Privacy

What we keep

• Your username.
• Your password, as a scrambled (hashed) value. We never store or see the password itself.
• The workouts and sets you log: the date, exercise, reps and weight.
• Your rest-length setting.
• To send the rest alert to a locked phone, an address from your phone's browser. It stays on your phone and inside a short scheduled message that lasts about as long as your rest.
• Simple usage events (for example, that a set was logged or a timer finished). They are tagged with a random ID, never your username or your workout details.

What we do not collect

• No email address, phone number or location.
• No payment details, contacts or photos.
• We do not show ads or sell your data.

Who helps run it

• Supabase stores your account and workouts.
• Vercel hosts the app.
• Upstash holds the rest alert until your rest ends.
• PostHog records the usage events.
• Apple and Google deliver notifications to your phone.

Forgotten passwords

Because we do not collect an email address, we cannot reset a forgotten password. Keep it somewhere safe.

Deleting your data

We keep your data until you delete your account. To delete it, open Account, then Delete account. Your username, password, settings and every workout and set are removed right away, and any pending rest alert is cancelled.

The usage events described above may stay in our analytics tool. They carry only a random ID, with no name, email or workout details.