Privacy Policy

Last updated: August 5, 2026

MyOneRep is a calm, offline-first app for tracking your lifting maxes and reading training percentages between sets. This policy explains what we process and why.

1. Data we process

• Using the app without an account. Your lifts, max entries, and settings are stored only on your device. They are not sent to us or anyone else. We collect essentially nothing.
• If you sign in (optional). To back up and sync across devices, we store your email address (for passwordless sign-in), or an anonymous account identifier, together with your app content — lifts, max entries, and settings. This is tied to your account and protected so only you can access it.
• Pro purchase. If you buy the one-time Pro unlock, the purchase is handled by the App Store / Google Play and our entitlement provider, RevenueCat. They receive purchase records and an app-user identifier to confirm your unlock. We never receive or store your payment card details — the app stores handle all payment.
• If you send feedback (optional). When you use Send feedback or Report a problem, we receive your message, its category, an optional reply-to email you choose to share, and a short app-details block — app version and build, OS and device model, locale and unit, whether you are signed in and your Pro status, the local schema version, your active-lift count, and the last-sync time. You can read this block and turn it off before sending. We never attach your bodyweight, sex, birth year, strength Score, or your max values. A random per-install identifier is included only to rate-limit and de-duplicate submissions; it is not an analytics identifier and is regenerated if you reinstall.

2. What we don't do

• No advertising and no ad SDKs.
• No third-party analytics or cross-app tracking SDKs.
• We do not sell or share your personal information.

3. Service providers

We rely on a small number of providers that process data only to deliver their part of the service:

• Apple & Google — app distribution and in-app purchases.
• RevenueCat — purchase validation and entitlement management.
• Supabase — authentication and encrypted cloud storage, used only if you sign in.
• Resend — delivers your feedback message to us by email, used only when you send feedback.

4. Where data is stored & how long

Synced account data is stored on Supabase infrastructure in US East (N. Virginia). We keep it while your account exists; you can delete it at any time (below). Data on your device stays until you remove it or delete the app.

Feedback you send is kept for up to 24 months so we can follow up, and is deleted if you delete your account. A copy of each message stays on your device in a local outbox and is removed 90 days after it sends; you can also delete outbox messages yourself under Settings → Help & Feedback → Sent messages.

5. Your choices & rights

• Use without an account — the full in-gym tool is free and requires no sign-in.
• Export — you can export your data from within the app.
• Delete your account — in the app under Settings → Delete account. This permanently removes your account and all synced data from our servers. Data already on your device stays yours.
• Depending on where you live (for example, GDPR or CCPA), you may have additional rights to access, correct, or delete your data — contact us and we'll help.

6. Children

MyOneRep is not directed to children under 13, and we do not knowingly collect personal information from them.

7. Security

Data in transit is protected with HTTPS. Access to your synced data is restricted to your own account through row-level security.

8. Changes

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.

9. Contact

Questions about this policy or your data? Reach us at [email protected].