Privacy Policy

Last updated: 19 July 2026

This Privacy Policy explains how Repstrack ("Repstrack", "we", "us", or "our") collects, uses, and safeguards your information when you use the Repstrack mobile application (the "App"). By using the App, you agree to the practices described here.

Our core promise: your workout data is yours. We never sell your personal information, and we never share the contents of your workouts (exercises, weights, reps, body weight) with advertisers or analytics providers.

1. Information we collect

Account information

When you create an account we collect your email address and authentication identifiers. If you sign in with a third-party provider (such as Google), we receive a basic account identifier and email from that provider — we do not receive your password.

Workout and profile data

We store the data you enter to make the App work, including your workouts, exercises, sets (weight and reps), templates, programs, body weight, unit preference, and progressive-overload history. This data is created by you and stored so it can sync across your devices.

Anonymous usage analytics (opt-in)

Usage analytics are off by default. Nothing is collected unless you opt in via Profile → Privacy → "Share anonymous usage data". When enabled, we collect non-identifying events such as counts, durations, and feature-usage flags (for example, that a workout was completed and how many sets it contained). These events never include your email, exercise names, weights, reps, or body weight. Analytics are provided by Google Analytics for Firebase with ad personalization and advertising identifiers disabled.

Diagnostic and crash data

To keep the App stable we use error-reporting (Sentry) that may collect technical information when the App crashes or errors — such as device model, operating system version, and a stack trace. This helps us fix bugs and is not used to identify you.

Device and push tokens

If you enable notifications, we store a push notification token so we can deliver reminders and updates you have requested.

2. How we use your information

To provide, operate, and sync the App across your devices.
To generate progressive-overload recommendations from your workout history.
To authenticate you and secure your account.
To send notifications you have opted into.
To diagnose crashes and improve reliability and performance.
To understand aggregate, anonymous feature usage — only if you opt in.

3. How your data is stored and secured

Repstrack is offline-first: your data is written to secure local storage on your device and then synced to our cloud infrastructure (Supabase), which is hosted in a Singapore data center. Data in transit is encrypted using TLS. Access to your records is protected by per-user authorization rules so that your data is only accessible to your account. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

4. Sharing and disclosure

We do not sell your personal information. We share data only with:

Service providers who process data on our behalf to run the App (cloud hosting and database, authentication, crash reporting, and — only with your consent — analytics and push delivery).
Legal authorities, where required by applicable law, regulation, legal process, or enforceable governmental request.
A successor entity in connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy.

5. Your rights and choices (including GDPR)

Access & export: you can export your workout data from within the App. Under GDPR, you have the right to request a copy of the personal data we hold about you.
Correction: you can edit your profile and workout data at any time to correct any inaccurate or incomplete data.
Analytics opt-out: analytics are off by default and can be toggled off at any time in the App's Privacy settings.
Deletion (Right to be Forgotten): you can delete your account from within the App, which removes your associated personal data and resets on-device analytics identifiers.
Restriction & objection: you have the right to request that we restrict the processing of your personal data, or object to processing under certain conditions.
Data Portability: you have the right to request that we transfer the data we have collected to another organization, or directly to you, in a structured, commonly used, and machine-readable format.
Lodge a complaint: if you are in the EU/EEA/UK, you have the right to lodge a complaint with your local data protection authority regarding our processing of your personal data.

To exercise any of these rights, please contact us using the details in Section 10.

6. Data retention

We retain your account and workout data for as long as your account is active. When you delete your account, we delete or anonymize your associated personal data, except where we are required to retain it to comply with legal obligations or resolve disputes.

7. Children's privacy

The App is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

8. International transfers and GDPR

Our database and cloud services are hosted in a data center located in Singapore. If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, your personal data will be transferred to, and processed in, Singapore.

Singapore is outside the EEA/UK and has not received an adequacy decision from the European Commission. We ensure that appropriate safeguards are in place for such transfers, including the use of Standard Contractual Clauses (SCCs) approved by the European Commission, or by obtaining your explicit consent where the transfer is necessary for the performance of the contract between us.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you within the App. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

10. Contact us

If you have questions about this Privacy Policy or your data, contact us at ravikiran.b2003@outlook.com.