Privacy Policy

Introduction

Welcome to Rep ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience while using our mobile application ("App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide when using the App, including:

• Account Information: Username, email address, and password when you create an account
• Profile Information: Full name, profile picture, and bio that you choose to add to your profile
• Workout Data: Challenge participation, session records, sets, reps, times, and performance statistics
• Social Information: Your connections (followers/following), challenge invitations, and social interactions

Camera and Photos

Our App requests access to your device's camera and photo library for the following purposes:

• Profile Pictures: To allow you to take or select a profile photo
• Session Photos: To capture and share photos of your workout sessions
• Challenge Documentation: To document and share your challenge completions

Important: Camera access is entirely optional. You can use the App without granting camera permissions. Photos you capture are stored on our secure servers only if you choose to upload them. We do not access your camera or photo library without your explicit action.

Automatically Collected Information

When you use our App, we may automatically collect:

• Device Information: Device type, operating system version, unique device identifiers
• Usage Data: App features used, time spent in the App, crash reports
• Log Data: Access times, pages viewed, and system activity
• Time Zone: Your device's IANA time zone (e.g., Europe/Rome), used so day-streaks and "today's" stats line up with your local day
• Push Notification Token: An anonymous device token issued by Firebase Cloud Messaging so we can deliver notifications you've opted into; you can revoke this any time in your device's notification settings

How We Use Your Information

We use the information we collect to:

• Create and manage your user account
• Provide, maintain, and improve the App's features and functionality
• Track your workout sessions and calculate performance statistics
• Display your achievements on leaderboards
• Enable social features such as following other users and sharing challenges
• Send you notifications about challenge updates, achievements, and social activity (with your consent)
• Respond to your inquiries and provide customer support
• Analyze usage patterns to improve the App experience
• Detect, prevent, and address technical issues or fraudulent activity

Information Sharing and Disclosure

We may share your information in the following circumstances:

Public Profile Information

Your username, profile picture, bio, and workout statistics may be visible to other users depending on your privacy settings. Leaderboard entries are visible to participants of each challenge.

Service Providers

We may share information with third-party service providers who perform services on our behalf, such as cloud hosting, analytics, and customer support. These providers are contractually obligated to protect your information. The specific providers we use are listed below.

• Google Firebase — provides several services we rely on:
  • Firebase Authentication / Google Sign-In: lets you sign in with a Google account. Google receives your basic profile (email, name, picture) when you choose this option.
  • Firebase Cloud Messaging (FCM): delivers push notifications. Uses an anonymous device token; the message content itself is sent by us.
  • Firebase Crashlytics: collects anonymized crash reports and non-fatal error logs (stack trace, OS version, device model, app version, your anonymous installation ID). Does not include personal data from your account; we use it solely to diagnose and fix bugs.
  • Firebase Analytics: records a limited set of in-app events (such as opening a screen, creating a record, sharing a result, or the terms you search for in challenge discovery) to help us understand how the App is used. Events are tied to an internal account ID and your device's advertising ID (collected by Firebase); we do not log your email, name, comments, or workout notes in these events.
  See Firebase Privacy and Security.
• Render — hosts our backend API and PostgreSQL database in the European Union. See Render's privacy policy.
• Netlify — hosts this marketing website (the App itself does not run on Netlify). See Netlify's privacy policy.

Optional Hevy Sync (User-Initiated)

If you choose to connect your own Hevy account by entering your personal Hevy API key in the App's settings, completed workouts (exercise, sets, reps, weight, duration, and any notes you add) are sent directly from your device to Hevy's servers to appear in your Hevy account. This happens only when you enable the feature, and you can turn it off at any time. Your Hevy API key is stored only on your device and is never sent to our servers. See Hevy's privacy policy for how they handle your data.

Legal Requirements

We may disclose your information if required by law, legal process, or governmental request, or to protect our rights, privacy, safety, or property.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We do not sell your personal information to third parties.

Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure authentication with hashed passwords
• Regular security assessments and updates
• Access controls limiting who can view your data

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. You can permanently delete your account and associated data at any time, either in the App (Settings → Delete account) or on this website at workoutchallenge.app/account. Some information may be retained for legal or legitimate business purposes.

Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Delete your account and personal data yourself, in the App (Settings → Delete account) or at workoutchallenge.app/account
• Opt-out: Disable notifications or withdraw consent for optional features
• Portability: Download your data in a portable format at any time from workoutchallenge.app/account

To exercise these rights, please contact us at the email address provided below. You can also download a copy of your data yourself at workoutchallenge.app/account.

Managing Permissions

You can manage app permissions (camera, notifications, etc.) through your device settings at any time. Disabling certain permissions may limit some App functionality.

Children's Privacy

Our App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected personal information from a child under 13, we will promptly delete it. If you believe we may have information from a child under 13, please contact us.

Third-Party Links and Services

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Significant changes may be communicated through the App or via email. Your continued use of the App after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: