Privacy policy

RepForge is developed and operated by an independent developer. For any privacy question or request, email www.repforge@gmail.com.

• Account identity: your email address and a password. Authentication is handled by Supabase Auth; the app never reads your password.
• Profile: display name, an optional phone number, and an account role (member or owner).
• Training data: routines (exercise, sets, reps), completed workouts (date, duration, per-set reps and weights), and goals or milestones you create.
• Owner audit log: when an owner account deletes a record, what was deleted and when. Visible only to the owner account.

• A local copy of your routines, history and profile, so the app opens offline.
• The workout in progress, so an interrupted session can be resumed.
• Appearance and notification preferences, and a queue of changes waiting to sync.

None of this leaves the device unless it is part of the account data listed above. The app schedules notifications locally; no push server receives a device token.

On launch the app asks Expo's update service (EAS Update) whether a newer JavaScript bundle is available. That request carries a random per-install identifier (EAS-Client-ID), the app and runtime version, and the platform. It is used only to deliver updates: it is not an advertising identifier, is not linked to your account, and is not used for analytics. Clearing the app's data resets it.

Voice logging is optional and does nothing until you open the voice sheet. While you record, the microphone is open. When you stop, the clip is sent to the RepForge transcription service, which forwards it to Google Speech-to-Text and returns the transcript.

The audio is held in memory for that request and is not stored: neither RepForge nor the service writes the clip to disk, a database or a log. The transcript is shown back to you in the sheet and is not saved unless you log the set yourself — at which point only the numbers you confirm are stored with the workout. If you never open the voice sheet, no audio is recorded.

Location, contacts, camera, photos, installed-app lists, advertising identifiers, and usage analytics. The microphone is used for voice logging only, as described above, and never runs in the background. RepForge does not use Google Analytics, Firebase Analytics, Crashlytics or any comparable service.

• To create and secure your account and sign you in.
• To save your routines, workouts and goals and show them back to you.
• To sync changes between your devices and keep the app usable offline.
• To let you restore your own data from a backup you exported.
• To turn a spoken set into a transcribed one, when you use voice logging.

The data is not used for advertising, profiling or automated decision-making, and it is not sold.

Account and training data are hosted in the project's Supabase database, app updates are delivered by Expo's EAS Update service, and voice clips are transcribed by Google Speech-to-Text; all three act as data processors on RepForge's instructions. Data is not sold, rented or shared with advertisers. Row-level security restricts every row to the account that created it.

Traffic between the app and the backend is encrypted with HTTPS/TLS. Passwords are stored as hashes by Supabase Auth and are never readable by the app. Database access rules limit every routine, workout and profile row to its owner.

Data is kept while your account exists. You can delete your account and all of its data from inside the app: Profile → Delete account → Delete my account. That removes your profile, routines, workout history, goals and audit records.

If you cannot open the app, use the web deletion page or email www.repforge@gmail.com from the address on the account. Deletion requests are completed within 30 days. Residual copies in encrypted backups are purged within the same period.

You can access and correct your data in the app, export a JSON or CSV backup at any time from Profile → Data backup, and delete the account as described above. If you are in the EEA or UK, you also have the right to object to processing and to lodge a complaint with your local data-protection authority.

RepForge is not directed at children under 13, and accounts are not knowingly created for them. If you believe a child has created an account, email www.repforge@gmail.com and the account will be removed.

If the data the app handles changes, this page is updated and the effective date above is changed. Material changes are noted in the app's release notes.