and applicable data protection obligations.

We may also disclose information:

where required by law or valid legal request;
to protect the security, rights, or property of Donum AI, users, or others;
in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable law.

We do not:

sell personal information;
use personal information for third-party targeted advertising;
disclose personal information to advertisers.

8. Cookies and Similar Technologies

Donum AI uses cookies, local storage, session storage, and similar technologies for necessary and preference-related purposes.

Necessary technologies may be used to:

keep users signed in;
maintain secure sessions;
protect the Service;
remember essential account state;
operate core app functionality;
store cookie consent choices.

Necessary technologies cannot be disabled without affecting core Service functionality.

Optional preference storage may be used to remember settings and personalization preferences.

Donum AI does not currently use:

analytics cookies;
marketing cookies;
advertising pixels;
third-party targeted advertising cookies.

If we introduce analytics, advertising, or marketing technologies later, we will update this Privacy Policy and our Cookie Policy and request consent where required before activating them.

You may control cookies through your browser settings. Disabling necessary cookies or storage may prevent the Service from functioning correctly.

9. Email Communications

We currently send only transactional, account-related, billing-related, and support communications.

These may include:

account emails;
authentication emails;
subscription or billing notices;
support replies;
security notices;
service notices;
account deletion communications.

We do not currently send marketing newsletters or promotional email campaigns.

We may use an email delivery provider, such as Resend, to send transactional, support, billing, account, and service-related emails.

If we introduce marketing emails later, we will update this Privacy Policy and provide a way to unsubscribe where required.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

In general:

account, profile, settings, workout, and progress information is retained while your Donum AI account remains active;
workout information remains available until you delete an individual workout, delete your Donum data, or request account deletion;
AI chat and workout logging information may be retained while your account is active so the Service can provide history, context, reliability, and support;
technical, security, and error logs are retained for as long as needed to operate, secure, debug, and protect the Service;
support communications may be retained as long as needed to respond to your request and maintain reasonable business records;
payment and subscription records may be retained as required by law, tax, accounting,
payment processing, dispute resolution, fraud prevention, or legal obligations.

Information may be retained longer where required by law or where necessary to establish, exercise, or defend legal claims.

11. Account Deletion

You may request account deletion through:

Settings → Delete account

You may also contact us at:

support@getdonum.com

After a confirmed account deletion request:

your active Donum app data, such as profile data, workout history, workout sessions, settings, and related app records, is deleted promptly or within 30 days;
your FrameAuth sign-in account may require manual processing and may be completed within 30 days;
a minimal account deletion request record may be retained for administrative, security, and legal purposes;
certain payment, subscription, security, support, tax, accounting, fraud-prevention, or legal records may be retained where required or permitted by law;
while account deletion is pending, you may be unable to create or use a new Donum profile with the same account;
deletion from backups, logs, or provider systems may take additional time according to standard backup and retention processes.

12. International Data Transfers

Donum AI is operated from Germany and is intended to launch first in the United States.

Some service providers may process information in:

the United States;
Germany;
the European Economic Area;
other countries where our providers operate.

Where required, we use legally recognized safeguards for international transfers, which may include:

adequacy decisions;
Standard Contractual Clauses approved by the European Commission;
data processing agreements;
additional contractual, technical, or organizational safeguards.

You may contact us for additional information about international transfer safeguards.

13. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

request access to personal information;
request correction of inaccurate or incomplete information;
request deletion of personal information;
request restriction of processing;
receive certain information in a portable format;
object to processing based on legitimate interests;
withdraw consent where processing is based on consent;
object to direct marketing;
receive information about automated processing;
lodge a complaint with a competent data protection authority.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

We may need to verify your identity before completing a request.

To exercise your rights, contact:

support@getdonum.com

We will respond within the time required by applicable law.

14. European Union and European Economic Area Users

If you are located in the European Union or European Economic Area, you may have rights under the General Data Protection Regulation and other applicable data protection laws.

You may also lodge a complaint with your local supervisory authority.

Because Donum AI is currently operated from North Rhine-Westphalia, Germany, the relevant supervisory authority may be:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen

Kavalleriestraße 2-4
40213 Düsseldorf
Germany

Email: poststelle@ldi.nrw.de
Website: ldi.nrw.de

15. California Residents

Where the California Consumer Privacy Act, as amended, applies to Donum AI, California residents may have rights to:

know what categories of personal information are collected, used, disclosed, or shared;
request access to personal information;
request deletion of personal information;
request correction of inaccurate personal information;
opt out of the sale or qualifying sharing of personal information;
limit certain uses of sensitive personal information where applicable;
exercise privacy rights without discrimination.

Donum AI does not:

sell personal information;
use personal information for third-party targeted advertising;
currently disclose personal information to advertisers.

To exercise applicable California privacy rights, contact:

support@getdonum.com

16. Children’s Privacy

The Service is intended only for users who are at least 18 years old.

By creating an account or using Donum AI, you confirm that you are at least 18 years old.

We do not knowingly collect personal information from anyone under 18.

If you believe that a person under 18 has provided personal information to Donum AI, contact us at:

support@getdonum.com

We will investigate and take appropriate action.

17. Data Security

We use technical and organizational measures intended to protect personal information, including:

HTTPS/TLS encryption in transit;
authentication controls;
access controls;
rate limiting;
restricted access to production systems;
security and error monitoring;
separation of public frontend access from internal service credentials;
signed or expiring authorization tokens for sensitive actions where applicable.

No system is completely secure. We cannot guarantee that unauthorized access, loss, misuse, or disclosure will never occur.

You are responsible for keeping your account access secure and for using strong, unique login credentials.

18. Do Not Track

Some browsers may send “Do Not Track” signals. Because there is no consistent industry standard for responding to these signals, Donum AI does not currently respond to them.

Donum AI does not currently use analytics cookies or marketing cookies.