Privacy Policy

Draft — not in force. This document is still being prepared and has not been reviewed. It does not govern anything. The version and date above are provisional.

This policy explains what RepForge collects, why, who else sees it, and what you can do about it. RepForge collects health and body data, so we have tried to be unusually specific rather than unusually broad. If anything here is unclear, write to [PRIVACY EMAIL] and we will answer.

The short version

We collect what the app needs to plan your training, log it, sync it between your devices, and show you your progress. Some of that is health data: your body weight, body-fat percentage, resting heart rate, sleep, pain you flag, and how you rate your hunger and stress.

We do not sell your data. We do not share it with advertisers. We do not run any analytics or tracking in the app at all. We do not build profiles about you for anyone else's benefit.

You can export your training history, or delete your entire account, from inside the app, at any time.

1 · Who we are

[COMPANY NAME], a [STATE] limited liability company at [ADDRESS], is the business responsible for the personal information described here. Contact us at [PRIVACY EMAIL].

2 · What we collect

Account. Your email address and authentication credentials, handled by Google Firebase Authentication, plus whether you have verified your email. We never see or store your password.

Profile and training preferences. Your display name; training experience level; primary goal and focus; training location; days per week and session length; preferred split; priority muscle regions; available equipment and plate and bar inventory; units (lb or kg); exercises you have chosen to avoid; app appearance and accent colour; and your notification preferences.

Body and physical characteristics. Biological sex, date of birth, and height — either entered by you or, if you connect Apple Health, read from it. Your starting body weight and your target body weight.

Physical limitations. A free-text field where you can describe injuries or limitations, and a list of body areas you have marked as affected. You choose whether to fill this in. It is used only to shape what the app suggests.

Training data. Your workouts, sets, reps, loads, rest times, session notes, routines, templates, plans, personal records, custom exercises, and cardio sessions.

Pain reports. If you flag pain during a workout, we store the body areas you selected, the severity you chose, any note you wrote, and when you flagged it. This is your own report, recorded so the app can offer substitutes and update your avoid list.

Physique-preparation data (if you use it). Your prep configuration, event type and date; daily macronutrient targets and adherence; peak-week checklist progress; and weekly or daily check-ins containing your body weight, body-fat percentage, lean mass, resting heart rate, heart-rate variability, sleep hours, and your own 1–5 ratings of sleep quality, energy, hunger, stress, training quality, and motivation.

Daily recovery ratings. If you use the daily recovery pulse during a prep, we store your 1–5 ratings of sleep quality, energy and muscle soreness, together with hours slept, for each day.

Marketing preference. Whether you opted in, when you signed up, to occasional product-update emails.

Apple Health data. See Section 3.

Location. See Section 4.

Photos, documents, and camera input. If you use AI Import, the photo, scanned image, or document you choose. See Section 5.

Social. If you use social features: your public @handle, your display name, your friend connections and friend requests, the workout summaries you have chosen to share, routines you have sent to or received from a friend, and emoji reactions you send or receive.

Devices and notifications. If you enable push notifications, a Firebase Cloud Messaging token per device together with which alert types you enabled, so our server knows where to send them.

Purchases. Whether you have an active RepForge Pro entitlement. Your subscription is verified on your device by Apple's StoreKit and cached there — it is not reported to or stored on our servers. We never receive your payment card details, billing address, or Apple ID. Apple handles all of that.

Support correspondence. If you email us, we keep the message and our reply.

3 · Apple Health

Connecting Apple Health is optional and entirely under your control. iOS asks you to approve each data type individually, and you can change or withdraw any of it at any time in the Health app — RepForge cannot see what you have not approved, and cannot tell the difference between "you said no" and "there is no data".

What we read from Apple Health: workouts; active energy burned; Apple exercise time; step count; walking and running distance; heart rate; body mass; your Activity ring goals; body-fat percentage; lean body mass; resting heart rate; heart-rate variability (SDNN); sleep analysis; and — for onboarding — your biological sex, date of birth, and height.

What we write to Apple Health: your finished lifting and cardio workouts, the active energy they burned, walking, running and cycling distance, the GPS route of an outdoor cardio session, and — from the Apple Watch app — the heart rate recorded during a session, so your training counts toward your rings and appears in Apple Fitness.

What we do with it: show your full day of training in one place, estimate calories, pre-fill check-ins so you do not retype numbers you already have, and calculate recovery and readiness views.

What we never do with it: we never use health or fitness data for advertising or marketing, never sell it, never use it for data mining, and never share it with third parties for their own purposes. We do not store Apple Health data in iCloud.

