Privacy Policy – Simple Workout
Simple Workout ("the app") is a workout checklist and training tracker for iPhone, made by Colin Meyer ("I", "me"). This policy explains what the app stores, what leaves your iPhone, and what you can do about it. The short version: the app works fully without an account, I do not track you, there are no ads and no analytics, and I never sell your data.
Contact: simpleworkout@lunestudio.dev
1. Using the app without an account
If you choose "Use Without an Account", everything you enter – training days, exercises, weights, reps, sets, notes, completed sessions, ranks and settings – is stored only on your iPhone. Nothing is sent to me or to any server.
2. Using the app with an account
You can create an account to back up your data and keep it in sync. When you do, the following is sent to and stored on my server:
- Account details: your username, your email address, an internal user ID and whether the email has been verified. The email is used only to confirm that the account is yours, to let you reset a forgotten password, and to contact you about your account if needed. Passwords are never stored in readable form; they are stored as a salted hash by the authentication service.
- One-time codes: to verify your email or reset your password, my server creates a short code, stores only a hash of it for a few minutes, and emails the code to you. These are the only emails the app sends: no newsletters, no marketing.
- Shared days: if you send a training day to another user, a copy of that day (its name, colour and exercises) and your username are stored on my server until the recipient adds or declines it, or one of you deletes the account. Only the recipient can see it.
- Your training data: training days (name, colour, order), exercises (name, weight, reps, sets, machine, priority), completed sessions (date, day, number of exercises) and the per-exercise entries logged in them.
This data is used only to run the app for you: to sign you in, to sync your data across your devices and to restore it if you reinstall. It is not used for advertising, profiling or analytics.
3. Apple Health (Fitness) – optional
If you turn on "Show Fitness Workouts", the app asks permission to read strength workouts recorded in Apple Health (time, calories and heart rate). This data is read on your iPhone and shown next to your workouts. It is not written back to Health, not uploaded to my server, not shared with anyone, and not used for advertising. You can turn this off in the app or in iOS Settings at any time.
4. Other things on your device
- Smart muscle matching (optional, off by default, needs an account): if an exercise name is not recognised, only that name (nothing else, and no account details) is sent through my server to an AI model from Anthropic, which answers which muscle it trains for the body map. It is off until you turn it on in Settings → Workout, and you are asked first. The answer is stored with the name, not with you; my server only records that a request was made (your account id and the time) to limit how often it can be used.
- Notifications: the rest timer, the optional weekly-goal reminders and the optional gym check-in reminder are scheduled locally on your iPhone. There is no push-notification server.
- Face ID / passcode (app lock): handled entirely by iOS. The app only learns whether unlocking succeeded; it never receives your biometric data.
- Settings and preferences (theme, accent colour, language, units and so on) stay on your iPhone.
- Widgets and Live Activities show data from the app on your iPhone and do not send anything elsewhere.
5. What I do not do
- No advertising and no ad networks.
- No tracking across other apps or websites.
- No analytics or crash-reporting SDKs that identify you.
- No selling or renting of personal data.
6. Who processes data for me
- Supabase (database and sign-in), hosted in the EU (Ireland, AWS eu-west-1). It stores the account and training data described in section 2 on my behalf.
- Resend (email delivery): it receives your email address and the text of the code email so that the message can be delivered to you. It is not used for anything else.
- Anthropic (AI model), only if you use the optional smart muscle matching: it receives the text of an exercise name that the app could not place, sent through my server without any account details, and answers with a muscle group.
Data may be processed outside Switzerland and the EU/EEA only with appropriate safeguards (such as standard contractual clauses) where the providers require it.
7. How long data is kept
Your data stays on the server for as long as your account exists. When you delete your account in the app (Settings → Account → Delete Account), your account and the data saved in it are permanently deleted from the server. Data on your own iPhone stays there until you delete the app or the data. Backups made by the service provider may take a short time to expire.
8. Your rights and choices
Depending on where you live (for example under the Swiss Federal Act on Data Protection and the EU GDPR) you have the right to access, correct, delete and export your data, to restrict or object to its processing, and to complain to a data-protection authority.
- Export: Settings → Data → Export gives you all of your routine and history as a file.
- Delete: Settings → Account → Delete Account removes your account and server data.
- Forgot your password: use "Forgot password" on the sign-in screen; a code is sent to your verified email. Administrators cannot see your password.
- Anything else: write to simpleworkout@lunestudio.dev.
9. Security
Data is sent over encrypted connections (TLS). On the server, every row of your data is tied to your account and access is restricted to you. No system is perfectly secure, but I take reasonable steps to protect your data.
10. Children
The app is not directed at children under 13 (or under 16 where local law requires). I do not knowingly collect personal data from them. If you believe a child has created an account, contact me and I will delete it.
11. Health and fitness notice
The app, including ranks and any estimates it shows, is for general fitness tracking only. It is not medical advice. Talk to a doctor before starting or changing a training programme.
12. Changes
If this policy changes in a meaningful way, I will update the date above and, where appropriate, tell you in the app.
13. Contact
Colin Meyer
simpleworkout@lunestudio.dev