Privacy policy

Overview

This Privacy Policy explains how RepWard (“RepWard,” “we,” “us,” or “our”), the operator of the RepWard Android app, handles personal information through the app, related cloud services, and this support website. Contact us at repwardapp@outlook.com.

The information processed depends on how you use RepWard: for example, whether you sign in, enter training or body data, use Guided Training, subscribe to RepWard Pro, back up or restore data, or share with a coach. Workout records and body metrics may reveal information about your health or physical condition and should be treated as sensitive.

Information we handle

• Account and sign-in information: your RepWard account identifier, email address, authentication/session information, and basic profile information made available through Google Sign-In, such as a name or profile image where supplied. Google authenticates your Google account; RepWard does not receive your Google password.
• Workout and exercise data: exercises, routines, workout entries, sets, repetitions, weights, dates, history, and related details or notes you enter or save.
• Body metrics: measurements and other body-related information you choose to record, such as body weight, together with associated dates and entries.
• Preferences and Guided Training: app settings, units, user preferences, and Guided Training selections, configuration, and related saved training data.
• Cloud backup and restore data: copies of the workout, exercise, history, body-metric, preference, and configuration records included in a RepWard Pro backup, with account associations and backup metadata needed to store and restore them.
• Coach sharing data: the information you choose to share, identifiers needed to connect sharing participants, and records used to manage sharing or access.
• Purchases and access records: Google Play product/subscription identifiers, purchase tokens, transaction or order identifiers where supplied, purchase and expiry information, verification results, and subscription or entitlement status. We also handle promo/personal codes, redemption records, and account associations needed to apply or validate access.
• Technical and security information: our services and infrastructure providers may process IP addresses, timestamps, request metadata, authentication events, error information, and logs relating to account activity, cloud operations, or purchase verification. App/device or operating-system information may also be included in diagnostics or support information you provide.
• Support communications: your email address, message contents, and any attachments or troubleshooting information you send us. Please avoid sending passwords, sign-in tokens, full payment details, or unnecessary sensitive information.

How information is used

We use this information to provide and maintain RepWard: authenticate accounts; save and display training records, body metrics, preferences, and Guided Training configurations; back up and restore eligible data; and enable requested coach sharing.

We also use relevant information to verify purchases, manage subscriptions and RepWard Pro entitlements, process promo/personal-code redemptions, resolve access issues, respond to support and privacy requests, troubleshoot errors, protect accounts, prevent abuse or fraud, and meet applicable legal obligations. Information used for these purposes can be linked to your account where necessary.

Device and cloud storage

RepWard uses device storage for app data and Supabase-backed authentication, databases, and cloud services for account-related and cloud features. Local storage and cloud storage are separate: data used by the app on your device is not necessarily identical to the data stored in your account or a cloud backup.

When you use RepWard Pro cloud backup, data included in that backup is transmitted to cloud infrastructure and associated with your account so it can be restored. Restoring retrieves saved information to the app. Account, subscription, entitlement, code-redemption, security, and sharing records can be processed on the server independently of a workout-data backup.

Signing out, uninstalling the app, clearing device storage, canceling a subscription, or losing Pro access should not be treated as a request to delete cloud data. To request deletion of your account and associated cloud data, use the account deletion page.

Services and sharing

Personal information may be disclosed in the following circumstances:

• Supabase and its infrastructure providers: to operate authentication, databases, cloud storage, and related backend functions. Information processed can include account identifiers and the app records required by the cloud features you use.
• Google: to provide Google Sign-In and Google Play purchase/subscription services, including purchase verification. Google processes information under its own terms and privacy policy as well as applicable service arrangements.
• Coaches or other recipients you select: to deliver the information you choose to share through RepWard. Review the scope of a share before enabling it. A recipient may retain information already received or copied; stopping future sharing may not remove those copies. Contact us if you need help with sharing or deletion.
• Hosting, security, and support providers: to deliver this website and support communications, protect services, and diagnose problems. Cloudflare serves this website and may process connection and request information. Email providers process support messages.
• Legal and safety purposes: where reasonably necessary to comply with applicable law or valid legal process, prevent fraud or abuse, protect people or systems, or establish, exercise, or defend legal rights.
• Business changes: relevant data may be transferred as part of a merger, acquisition, reorganization, or transfer of the service, subject to applicable privacy obligations and notice requirements.

We do not promise that information is never shared. Service operation and the sharing features described above require some information to be provided to others. Additional disclosures outside these purposes require an applicable lawful basis and, where required, your consent.

Learn more from the Supabase Privacy Policy, Google Privacy Policy, and Cloudflare Privacy Policy.

Subscriptions and verification

Google Play processes payments for purchases made through Google Play Billing. RepWard receives the purchase information needed to verify the transaction and manage access; it does not receive your full payment-card number through Google Play Billing.

