Privacy

Leigh Briody, Ireland, acting as a sole trader, is the data controller. There is no company and no team — one person runs this. Contact: lbriody10@gmail.com.

• Your email address, and the timezone your device reports. Nothing else identifies you — no name, no phone number, no date of birth.
• What you log: sessions, exercises, weights, reps, how hard it felt, and any notes you type.
• Your bodyweight, only if you switch that feature on in Settings and enter it.
• Daily calorie and protein totals, only if you switch that beta feature on in Settings and enter them.
• Daily step counts, only if you switch that beta feature on in Settings and enter them.
• Progress photos, if your account can upload them — see below.

Everything after the first line is optional. An app with nothing but lifts in it works fine.

Your weight, your calories and your photos are data concerning health under Article 9 of the GDPR. The only basis being relied on is your explicit consent, given under Article 9(2)(a) at the separate tick box shown when you sign up.

That consent is asked for on its own, not bundled into the terms, and you can take it back at any time from Settings. Because processing your health data is the entire point of the app, withdrawing it means closing your account — there is no honest version where you stay and the data stays.

Your email address is handled on a different basis: it is needed to perform the contract of giving you an account you can sign in to.

Photo upload is not available on new accounts. It exists for the operator’s own account only, and it is held back deliberately — hosting other people’s body photos is the riskiest and most expensive thing this app could do, and it is free.

Where photos do exist, be aware of a real limitation, stated plainly because the alternative is a promise that is not kept: the files are stored with a long, random, unguessable web address, but they are not behind a login. Anyone who obtains that address can open the photo without signing in. Nothing publishes or links those addresses, and they are not listed anywhere, but that is obscurity rather than access control. Private storage is a paid feature of the file host and this app does not pay for one.

No face recognition, no automatic tagging and no image analysis of any kind runs on them. They are stored so you can look at them later, and nothing else reads them.

Your data is never sold, never shared for advertising, and never used to train anything. It reaches these services only because the app cannot run without them:

• NeonThe database — Everything you log, and your email address
• VercelRunning and serving the app — Request logs, including IP address
• UploadThingStoring progress photos — Photo files (operator account only — see the policy)
• AnthropicThe optional Claude connector — Only your calories, protein and weight, and only if you connect it yourself

Each is bound by a data processing agreement. The database is currently hosted in the United States (Ohio), so your data is transferred outside the European Economic Area. That transfer relies on the European Commission’s standard contractual clauses. Moving it to an EU region is an open task and this page will say so when it changes.

The app also uses Vercel Analytics to count page views. It sets no cookies and builds no profile of you.

While your account exists. When you delete it, the data stays for 7 days in case you change your mind, and is then destroyed — the database rows and the photo files both.

• Get a copy. Settings has a button that downloads everything you have ever logged as one file. No request, no waiting.
• Delete everything. Also in Settings, also immediate — no email, no form, no asking permission.
• Withdraw your consent to health-data processing, as easily as you gave it.
• Correct anything. Every number in the app is editable by you.
• Complain. To the Irish Data Protection Commission, at dataprotection.ie, whenever you like and without going through us first.

You must be 16 or older, which is the age at which you can consent to this yourself in Ireland. If you are under 16 you cannot use the app, and an account found to belong to someone younger will be deleted.

Because 16- and 17-year-olds can use it, some things are deliberately absent and will not be added: no streaks, no badges, no leaderboards, no comparison with other users, and no advice about what to eat or lift. The app reports your numbers back to you. It does not tell you what they mean or what to do about them.

If what is collected or why ever changes materially, consent will be asked for again rather than assumed.