How we handle your data.
Short version: the ODKI VBT app keeps everything — your sets, reps, and velocity data — on your own phone, and sends nothing about you anywhere. This website collects what you type into the pre‑order form to reply to you, and — only if you say yes in the cookie banner — uses Google Analytics and Microsoft Clarity to understand how the site is used. The long version, covering both, is below.
Last updated: September 2026
Who's responsible for your data
ODKI is, at this stage, Lodovico Cortelazzo, trading as ODKI — a sole proprietorship, not yet a separate legal company (the same note appears in the project's open‑source licenses). Lodovico is the data controller for anything collected through the app and this site.
Questions, requests, or complaints about your data: contact@odki.tech.
The ODKI VBT app
The app is deliberately built to need nothing from a server to work: pair a sensor, calibrate it, lift, and every rep's velocity, acceleration, and displacement is scored and stored right there on your phone. Nothing about your training — or you — leaves the device.
What the app collects, and where it stays
- Data from your ODKI VBT sensor — velocity, acceleration, and rep data, sent from the sensor to your phone over Bluetooth while you train. Stored in a local database on your phone (the app uses Drift/SQLite for this) and never transmitted anywhere else.
- The athlete name you optionally type in the app (to label sessions if more than one person shares a sensor) — stored locally on your phone only.
That's all. The app has no account, no sign‑in, and no cloud sync — there's nothing to create, and nothing we could see even if we wanted to. It contains no analytics, crash‑reporting, or advertising software of any kind — every third‑party library it uses is either about talking to the sensor over Bluetooth, storing data on your device, or drawing the interface, never about tracking you (the full list is public: pubspec.yaml).
The one network request the app makes
Once, when the app opens, it checks a single public file on GitHub to see whether a newer sensor firmware is available (the same file anyone can view) — a plain, unauthenticated HTTPS request that identifies nothing about you or your device beyond what any web request inherently carries (your IP address, visible to GitHub the same way it would be to any website you visit). If you choose to install an update, the app downloads the update file from the same public GitHub location. No other network requests happen, ever.
Bluetooth permission
The app asks for Bluetooth access to find and connect to your sensor — that's its only use. On Android, this is requested as BLUETOOTH_SCAN with the neverForLocation flag set, meaning the app has explicitly told Android it does not use Bluetooth to infer your location, and Android enforces that; on iOS, the same permission is requested as standard Bluetooth access.
Looking ahead: this is expected to change
Everything above describes the app as it works today — entirely on your phone, nothing online. That's not where we intend to stop: we're planning an optional online database, likely as the next major step after this initial launch, so training history can sync across devices and survive a lost or replaced phone — and we're looking at using AI on top of that data to help process a session and suggest adjustments to a workout.
We don't yet know exactly where that data would be hosted or precisely what an AI feature would be given access to — those decisions haven't been made. What we can commit to now: this policy will be updated with the full, specific detail before any such feature ships, not after, and nothing about your training leaves your phone until then. If you're reading this after that's launched and this section still describes the old, offline‑only behavior, that's a bug in this page, not in the product — tell us at contact@odki.tech.
Deleting your data
Since everything lives on your phone, uninstalling the app removes all of it — there's no server‑side copy to separately request deletion of. If you'd still like to reach out about anything above, contact@odki.tech.
This website
Everything from here down applies to odki.tech itself — the pages you're reading right now, separate from the app above.
What we collect
Two separate things, depending on what you do:
- If you submit the pre‑order / contact form: your name and email address, which product you're asking about and quantity, what best describes you (trainer, researcher, enthusiast, distributor, other), and anything you write in the optional message field.
- If you accept analytics cookies in the banner: anonymized usage data via Google Analytics and Microsoft Clarity — pages visited, approximate location (country/city level, from IP), device/browser type, and how you interact with the page (clicks, scrolling, session recordings with sensitive fields masked). See "Cookies," below, for the full detail.
If you don't submit the form and reject analytics cookies, we don't collect anything about you beyond standard web server logs generated by our hosting provider (see "Who else sees it," below).
Cookies
This site asks for your consent before setting any cookie that isn't strictly necessary. You choose in the banner shown on your first visit, and can change your mind anytime via the "Cookie settings" link in the footer.
- Strictly necessary — no cookies are actually set for this category on the current site; it covers the pre‑order form itself and the honeypot spam‑prevention field. Always active, no consent needed (GDPR Recital 30 / ePrivacy Art. 5(3) exemption for cookies necessary to provide a service you explicitly request).
- Analytics — off by default, only active if you click "Accept". Sets:
_ga,_ga_*(Google Analytics, up to 13 months) and_clck,_clsk(Microsoft Clarity, up to 1 year). Legal basis: your consent (GDPR Art. 6(1)(a); ePrivacy Art. 5(3)).
Rejecting analytics cookies doesn't limit anything else on this site — the pre‑order form works exactly the same either way.
Why we collect it
Solely to respond to your pre‑order or question, and to fulfill an order if it goes ahead. That's it — no mailing lists, no marketing use, no resale of your data to anyone, ever.
Right after you submit the form, an automatic confirmation email is sent from contact@odki.tech to the address you gave. It's a single service message — not a newsletter — and your address isn't added to any list.
Legal basis (GDPR Art. 6): steps taken at your request before a possible sale (Art. 6(1)(b)), or your consent in submitting the form (Art. 6(1)(a)).
Who else sees it
A handful of outside services are involved in running this site:
- Netlify, Inc. — hosts the site, receives form submissions on our behalf, and runs the function that sends the confirmation email. Netlify is based in the US; see Netlify's own privacy policy for how they handle data in transit and at rest.
- Namecheap, Inc. — provides the mailbox contact@odki.tech, which sends the confirmation email and receives your replies. Namecheap is based in the US; see Namecheap's privacy policy.
- Google Fonts — the typefaces on this page are loaded from Google's servers, which means your browser sends your IP address to Google as part of that request (no cookies are set). We're aware this is a point where a third party sees a request before you've made any choice, and we're working on serving fonts directly from our own domain to remove it entirely.
- Google Analytics (Google Ireland Ltd.) — only if you accept analytics cookies. Measures site usage; see Google's privacy policy. You can also opt out browser‑wide with Google's Analytics opt‑out add‑on.
- Microsoft Clarity (Microsoft Ireland Operations Ltd.) — only if you accept analytics cookies. Records anonymized session behavior (clicks, scrolling) to help us fix confusing parts of the site; text you type into form fields is masked automatically and never captured. See Microsoft's privacy statement.
We don't use any advertising or social‑media tracking service, and we never sell your data.
International transfers
Netlify, Google, and Microsoft are all US‑based companies, so your data may be processed outside the EU/EEA. All three rely on recognized safeguards for this — Standard Contractual Clauses and/or certification under the EU‑US Data Privacy Framework.
How long we keep it
Pre‑order and contact submissions are kept for as long as needed to respond to you and, if it goes ahead, fulfill your order — and in any case no longer than 24 months from your last contact with us, unless a longer period is required by law (for example, invoicing records once a real sale takes place). You can ask us to delete your data sooner at any time.
Your rights
Under the GDPR, you can ask us to:
- Confirm whether we hold data about you, and get a copy of it (access)
- Correct it if it's wrong (rectification)
- Delete it (erasure)
- Limit how we use it (restriction), or object to a specific use
- Give you your data in a portable format (portability)
Email contact@odki.tech for any of the above — we'll respond within a month. If you're unhappy with how we've handled a request, you can lodge a complaint with the Italian data protection authority, the Garante per la Protezione dei Dati Personali (garanteprivacy.it), or your own country's equivalent.
Children
This site isn't directed at children, and we don't knowingly collect data from anyone under 16.
Changes to this policy
If how we handle data changes — for instance, once real payments or a company entity are introduced — this page will be updated and the date at the top will change. We won't narrow your rights retroactively without asking again.