Privacy Policy

What we collect and why

Account information

• Email address and password — to create and secure your account. Passwords are handled by our authentication provider (Supabase Auth) and are never visible to us in plain text.
• Display name — shown on your profile and, if you publish or coach, to other users.
• Preferences — unit preference (lbs/kg), experience level, default rest timer, theme and naming preferences, notification settings.
• Optional profile extras — a short bio, your gym’s name, featured personal records, and a profile cover image, if you choose to add them.

Fitness and workout data

• Workout logs — sessions, exercises, sets, weight, reps, warmup flags, and any notes you write.
• Personal records — best lifts and estimated one-rep maxes, calculated from your logged sets.
• Programs — training programs you create, clone, or follow, and your progress through them.
• Body measurements — only if you log them: body weight, body fat percentage, and tape measurements (chest, waist, hips, biceps, thighs, calves, neck).

We use this data for one purpose: showing you your training history, progress charts, and analytics. Training analytics — volume and workload trends and the rest — are computed from your own logged workouts.

Strength Almanac does not connect to Apple Health / HealthKit. Nothing is read from or written to other health apps.

Notifications

• Push tokens — if you enable notifications, we store the device push token needed to deliver them (via Apple’s and Expo’s push services). You control which notification types are on, per category, in settings.

Usage events

• Onboarding and app events — lightweight events like “screen viewed” or “onboarding completed,” tied to your account. We use these to find where the app confuses people, and fix it. This is our own database, not a third-party analytics company.

Crash and error diagnostics

Strength Almanac uses Sentry for crash and error reporting. When the app crashes or hits an unexpected error, Sentry receives a technical report: the error message and stack trace, a short label identifying the part of the app it came from, your device model and operating-system version, the app version and build, and the time it happened. A sample of performance traces — screen-load and navigation timings — is collected the same way. Sentry also sees the network address the report arrives from, as any internet service does.

We do not attach your name or email address to these reports, and your workouts, records, measurements and notes are never included. Crash reporting is part of the builds we distribute rather than something you switch on, because an app that crashes silently is one we cannot fix.

Purchases and subscriptions

Strength Almanac is a paid app. There is no ad-supported tier and no no-cost tier — the floor is Bronze at $1/month, and it includes the complete tracker. Higher tiers add cosmetic recognition and, at Gold, advanced training analytics.

Purchases are processed by Apple’s App Store, and RevenueCat is the service we use to record which tier you are entitled to and keep it in sync across your devices. RevenueCat receives your Strength Almanac account identifier — a random id, not your email — along with which product you bought and the status and dates of your subscription. It does not receive your training data.

We never see or store your card number, billing address, or full payment details. Apple handles the transaction and tells us only whether an entitlement is active.

Records we keep to protect users

• Coach activity log — actions within a coaching relationship (comments added, suggestions made, relationship changes) are logged. Both parties can see this log. It exists so coaching stays accountable.
• Consent records — when you accept the coach or coachee terms, we record which version you accepted and when.
• Abuse-prevention counters — things like invite-code lookup attempts are counted to rate-limit guessing attacks. Moderation reports you file, about coaches or community programs, are stored for our review.
• Email-change safety records — when you change your account email, we briefly keep the old and new address (up to 7 days) as an account-security safeguard.

Beta participation

• Beta cohort flag — while the app is in TestFlight beta, your account is marked as a beta participant. That is how we recognise early testers afterward, including the permanent Beta Founder badge. The flag is permanent; it contains no extra personal information.
• Feedback — if you email us or send feedback through TestFlight, we receive whatever you include. TestFlight feedback and screenshots travel through Apple; see Apple’s terms for how TestFlight itself handles data.

What we do not collect

No location. No contacts. No advertising identifiers. No third-party advertising or tracking SDKs. No HealthKit data. No card numbers or billing details.

Who can see your data

By default: only you. Every table in our database enforces row-level security — your workouts, records, measurements, and programs are readable only by your account.

There are exactly three ways anyone else sees your data, and all three start with an action you take.

1. Inviting a coach, or accepting a coachee

If you connect with a coach in the app, that coach can view your workouts, programs, personal records, training analytics, and body measurements for as long as the relationship is active. Two things to know:

• You can hide body measurements from your coach with the “Hide body data from coach” toggle — the rest of the sharing still works.
• You can revoke the relationship at any time, which immediately cuts off the coach’s access.

Coaches never get your password, email settings, or account controls — read access to training data only, plus the ability to comment and suggest program edits.

2. Publishing a program to the community

Publishing is always an explicit action. When you publish a program, its name, description, structure, and your display name become visible to other Strength Almanac users, along with upvote and clone counts. Your workout logs, records, and measurements are never included. If someone clones your program, your display name travels with it as attribution.

3. Reports and moderation

If a user reports a coach or a community program, a small number of administrators can view the report and the minimum related records needed to act on it — the reported program, say, or the coaching relationship’s activity log. Administrators can also view aggregated onboarding statistics. Admin moderation actions are themselves audit-logged.

We never sell your data, share it with advertisers, or hand it to third parties for their own purposes.

Where your data lives

Your data is stored in our backend, hosted on Supabase, in a United States region. Data is encrypted in transit. The service providers we rely on to run the app:

• Supabase — database, authentication, and backend hosting
• Expo and the Apple Push Notification service — delivering push notifications (device push tokens only)
• Sentry — crash and error diagnostics
• RevenueCat — subscription and entitlement management
• Apple — App Store distribution, purchases, and TestFlight beta feedback (governed by Apple’s terms)

These providers process data only to provide their service to us.

Retention and deletion

• Delete your account any time, in the app: Profile → Account → Delete account. Deletion starts a 7-day grace period during which you can restore everything just by signing back in. After 7 days, your account and its data are permanently and automatically purged.
• Dormant accounts: if an account has gone 90 days with no activity, and it is neither a lifetime supporter nor inside an active paid subscription, we automatically anonymize the profile — the email and profile details are cleared and the display name becomes “Deleted User.” Signing in resets the clock and prevents this.
• Email-change safety records expire after 7 days.
• Everything else is kept while your account exists, because it is your training history. That is the product.

You can also email us at the address below to request deletion or a copy of your data, and we will handle it.

Children

Strength Almanac is rated 17+ and is not directed at children. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, contact us and we will delete it.

Changes to this policy

If we change what we collect or how we use it, we will update this page, change the effective date at the top, and — for anything meaningful — tell you inside the app before the change applies. We will not quietly move the goalposts.

Contact

Questions, deletion requests, or anything else:

[email protected]

Curious how the numbers in the app are calculated? That is documented too, on the Measurement Science pages.