Privacy policy

Onyx

Updated September 28, 2026Published by Loffay

In one sentence

Onyx keeps everything on your phone. The app creates no account, sends no data to Loffay or to anyone else, and your GPS track never leaves the device.

What it stores, all on the phone

Everything is written to the app's private storage and never leaves the phone.

  • Profile: first name, date of birth, sex, height, experience level, reading language. They estimate what you burn and calibrate the programmes. All optional: the app works without them.
  • Measurements, if you enter them: weight, waist, arm, body fat percentage, on the date you choose.
  • Strength sessions: exercises, sets, loads, reps, rest times, how it felt, notes.
  • Runs: distance, duration, pace, elevation, splits per kilometre, and the GPS track when you run outdoors.
  • Activity log shared by all sports: what you did, when, for how long, how hard it felt.

Location

It is the most sensitive data in the app, so let's be precise.

  • It is only read during a run you started, and the app shows it the whole time: a session screen, a notification that stays, and a dot in your status bar put there by Android itself.
  • Onyx doesn't ask for background location (ACCESS_BACKGROUND_LOCATION isn't declared). So the app can't follow you when you're not running, or follow you without saying so.
  • The track is saved with the run, on the phone. It isn't sent anywhere. It leaves only if you share a session as a picture, and you choose the app it goes to, at that moment.
  • Turning the permission off doesn't stop you from using Onyx: strength, the track and the treadmill don't need it.

The internet connection

Onyx declares the INTERNET permission, so here is why: it catches up with updates to the app's content (the list of exercises, muscles, equipment). Content comes down; data never goes up.

The published version has no server address configured: the app makes do with the content it ships with and contacts nothing. The day an account is offered, it will be explicit and optional, and this page will change first.

For that future account, Onyx shares a session pass with the other Loffay apps, which only apps signed by Loffay can read. As long as there's no account, it's empty.

Permissions, and why

PermissionWhat for
Precise and approximate locationMeasure an outdoor run: distance, pace, track. During the run only.
Foreground service (location)Keep measuring with the screen off and the phone in your pocket.
Foreground service (health)The type Android asks for to track an activity.
High-rate sensorsA technical prerequisite of the one above.
NotificationsShow the session in progress and tell you when a rest is over.
Promoted notificationsShow that same session in the status bar's pill.
Keep the processor awakeLand the end-of-rest vibration on the right second, screen off.
VibrationSignal the end of a rest, a kilometre.
InternetCatch up with a content update. See above.
Loffay sessionThe pass shared between Loffay apps. See above.

What Onyx doesn't do

  • No account, no sign-up.
  • No ads, no trackers, no analytics.
  • No sharing or selling of data, to anyone.
  • No automatic cloud backup: allowBackup is off on purpose, so nothing goes to Google unless you ask.

Keeping and erasing

  • Your data stays until you erase it, or uninstall the app. Uninstalling erases everything.
  • The app can export a backup to a file, which you keep wherever you like. That file is yours: Loffay has no access to it.
  • Since nothing is sent, there is nothing to ask us to erase.

Children

Onyx isn't meant for children under 13 and asks nothing special of them.

Contact

A question, a request: contact@loffay.com.