Privacy Policy

Creating an account through an invite code collects your email address and password.

Using the app stores the training data you enter: routines, custom exercises, logged workouts (sets, reps, weight, notes), and your preferences (weight unit, bodyweight, rest-timer settings, theme).

Redeeming an invite code links your email to that code so it can't be reused — that record is visible only to the account that generated the code.

Nothing else is collected. There's no location tracking, no ad or marketing tracking, and no analytics SDK embedded in the app itself.

Passwords are handled entirely by Supabase Auth (the app never sees or stores your plain-text password). Everything else lives in a Supabase database managed through Lovable Cloud, which also hosts the app. Lovable's hosting platform may log basic access data (like visit counts) the way most web hosts do — that's a property of hosting the site, not something this app adds on top.

Your browser stores a few small things locally on your own device: your login session, your theme choice, and rest-timer state. These never leave your device and aren't collected by the app.

Your training data is private to your account — row-level security on the database means no other user (including other invited accounts) can read, edit, or delete it, only you.

The account that generates invite codes can see which email redeemed which code, and can revoke unused codes. It cannot see your workout data.

Your data is never sold, shared, or used for advertising. There are no other third parties.

Settings → Danger zone → Delete account removes your account and everything tied to it — routines, logged workouts, custom exercises, and preferences — immediately and permanently. There's no recovery window once it's confirmed.

If what's collected or how it's handled changes, this page will be updated and the date at the top will change with it.