Privacy Policy
Effective [Month Day, Year]
Repvale ("we", "us") is run by [Your name or company]. This policy explains what information the app collects, why, and the choices you have. In short: we collect only what's needed to run your workout tracker, we don't sell it, we don't show ads, and you can download or delete it at any time.
What we collect
- Account details: your email address and password. Passwords are stored only as a secure hash by our authentication provider; we never see them. If you sign in with Google, we receive your email address and name from Google. Guest accounts have no email or password: they are linked only to your browser.
- Profile and settings: an optional display name, your units (lb/kg), rest-timer length and theme.
- Your training data: workouts, exercises, sets, reps, weights, times, distances, notes, templates and custom exercises.
- Planner answers (only if you use the planner): age, goal, experience, training days and time, equipment, sports and activities, exercise preferences, and areas you'd like to go easy on (such as knees or lower back). These last answers can relate to your health, so we use them only to build your plan.
- Technical data: our hosting and database providers keep standard server logs (such as IP address, browser type and time of request) for security and troubleshooting.
How we use it
- To provide the app: save and sync your workouts, show your history and progress, and build your plan.
- To send account emails you ask for, such as sign-up confirmation and password reset.
- To keep the service secure and working.
We don't sell your information, use it for advertising, or share it with data brokers. The planner runs inside the app using fixed training rules; your answers aren't sent to any AI service.
Who we share it with
Only the service providers that run the app for us, under their own security and privacy commitments:
- Supabase: database and sign-in.
- Vercel: website hosting.
- Our email delivery provider: account emails.
- Google: only if you choose "Continue with Google".
Friends you add: only if you accept or send a friend invite. Friends see your display name and, for your finished workouts, the workout name, date, length, exercise names and number of sets, plus any cheers. They never see your email, notes, weights, body weight or plan. You can turn off "Show my workouts to friends" or remove a friend at any time.
Global streak leaderboard: only if you join it. Other users see a random nickname the app picks for you (never your name) and your current and best weekly streak. Nothing else. You can leave at any time and you are removed immediately.
We may also disclose information if required by law. Your account and training data are stored in Canada (Supabase's Canada Central region). The website is served by Vercel, which may process requests, and the technical data that comes with them, in the United States and other countries.
Cookies and storage on your device
We use only what's needed for the app to work: a sign-in cookie that keeps you logged in, a cookie that remembers your theme, and storage on your device for unsent workout edits (so nothing is lost with a bad signal) and your rest timer. There are no advertising or tracking cookies.
How long we keep it, and deleting it
- We keep your data while your account exists.
- Settings → "Delete my account and data" permanently deletes your account and everything in it.
- Plan → "Delete plan and answers" deletes your planner answers and plan at any time.
- Server logs and backups held by our providers are deleted on their normal schedules.
Your choices and rights
You can see and change your information in the app, download your workouts (Settings → Export workouts), and delete your data at any time. Depending on where you live you may have further rights, such as asking for a copy of your data or complaining to a privacy regulator. Contact us at [contact email] for any privacy request.
Security
Data is encrypted in transit, and each account can only access its own data, enforced by the database itself. No system is perfectly secure, so please use a strong, unique password.
Children
Repvale is for people aged 13 and over. We don't knowingly collect information from children under 13. If you believe a child under 13 has created an account, contact us and we'll delete it.
Changes
If we change this policy, we'll update the date above and, for significant changes, let you know in the app or by email.
Contact
[Your name or company], [contact email]