Privacy Policy

Last updated: 2026-10-13

REPutation is a workout tracker built to keep your data on your device by default. This policy describes what the app collects, where it lives, and what you can do with it.

What we collect

You choose whether to sign in. That choice determines what the app collects.

Device-only mode (no sign-in)

If you never sign in, nothing leaves your device. The coach answers on the device from your log. Everything you log — sessions, sets, templates, body metrics, preferences — lives on the device. There is no account and no analytics.

If you delete the app, clear its data, or switch devices, that history is gone. Export a backup from More → Data & sync if you want a copy.

Signed-in mode (email account)

When you sign in, the app stores the following on our server (Supabase Postgres, with row-level security scoped to your user id):

• Account: your email address, an internal user id, and a password if you choose to set one (stored hashed by Supabase Auth; we never see it).
• Profile: display name, units, week-start day, weekly workout goal, optional height, birth year, sex, training goal, goal weight, notes for the coach, appearance preferences, and which badges and levels you've already been shown.
• Training data: workouts, exercises, sets, personal records, templates, custom exercises, and the body metrics you log (bodyweight, body fat, measurements and so on).
• Sync bookkeeping: timestamps and revision numbers used to reconcile writes across devices.

Another signed-in user cannot read or write your rows.

Sign-in emails

Sign-in, confirmation and password-reset emails each carry a 6-digit code. They are sent through Resend, which receives your email address and the code in order to deliver them.

Error diagnostics

When you are signed in, the app may write an error record to our database if it hits a bug: the error message, its stack trace, the page URL, the device's user agent and the app version. No form fields and no training data. You can't read these records in the app; only the developer can. They are deleted with your account. Device-only mode reports nothing.

AI coach

The coach is optional, and the version that calls Gemini needs an account. When you send it a message while signed in, the app sends your message and a summary of your training to Google's Gemini API through our server:

• Your display name, age (from birth year), sex, experience, training goal, notes for the coach, bodyweight, height and goal weight, when set.
• Recent workouts (date, title, exercises, set counts and volume), weekly totals, your strongest lifts, sets per body region, your templates and training patterns.
• When it needs more, the coach can ask the app for an exercise's history, progress, matching workouts, a template or a body metric; the app answers from your log.

The "What's sent" button on the coach screen shows the exact summary. Google processes these requests under its API terms. We don't sell your data or use it for advertising.

Notifications

Rest-timer alerts and reminders are scheduled on your device. Nothing about them is sent to a server.

What we do not collect

• No third-party analytics, crash reporting, advertising, ad identifiers or tracking.
• No location, contacts, calendars, photos, microphone or camera.
• No Apple Health data.

Where your data lives

• On your device: the app's local database, plus your sign-in session when signed in.
• On the server: Supabase (database, auth and server functions). Coach requests pass through Google's Gemini API and sign-in emails through Resend.
• Web hosting: Vercel serves the web app at reputation.fitness/app.

What you can do

• Export: More → Data & sync → Export saves every one of your rows as a JSON file.
• Import: More → Data & sync → Import restores from that file.
• Clear this device: More → Data & sync → Clear local data removes everything stored on the device. A signed-in account downloads it again; a device-only history is lost.
• Delete your account: More → your account → Delete account removes your account and every row of it from the server. This can't be undone.

Data retention

Your data is kept until you delete it, delete your account, or clear the device. Error records are kept for troubleshooting and are deleted with your account.

Children

REPutation is not directed at children under 13. Do not create an account for a child under 13.

Changes

Material changes show up in the "Last updated" date above and, where they matter, in the app.

Contact

Questions: open an issue at github.com/hguha/tracker-apps/issues.