RepWard performs server-side Google Play purchase verification. Purchase tokens and related product, app, and account information are processed by our backend, and relevant purchase identifiers are submitted to Google Play to check validity and subscription state. Verification results and entitlement records help grant or remove Pro access, restore purchase access, handle renewals, expiry, cancellations or refunds, and prevent duplicate or fraudulent use. Promo/personal-code records help determine whether an account qualifies for access.

You can manage or cancel Google Play subscriptions through Google Play subscriptions. Account deletion and subscription cancellation are separate actions. Deleting a RepWard account or uninstalling the app does not automatically cancel a Google Play subscription; cancel it separately to prevent future renewal charges. Cancellation does not itself delete RepWard data.

Security and logging

RepWard relies on authenticated access and the security controls of its backend providers to restrict cloud operations to authorized users and services. Connections to Google and Supabase services use encrypted HTTPS transport. Server-side purchase verification helps protect entitlement decisions from unauthorized changes on a device.

Service and security logs help investigate errors, detect suspicious activity, and resolve account or purchase issues. Such logs may contain account or request identifiers and operational metadata. Access to personal information should be limited to the people and providers who need it for the purposes in this policy. No storage or transmission system can guarantee complete security. Protect your device and Google account, and contact us if you suspect unauthorized access.

Retention and deletion

We retain personal information for as long as reasonably necessary for the purposes described in this policy. The relevant period depends on whether your account is active, whether information is needed to provide a feature or restore data, and whether there are unresolved support, payment, security, or legal matters.

• Account and cloud app data: retained to support your account and cloud features until deleted through supported controls or an account/data deletion request, subject to the limited exceptions below.
• Purchase, entitlement, and code records: retained as needed to administer access and address transaction disputes, misuse, fraud prevention, accounting, or legal obligations. Where records must remain after account deletion, retention is limited to the information necessary for those purposes.
• Support and operational/security logs: retained for the time needed to address the request or incident, maintain security and reliability, and meet applicable obligations.
• Infrastructure backups: residual copies may remain until the relevant backup retention cycle expires. Deletion from live systems may therefore occur before removal from all backup copies.

To request deletion, email repwardapp@outlook.com or follow the account deletion instructions. We may verify account ownership before acting. Account deletion includes associated cloud workout/exercise/history data, body metrics, preferences, Guided Training/configuration data, cloud backups, and sharing records under our control, subject to necessary legal, security, fraud-prevention, and transaction-related retention.

We will explain any information that must be retained and the reason in our response, and handle the request within applicable legal time limits. Data held independently by Google, information already copied by a sharing recipient, and copies on your devices are subject to their own controls. You may need to clear local data on your devices separately. Contact us for details about retention or to request deletion of specific data without deleting the whole account.

Your choices and rights

You can choose what workout and body information to enter, adjust available app preferences, decide whether to use cloud backup or coach sharing, and manage your Google account permissions and Google Play subscriptions. Withholding information required for a feature may prevent that feature from working.

Depending on your location and applicable law, you may have rights to request access to or a copy of your personal information, correct it, delete it, receive a portable copy, restrict or object to certain processing, or withdraw consent where processing relies on consent. Withdrawal does not affect the lawfulness of prior processing. You may also have the right to complain to your local data protection authority.

Send requests to repwardapp@outlook.com. We may request information reasonably necessary to confirm your identity, but please do not send passwords. Rights can be subject to lawful limitations, which we will explain when relevant.

Where applicable data protection law requires a legal basis, we process information to provide the service you request, pursue legitimate interests such as service security and support, comply with legal obligations, or act on consent where required. Health-related information may require additional protections or explicit consent under applicable law.

International processing

RepWard and its service providers may process or store information in countries other than the country where you live. Those countries may have different data protection laws. Where applicable law requires safeguards for international transfers, the relevant transfer must be supported by an appropriate lawful mechanism. Contact us for information about the providers and transfer arrangements relevant to your data.

Children’s privacy

RepWard is a workout and training app. Children should not submit personal information unless their use is permitted under applicable law and any required parent or guardian authorization has been obtained. We do not knowingly collect personal information from children below the age at which they may lawfully provide it without required parental consent, including children under 13 in the United States.

If you are a parent or guardian and believe a child has provided information without the required authorization, contact repwardapp@outlook.com. We will review the report and take appropriate steps, including deleting information where required.

This website

This website provides RepWard information, support links, and this policy. It has no account sign-in form, advertising scripts, embedded analytics, or app-database connection. Its pages do not set application cookies or use browser storage. Cloudflare may process IP addresses, browser/request metadata, and security information to deliver and protect the site; hosting-layer security features may have their own cookie behavior.

Following an email link opens your email application. No message is sent until you send it. Following a third-party link takes you to a service with its own privacy practices.

Changes and contact

We may update this policy as RepWard’s features, providers, or legal requirements change. The date at the top identifies the latest revision. Material changes will be communicated through appropriate means, such as an in-app notice or another available contact channel, where required. Any consent required for new processing will be requested separately.

Operator and app: RepWard
Privacy and support: repwardapp@outlook.com