Privacy Policy

RepRave ("we", "us", "our") is a workout tracking application developed by Kasper Dudek, based in Warsaw, Poland. This policy explains what data we collect, why we collect it, and how you can control it.

We respect your privacy and collect only what is necessary to provide you with a functional, reliable training tracker.

1. Data We Collect

Account information:

• Email address and encrypted password (when you sign up with email)
• Name and email from your Google or Apple account (when you use social sign-in)

Workout data:

• Training plans, exercises, sets, reps, and weights you log
• Session timestamps and rest timer durations
• Exercise library entries you create or customize

Usage analytics (planned for a future version):

• App interactions such as screens visited, features used, and session duration
• Crash reports and performance diagnostics
• We will update this policy before enabling analytics collection

Data we do not collect:

• Location data
• Contacts or phone data
• Health data from Apple Health or Google Fit
• Payment or financial information

2. How We Use Your Data

• To provide and maintain the RepRave service — storing your workouts, syncing across devices, and displaying your training history
• To authenticate your account and keep it secure
• To improve the app based on aggregated, anonymized usage patterns (future)
• To send you service-related notifications (e.g., training reminders you opt into)

We do not sell your data. We do not use your data for advertising.

3. Third-Party Services

RepRave relies on the following third-party services:

• Supabase (database and authentication) — stores your account and workout data on servers in the EU. Privacy Policy
• Vercel (web hosting) — serves the web version. Privacy Policy
• Google OAuth — used only for authentication; we receive your name and email. Privacy Policy
• Apple Sign In — used only for authentication. Privacy Policy
• Expo / EAS (mobile app distribution and OTA updates). Privacy Policy

In a future version, we may add analytics (e.g., PostHog) and crash reporting (e.g., Sentry). This policy will be updated before any such service is integrated.

4. Data Storage and Security

Your data is stored in a Supabase-managed PostgreSQL database. Supabase provides encryption at rest and in transit (TLS). Access to the database is restricted by Row-Level Security policies, ensuring you can only access your own data.

Passwords are hashed using industry-standard algorithms by Supabase Auth. We never store or have access to your plaintext password.

5. Your Rights (GDPR)

As a user in the European Economic Area, you have the following rights under the GDPR:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — delete your account and all associated data (available directly in the app under Settings → Delete Account)
• Data portability — receive your data in a structured, machine-readable format
• Restriction — request that we limit processing
• Objection — object to processing of your data
• Withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at contact@reprave.io. We will respond within 30 days.

6. Data Retention and Deletion

We retain your data for as long as your account is active. When you delete your account (Settings → Delete Account), we permanently delete all your personal data, including workout history, training plans, and exercise library entries. This process is irreversible.

Anonymized, aggregated data (e.g., total number of workouts logged across all users) may be retained for service improvement purposes.

7. Children's Privacy

RepRave is not intended for children under the age of 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will notify you through the app or by updating the effective date at the top of this page. Continued use of RepRave after changes constitutes acceptance of the updated policy.

9. Contact

Kasper Dudek
Email: contact@reprave.io
Warsaw, Poland