Privacy Policy

1. The short version

• The core app works fully offline and needs no account. Your workout history is stored on your device.
• There is no Rep Today server behind your workouts. Optional sync goes to your own private iCloud, which we cannot read.
• The app collects anonymous, opt-out usage measurement tied to a random per-install identifier - never your name, email, or an advertising ID.
• There are no ads, no third-party trackers, no advertising identifier, and no cross-app tracking. We do not sell your data.
• You can turn usage measurement off in Settings, and you can delete your account and data from within the app.

2. Your workout data lives on your device

Rep Today generates every workout on your phone, with no network call. Your profile and your workout history are stored locally on your device. The app does not send this information to any Rep Today server, because there is no Rep Today server behind the core experience.

If you never turn on iCloud sync or Apple Health, and you leave anonymous usage measurement on its default, the only information that leaves your device is the anonymous usage measurement described in section 6.

3. Optional private iCloud sync

If you choose to sync, your workout history is stored in your own private iCloud database using Apple's CloudKit. This lets your data move between your Apple devices. It is held in your personal iCloud account, governed by Apple's iCloud terms and privacy policy - Rep Today does not operate a server that holds this data and cannot read your private iCloud database.

Sync is additive and optional. If you do not enable it, or if iCloud is unavailable, the app works exactly the same using only on-device storage.

4. Sign in with Apple

Sign in with Apple is optional and exists only to associate your private iCloud sync with your Apple account. The app does not require it to generate or run a workout.

When you use it, the app stores an Apple-provided user identifier in your device's Keychain. The app does not collect your name or email address through this flow, and it does not use this identifier for advertising or tracking. When you delete your account (section 8), this stored identifier is removed from the device.

5. Apple Health (write-only, optional)

If you grant permission, Rep Today writes completed-workout and energy samples to Apple Health on your device. This is write-only: the app records your sessions into Health and does not read your Health data back out. These samples stay within Apple's HealthKit on your device and are governed by your Health privacy settings.

iOS asks for this permission separately, and the app functions normally if you decline.

6. Anonymous usage measurement

To understand how the app is used and improve it, Rep Today collects a small amount of anonymous product usage data. This is sent to Rep Today's own usage-data endpoint. It is designed not to identify you.

What is collected

• A random per-install identifier - a UUID generated on the device the first time the app runs and stored in the app's local settings. It is not your Apple ID, not the iOS advertising identifier (IDFA), not the identifier-for-vendor, and not an email address. It is not linked to your identity, and deleting the app removes it (subject to the note below).
• Event names and timestamps for a fixed, pre-defined set of product events - for example that the app was installed, that onboarding started or completed, that a session started, completed, or was abandoned, and monetization steps such as a paywall being shown or a subscription starting.
• Non-identifying properties attached to those events, such as a requested session length in minutes or a generation time in milliseconds. These do not describe who you are.

What is not collected here

This measurement carries no name, no email, no advertising identifier, no precise location, and no free-text you enter. It is not used to build an advertising profile and is not shared with advertising networks.

You can turn it off

Anonymous usage measurement is on by default and can be turned off at any time in the app under Profile → Settings → Privacy. This is also disclosed on the first onboarding screen. When it is off, the app stops sending these events. Turning it off takes effect on the next event, not on the next launch.

A note on the random identifier: it is stored in the app's local settings rather than a durable system store, so it is meant to be gone when you delete the app. Because iOS device backups and device-to-device transfer can include app settings, a restore from such a backup could carry the same identifier forward.

7. What we do not do

• We do not sell your personal data.
• We show no ads and include no advertising SDKs.
• We use no third-party analytics or tracking SDKs - the anonymous measurement above goes only to Rep Today's own endpoint.
• We do not use the iOS advertising identifier (IDFA), and the app presents no App Tracking Transparency prompt because it does not track you across other companies' apps or websites.
• We do not run a server that holds your workout history; sync uses your own private iCloud.

8. Deleting your data

You are in control of your data:

• Delete your account and data in the app. Rep Today provides an in-app account-deletion flow that removes your profile and workout history and clears the Sign in with Apple identifier stored in the device Keychain.
• Delete the app. Removing the app from your device removes its local storage, including the random per-install identifier described in section 6 (subject to the backup note there).
• iCloud data lives in your own private iCloud account; you can also manage or remove app data through your device's iCloud settings.
• Turn off usage measurement at any time in Settings to stop sending anonymous events.

9. This website and the waitlist

This section covers this website (reptoday.app), which is separate from the app.

If you join the pre-launch waitlist, the email address you enter is collected and stored by our email provider (Kit) so we can email you when the app launches. We use it for that purpose. This is distinct from the app, which never asks for your email.

This website is static. Any additional processing performed by the hosting or email provider is governed by that provider's own privacy terms.

10. Children's privacy

Rep Today is a general-audience fitness app and is not directed at children.

11. Your privacy rights

Depending on where you live, you may have rights over personal data, such as the right to access or delete it. Because Rep Today keeps your workout data on your device and in your own iCloud, and collects only anonymous usage measurement you can turn off, you can already exercise the core of these controls yourself through the app (section 8).

12. Changes to this policy

If our data practices change, we will update this page and revise the "Last updated" date above. Because Rep Today is pre-launch, this policy will be reviewed and finalized before the app is distributed on the App Store.

13. Contact

Questions about privacy or this policy? Contact us at [privacy contact email - to be confirmed before publish].

Placeholder: the captain should set the contact address before this page goes live. The website's waitlist fallback currently uses hello@reptoday.app; confirm whether that or a dedicated privacy address is the right contact here.