Privacy Policy

Last updated: June 2026

1. Overview

This Privacy Policy explains how RepSmith ("the app", "we", "our") handles your information. RepSmith is an Android fitness tracking application developed and operated as an independent project.

By using RepSmith you agree to the practices described in this policy.

2. Account & authentication

RepSmith requires you to create an account to use the app. You can sign up with an email address and password, or via a supported OAuth provider (e.g. Google). Authentication is handled by Supabase, a third-party service hosted on AWS in the EU region.

When you create an account, the following is stored on our Supabase backend:

• Your email address (used for sign-in and account recovery only)
• A hashed password (we never see your plain-text password)
• A unique user ID used to associate your data with your account
• Account creation timestamp and last sign-in timestamp

We do not collect your name, phone number, or any other personal identifiers unless you choose to provide them in the Community profile (optional).

3. Data stored on your device

All fitness data is stored locally in a SQLite database on your device. This includes:

• Workout history — exercises, sets, reps, weight, duration
• Custom exercises and categories
• Routines and predefined sets
• Body tracker measurements and progress photos
• Personal records and goals
• Protocol and supplement logs (if used)
• App settings and preferences

4. Cloud sync & backup

When you are signed in, RepSmith optionally syncs the following to our Supabase cloud database so your data is available across devices and is protected against device loss:

• Workout data — workouts, sets, exercises, routines, personal records, body measurements
• Progress photos — stored in Supabase Storage (encrypted at rest). You can delete them at any time from the app or by contacting us.
• Entitlement status — whether you have an active subscription or promo code, so premium features are available across devices

Cloud sync is tied to your account. If you delete your account, all cloud data is permanently deleted within 30 days.

5. Community features

RepSmith includes optional community features. By default, nothing you log is visible to other users. You must explicitly choose to publish content. When you do:

• Published routines or exercises — the name, description, and exercise details you choose to share are visible to all signed-in users
• Display name — if you set one in your profile, it is shown alongside your published content
• Follows and likes — these are stored server-side and are visible to other users in aggregate (e.g. follower counts)

You can unpublish or delete community content at any time from within the app.

6. Exports

RepSmith allows you to export your data as CSV files. Exported files are saved to your device storage and shared via Android's standard share sheet. RepSmith does not retain a copy of exported files. You are solely responsible for the security of any exported data.

7. In-app purchases & subscriptions

RepSmith offers a monthly subscription (RepSmith Premium) to unlock advanced features. All payments are processed exclusively through the Google Play Store. RepSmith does not collect, process, or store any payment information. Please refer to Google's Privacy Policy for details on how payment data is handled.

Your subscription status (active / trial / free tier) is stored server-side and linked to your account solely for the purpose of granting access to the correct features.

8. Permissions

RepSmith requests only the permissions necessary for its features:

• Internet — for account authentication, cloud sync, and community features
• Storage / Files — to save CSV exports to your device
• Notifications — to display rest timer countdowns
• Foreground Service — to keep the rest timer running when the screen is off
• Read Media Images — to let you pick progress photos from your gallery (Body Tracker feature only)
• Camera — only if you choose to take a photo directly from within the app (Body Tracker feature only)

No permission is used for any purpose beyond what is described above.

9. Third-party services

RepSmith uses the following third-party services:

• Supabase — authentication, cloud database, and file storage. Supabase Privacy Policy
• Google Play Billing — subscription and payment processing. Google Privacy Policy

RepSmith does not integrate any third-party analytics, advertising, or tracking services. The app contains no ads.

10. Data retention & deletion

You can delete your account and all associated cloud data at any time from the app's account settings. Upon deletion:

• Your authentication record, profile, and all synced data are permanently deleted within 30 days
• Progress photos stored in cloud storage are permanently deleted
• Community content you published is anonymised or removed
• Data stored locally on your device is not affected — you can clear it manually via Android settings

If you cannot access your account to request deletion, email us at ging999@gmail.com and we will action it within 30 days.

11. Children's privacy

RepSmith is not directed at children under the age of 13. We do not knowingly collect any information from children under 13. If you believe a child has created an account, please contact us and we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated date at the top. For significant changes we will notify signed-in users via the app. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.

13. Contact

If you have any questions about this Privacy Policy, a data deletion request, or any other privacy concern, please get in touch:

• Website: repsmith.app
• Email: ging999@gmail.com