Privacy Policy

Last updated: September 19, 2026

At Phanes Labs, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our products, including the Kratos app and the Deskwork web app. Phanes Labs is based in Germany, and we process personal data in accordance with the EU General Data Protection Regulation (GDPR). The data controller is Phanes Labs, Heidelberger Str. 80, 12435 Berlin, Germany (see our Imprint).

This Website

Our website (phaneslabs.com) is a static informational site. It does not require an account, does not set tracking cookies, and does not run advertising. When you visit, our hosting provider (Vercel Inc.) processes standard technical data — such as your IP address, browser type, and requested pages — as is technically necessary to deliver the site securely (legal basis: Art. 6(1)(f) GDPR, legitimate interest in operating the website).

The Kratos App

Kratos is designed local-first: your training data — workouts, sessions, plans, gyms, equipment, custom movements, and profile settings — is stored on your device and the app is fully usable offline without an account.

If you create an account

• Account data: your email address (and, if you sign in with Google or Apple, the basic profile information those providers share) is stored on our servers to authenticate you.
• Cloud backup / sync (optional): if you enable it, your training data is transmitted to and stored on our servers so it can be restored on your device. It is used only to provide that feature.
• AI coach and chat (optional): messages you send to the coach, together with the training context needed to answer them, are processed on our servers and passed to third-party AI model providers (such as OpenAI or Google) to generate responses. We do not use your conversations to train models.
• Purchases: any purchases are handled entirely by the app store you installed the app from (Apple App Store or Google Play). We do not receive or store your payment details.

The app also downloads our public exercise catalog (movement descriptions, images, demo videos) from our servers; these requests involve standard technical data only.

The Deskwork App

Deskwork (app.phaneslabs.com) requires an account. We store your email address and authentication data, your chats, and the files in your workspace in order to provide the service. Messages you send are processed by third-party AI model providers to generate responses. Essential authentication cookies are used to keep you signed in; no advertising or cross-site tracking cookies are set.

How We Use Your Information

• To provide and maintain our services, including authentication and session management
• To store and restore your data where you have enabled backup or sync
• To provide AI-powered features you actively use
• To respond to support inquiries
• To detect, prevent, and address technical issues and abuse
• To comply with legal obligations

We do not sell your personal data, and we do not use it for advertising.

Disclosure of Your Information

We share personal data only with:

• Service providers that host and operate our infrastructure (e.g. hosting, database, and storage providers) and the AI model providers named above, bound by data processing agreements;
• Authorities, where we are legally required to do so;
• A successor, in connection with a merger, sale, or transfer of our business, in which case this policy continues to apply.

Some providers process data outside the EU/EEA; where that is the case we rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision (e.g. the EU–US Data Privacy Framework).

Data Retention

We keep personal data only as long as needed for the purposes above. If you delete your account, your account data and any server-side backups are deleted. Data stored locally on your device is under your control and is removed when you delete the app.

Security

We use appropriate technical and organizational measures to protect the personal data we process, including encryption in transit. However, no method of transmission or storage is 100% secure.

Your Rights

Under the GDPR you have the right to:

• Access the personal data we hold about you (Art. 15)
• Have inaccurate data corrected (Art. 16)
• Have your data deleted (Art. 17)
• Restrict or object to processing (Art. 18, 21)
• Data portability (Art. 20)
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with a supervisory authority — in Berlin, the Berliner Beauftragte für Datenschutz und Informationsfreiheit

Children

Our services are not directed at children under 16, and we do not knowingly collect personal data from them.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the "Last updated" date above.

Contact

If you have any questions about this Privacy Policy or want to exercise your rights, email info@phaneslabs.com.