Values read from Apple Health that you save into a check-in are stored in your RepForge account as part of that check-in. Values used only to pre-fill a screen are not stored.

4 · Location

If you start an outdoor run, walk, or ride with GPS tracking, RepForge uses your device's precise location while that workout is active to measure distance and pace and to draw your route. iOS asks your permission the first time and shows the location indicator throughout.

Where your route goes. The full-precision route, with its timestamps, is written to Apple Health on your device and attached to that workout, which is what lets Apple Fitness show you the map. A simplified outline of the same route is also saved to your RepForge account — the path is smoothed to roughly 10 metres and capped at 500 points — so that RepForge can draw your route map itself, on any of your devices. The rest of what we store is the session summary: duration, distance, pace, and average heart rate.

About background tracking. While a session you started is running, location updates continue even if your phone is locked or you switch apps — that is what lets RepForge keep measuring a run you are actually on. Tracking stops the moment you finish the session. RepForge only ever requests “While Using the App” permission; it never asks for “Always” access, and it never starts tracking on its own.

We do not use location for any purpose other than the workout you started, and we do not use it to target anything at you. You can decline location access and still use every other part of RepForge; you will simply enter distance manually.

5 · AI Import, photos and documents

AI Import is a RepForge Pro feature. When you use it, the photo, image, or document you select is transmitted to Google and processed by Google's Gemini models through Firebase AI Logic, which returns a structured routine or plan that RepForge saves to your account.

We do not retain the source image or document after the parse completes; what we keep is the routine or plan it produced. Google's handling of the content it receives is governed by Google's terms for that service.

Only submit material you have the right to submit, and do not include medical records or other people's personal information. Camera access is used only when you choose to photograph a programme.

6 · What we do NOT collect

We want to be explicit, because many apps in this category do collect these things:

• No analytics and no tracking. RepForge contains no analytics SDK, no crash-reporting SDK, and no advertising SDK. We do not log which screens you open or which buttons you tap. We do not use the App Tracking Transparency framework because we do not track you.
• No advertising identifiers, no cross-app or cross-site tracking, and no advertising networks.
• No contacts, microphone, or photo-library access beyond the single image you pick for an import.
• No location access outside a workout you started, and never “Always” permission.
• No payment information.
• No sale of personal information, ever.

7 · How we use your information

We use what we collect to: create and secure your account; send you product-update emails if you asked for them; store, sync and back up your training across your devices; generate and adapt training plans, cardio prescriptions and macronutrient targets; calculate your progress, personal records, adherence and recovery views; pre-fill screens so you retype as little as possible; deliver the notifications you asked for; operate social features with the people you connected to; verify your RepForge Pro entitlement; prevent abuse and enforce our Terms; respond to your support requests; and comply with law.

We rely on your consent for health data and location, on the performance of our contract with you for the core service, and on our legitimate business interests for security and abuse prevention. You can withdraw consent at any time as described in Section 11.

8 · Who we share it with

We share personal information only with the service providers that make the app work, and only so they can perform services for us:

• Google Firebase Authentication — account creation and sign-in.
• Google Cloud Firestore — storage and synchronisation of your training data.
• Google Cloud Functions — server-side operations including recording your acceptance of these documents and account-deletion support.
• Google Firebase App Check — verifying that requests come from the genuine app.
• Google Firebase Cloud Messaging — delivering push notifications you enabled.
• Google (Gemini, via Firebase AI Logic) — only if you use AI Import, and only the content you submit.
• Apple — App Store distribution, subscription purchase and management, push delivery, and HealthKit. Apple's privacy policy governs what Apple does.

We may also disclose information if we are legally required to, to protect someone's safety, or to enforce our Terms; and, if the business is ever sold or merged, to the acquirer, in which case we will tell you and this policy will continue to apply until it is replaced.

Other users see only what you choose to share: your @handle and display name if you claim one, and the workout summaries you have enabled sharing for. Your body data, pain reports, check-ins, macros, limitations and email are never visible to other users.

9 · We do not sell or share your data

We do not sell your personal information, and we have not in the preceding twelve months. We do not share it for cross-context behavioural advertising, and we do not use or disclose sensitive personal information for any purpose other than providing you the app.

Because we do not do these things, there is nothing for you to opt out of — but your right to make that request exists, and Section 11 tells you how.

10 · How long we keep it, and what deleting does

We keep your data for as long as your account exists.

Deleting a workout removes that session and its data from your account.

