Privacy Policy — Android

This policy covers the Android version of Coda distributed on Google Play. The iOS version is a separate build with a separate policy — see the Coda Privacy Policy for iOS.

Coda has no account and no server of ours. Your training record — which exercises you did, how many repetitions, and when — is written to a database on your device and never transmitted. The only thing that leaves your phone is pseudonymous usage analytics, described below.

• Your progress through the 8-week program — completed lessons, repetition counts, and the dates you trained
• Your streak and any badges earned
• App settings, including your reminder time and timer style

All of it lives in Coda's own private storage. Clearing the app's data or uninstalling the app deletes it permanently, and the in-app Reset option wipes it on demand. There is no cloud sync and no server-side copy.

Coda records how many exercise repetitions you completed and when. That record stays on your device. It is not uploaded, not shared with any third party, and not sold.

Coda does not read from or write to Health Connect or any other health platform, and it holds no health permission. It does not measure anything about your body — it counts the exercises you tell it you finished.

To understand how the app is used and to improve it, Coda sends usage events to an analytics service that Pentarab runs itself. It is not Google Analytics, and the data is not passed on to any third party. The events record which screens you open and which milestones you reach — for example that a training session started, a lesson was completed, or a badge was earned. This is the complete list of what that service receives:

• The app identifier, the platform, and the app version and build number.
• An install identifier — a random value the app generates on first launch. It is not derived from your device, your Google account, or any advertising identifier, and reinstalling the app produces a new one.
• A session identifier, so one run of the app can be told apart from the next.
• Screen names, and how long each screen was open. The duration is measured from a matching open and close, not guessed from the gap between events.
• The UTC time of each event, plus your time-zone offset so local time can be reconstructed.
• Device information: the operating system and its version, the screen size, and the locale. The device model is not sent.
• A country. This is worked out by the receiving server from the connection itself — the app never sends it, and it is country-level only.

The service does not store your IP address. It is read at the edge only to derive the country and is then discarded. It collects no advertising identifier, no precise location, and no personal identifier such as a name, email address, or phone number. Nothing you create or enter in Coda is part of an analytics event.

These are event names, not a health record. Coda has no account, so nothing in the analytics stream identifies you.

Coda does not collect the Android Advertising ID. The advertising-ID permissions (com.google.android.gms.permission.AD_ID, android.permission.ACCESS_ADSERVICES_AD_ID, and android.permission.ACCESS_ADSERVICES_ATTRIBUTION) are explicitly removed from the app's manifest and are absent from the build published on Google Play. Ad personalisation signals are disabled. Coda does not use crash reporting or performance monitoring, so no crash logs or diagnostics are collected.

Coda declares two permissions, both for the training reminder:

• Notifications — so the app can post your daily training reminder and streak nudge. Android asks you for this only when you turn the reminder on in Settings, and you can decline or revoke it at any time.
• Run at startup — so a reminder you scheduled survives a reboot. This is an ordinary permission and shows no prompt.

There is no microphone permission. Coda plays bundled audio cues during exercises; it never listens, never records, and cannot hear you snore. There is also no camera, photo, storage, location, contacts, or calendar permission, and no sensor access.

Coda is a paid app: you buy it once on Google Play. There are no in-app purchases, no subscriptions, and no ads. Payment is handled entirely by Google — Pentarab never sees your card details, your Google account details, or your billing address.

• Everything stays on your device — there is nothing on a server for us to hold or hand over
• Reset inside the app erases your training record
• You can turn the reminder off in Settings, or revoke the notification permission in Android Settings
• Uninstalling the app, or clearing its data from Android Settings → Apps → Coda → Storage, removes everything permanently
• If you want the analytics associated with your install removed, email us and we will act on it

Coda is not directed at children under 13. We do not knowingly collect personal information from children. The exercises are suitable for children, but the app should be set up and supervised by an adult. If you believe a child has provided information through the app, please contact us so we can address it.

We may update this policy from time to time. Changes will be posted on this page with an updated revision date.

Questions about this policy? Email us: