Privacy

What is stored, and why

Five things, and nothing beyond them. Each is here because the app cannot do its job without it, or because you turned it on.

• Your account. Email address, your name if you give one, and a hash of your password that cannot be turned back into the password. There is no account without it, so the basis is the contract you entered when you signed up.
• Your training log. Workouts, exercises, sets, weights, reps, times, heart rate if you enter it, notes, templates, goals, plate racks and settings. This is the product, and the basis is the same contract. Body weight logged against a workout sits here too, because bodyweight exercises cannot be counted without it.
• Body measurements, only if you turn them on. Weight over time, body fat and the tape measurements. This is health data, so it runs on your explicit consent and on nothing else. Off until you say yes, and it stays off if you never do.
• Your sessions. When you sign in, the app stores the IP address and browser you signed in from, so it can show you your active sessions and end one you do not recognise. The basis is our legitimate interest in keeping accounts from being taken over.
• Anonymous usage counts. Which screens get opened and which features get used, with no name, no account and no numbers from your log attached. The basis is our legitimate interest in knowing which parts of the app are worth keeping.

The optional sex, height and birth year on the About you screen feed the strength score and the calorie estimate, and nothing else reads them. There is no advertising here, no profiling, no automated decision that affects you, and nothing is ever sold.

Body measurements are treated as health data

Weight tracked over time, body fat percentage and tape measurements say something about your health rather than just your training, so the law treats them more carefully than the rest of your log, and so do we.

• Nothing is recorded until you explicitly turn the feature on.
• You can turn it off again under Profile, then Privacy.
• Turning it off deletes every measurement you have entered. The rest of your log is untouched.
• These figures are never sent to analytics, never used for advertising, and never shared with anyone.

The notes you can attach to a workout, a set or an exercise are free text, and some people use them for an injury or how a session felt. We do not read them and nothing in the app interprets them, but they are stored with the rest of your log rather than under the consent above. Leave out anything you would not want kept there.

Who else sees it

The app runs on machines we rent, so a small number of companies hold or carry your data on our behalf. Each is bound by a contract that lets them process it only on our instructions. Nobody buys it, and nobody is given it for their own purposes.

Your data is stored in the EU. Cloudflare is a US company whose network carries requests to us, which is covered by the European Commission’s standard contractual clauses.

One more person can see your email address: whoever runs this app, from the admin screen. Nobody reads your workouts.

How long it is kept

• Your account and log: until you delete your account.
• Sign-in sessions: 180 days at most, and expired ones are swept away.
• Password reset and email verification links: fifteen minutes and one hour, then deleted.
• Anonymous usage counts: kept indefinitely, because they are not about a person.
• Backups: encrypted and kept for 30 days, so anything you delete is gone from the live database at once and works out of the backups within a month.

What you can do

Two of these are buttons rather than requests, which is the way it should be. For the rest, ask and you will get an answer within a month.

• Take it with you. Profile, then Export. Everything you have entered, as JSON or CSV, whenever you want it.
• Delete it. Profile, then the danger zone at the bottom. Deleting the account removes the account and everything attached to it. It cannot be undone.
• Ask what is stored about you, including the session and usage records the export does not cover.
• Correct anything that is wrong.
• Object to the sessions and usage counts above, which rest on legitimate interest.
• Withdraw your consent to body measurements at any time.
• Ask us to restrict what we do with your data while a question about it is open.

Write to [email protected]. If you are not happy with the answer, you can complain to Integritetsskyddsmyndigheten (IMY), the Swedish data protection authority, at imy.se.

Cookies, and what is kept on your device

There is no cookie banner because there is nothing to consent to. The app sets two cookies, both of them necessary, and neither of them follows you anywhere.

• A sign-in cookie, so the app knows it is you. Without it you would sign in on every screen.
• A theme cookie, set when you choose light or dark, so the choice survives a reload.

Your browser also keeps a few things locally so the app works away from signal: the workout you are part way through, changes waiting to be sent, and whether you have seen the install prompt. Those never leave your device.

Analytics

The app counts screen opens and feature use with Umami, which runs on our own server rather than anyone else’s. It sets no cookies, stores nothing on your device, and keeps no IP address. Visitors are told apart by a hash that is rebuilt daily, so it cannot follow you from one day to the next.

What it may record is deliberately blunt: a screen name with any identifier stripped out of it, and counts bucketed into ranges. It never receives a weight, a measurement, an exercise name or an account id. You can switch it off entirely under Profile, then Privacy.

Age

You need to be at least 16 to have an account. If you are a parent and believe a younger child has signed up, write to us and we will remove the account and its data.

If this page changes

The date at the top says when it last did. Small corrections happen quietly. If something changes that would matter to you, you will get an email about it before it takes effect.