Deleting your account (Settings ▸ Delete account) permanently erases the data this account owns in our database — your profile and training preferences, workouts, plans, templates, personal records, cardio sessions, measurements, preps and their check-ins, macro days, peak-week days, daily recovery ratings, shared summaries and their reactions, routines you sent to or received from friends, friend requests in both directions, your friend connections, device registrations, your saved app-state preferences, your public profile card, and your claimed handle, which is released for others to use — and then closes your login and wipes the app's data from your device. Any pending unsynced workouts on the device are purged too.

Deletion is immediate in our live database. Backups roll off within [N] days.

What we retain after deletion: the record that a particular account accepted a particular version of our Terms and Privacy Policy — the date, a hash of the text, how it was accepted, your confirmation that you met the minimum age, and your marketing-email preference. We keep this as proof of consent, for [N] years, because we may need to show it. It contains no training or health data. We also keep records we are required by law to keep, such as tax records for a purchase.

Your RepForge Pro entitlement record is held separately and is removed by us on request — email [PRIVACY EMAIL] and we will delete it.

Deleting your RepForge account does not cancel an Apple subscription — cancel it in your iPhone's Settings.

11 · Your rights and choices

Wherever you live, you can do all of the following:

• Access and export. Export your workouts, cardio sessions, personal records, body measurements, plans and saved routines as a file, from inside the app. That export does not yet cover your profile, limitations, prep check-ins, daily recovery ratings or social data — for a copy of those, email [PRIVACY EMAIL] and we will send them to you.
• Correct. Edit your profile, training data and preferences directly in the app.
• Delete. Delete individual workouts, or your entire account, from inside the app.
• Withdraw consent. Turn off Apple Health access in the Health app, turn off location in iOS Settings, turn off notifications, turn off each sharing switch, or stop using a feature. None of this requires contacting us. To stop product-update emails, use the unsubscribe link in any of them or write to [PRIVACY EMAIL].

Depending on where you live you may also have the right to know the categories and specific pieces of information we collect and disclose; to portability; to opt out of sale, sharing, or targeted advertising (we do none); to limit the use of sensitive personal information (we already limit it to providing the app); to non-discrimination for exercising a right; and to appeal a decision we make about a request.

How to make a request. Use the in-app controls, which are immediate — or email [PRIVACY EMAIL]. We will verify that the request comes from you, usually by confirming control of the account email, and respond within 45 days, extendable once by a further 45 days where permitted. An authorised agent may act for you with proof of authority. We do not charge for this, and exercising a right never costs you access, price, or features.

If we say no. We will tell you why, and you may appeal by replying to that email with "Appeal" in the subject. We will answer an appeal within 45 days. If you are still unsatisfied you can complain to your state Attorney General, or to the [STATE] Attorney General.

12 · Health data — Washington, Nevada, Connecticut

Some of what RepForge collects is "consumer health data" under Washington's My Health My Data Act, Nevada SB370, and Connecticut's health-data provisions.

We publish a separate Consumer Health Data Privacy Policy covering exactly what those laws require. It is linked separately from ours, in the app and on our website, and it governs that data. Please read it.

In summary: we collect that data only with your consent and only to provide RepForge to you; we do not sell it; we would never sell it without a separate signed authorisation from you; and you can delete it from inside the app.

13 · Canada

If you are in Canada, we handle your personal information in accordance with PIPEDA and applicable provincial privacy legislation. Your information is stored and processed in the United States by Google Cloud on our behalf, which means it may be accessible to US authorities under US law. By using RepForge you consent to that transfer. You may withdraw consent by deleting your account, and you may complain to the Office of the Privacy Commissioner of Canada. Québec residents have additional rights, including the right to be informed of automated decision-making — RepForge's plan generation is automated calculation from data you provide, and it does not produce legal or similarly significant effects.

14 · Security

Your data is protected by Google Cloud's infrastructure security and by per-user access rules that we enforce in our database configuration: only your authenticated account can read or write your data. Requests are attested by Firebase App Check. Data is encrypted in transit and at rest by our provider. Deleting your account also wipes the app's stored data from your device.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information we will notify you and the relevant authorities as required by law.

15 · Children

RepForge is not directed to children under 16 and we do not knowingly collect their personal information. You must confirm you are at least 16 to create an account. If you believe a child under 16 has an account, contact [PRIVACY EMAIL] and we will delete it.

16 · Changes to this policy

We may update this policy. When the change is material we bump the version, and the app asks you to review and accept the new version before it continues syncing. If you would rather not accept, you can sign out, and you can email [PRIVACY EMAIL] to request an export or the deletion of your data. The version and effective date are at the top of this document, and we keep previous versions available on request.

17 · Contact

[COMPANY NAME] [ADDRESS] Privacy: [PRIVACY EMAIL] Support: [SUPPORT EMAIL]

We answer privacy mail within [N] business days.