Last updated: October 24, 2026
Reps & Records, Netherlands is responsible for the personal data described here. This policy covers our mobile app, website, AI Coach, optional ChatGPT connection and related services. Contact [email protected] for privacy questions or requests.
What we collect
We process information you provide, information your connected services supply with permission, and information needed to operate the service:
- Account and profile: account identifiers, Apple or Google sign-in details, email when provided by your sign-in service, name, avatar, profile details, training preferences, language, units and display settings. We do not receive your Apple or Google password.
- Training records: workouts, exercises, sets, repetitions, weight, duration, distance, completion state, notes, exercise groups, personal records, plans, templates, prescriptions, achievements, statistics, template usage, source details and related metadata.
- Measurements and health information: measurements, progress photos, daily health summaries, workout activity metrics, energy, heart-rate summaries, recovery information and, where available and authorized, saved GPS routes and heart-rate timelines. These records can reveal health information and precise locations.
- Media you choose to add: profile, workout and progress photos. Voice features process microphone audio, transcripts and generated speech. You control device camera, photo-library, microphone, location and health permissions.
- AI information: prompts, responses, tool inputs and eligible results, conversation history, saved coaching facts, generated reports, drafts, feedback on responses and operational information such as model identifiers, usage and processing status.
- Purchases and service operation: subscription entitlement and transaction references, app and device version, notification tokens and preferences, crash reports, error and performance diagnostics, security records and support correspondence. We do not receive full payment-card details from an app store.
Why we use data
We use account and fitness data to provide the features you request: logging, local storage, backup and sync, training analysis, AI assistance, exports, integrations and support. Providing core account services and fulfilling your requests generally relies on performing our contract with you. Security, fraud prevention and necessary service diagnostics rely on our legitimate interests in running a reliable service, balanced against your rights. We process records needed to meet legal obligations where applicable.
Where processing requires consent, including applicable health processing and optional sensitive-data sharing, we rely on your permission and, where required, explicit consent. An operating-system permission does not automatically enable sharing with ChatGPT or AI Coach. You may withdraw optional permissions and sharing choices without giving up ordinary workout logging. A feature that needs the withdrawn data may become unavailable. Withdrawal does not undo processing that already took place lawfully.
We do not sell your personal data or use health data for advertising. Training and recovery recommendations are informational; we do not use them to make legal or similarly significant eligibility decisions about you.
On your device and in the cloud
The app keeps local fitness records so supported logging features can work offline. Eligible records and photos sync to our Supabase-backed services when connectivity and account access allow. Records created offline may not yet be available from another device or ChatGPT.
Free 90-Day Cloud Retention Plan
The Free plan includes personal cloud backup, restore, cross-device sync and cloud photos for supported workouts and measurements under the current 90-day retention rules. Premium and Premium AI provide extended/unlimited retention for supported personal backup while eligible, subject to deletion controls and the applicable plan. These limits do not promise permanent storage and do not describe every account, billing or AI record. Losing cloud eligibility does not itself erase local workout history.
Users can delete personal cloud backup data without deleting local device records, which must be managed separately. Contact support if you need a cloud-only deletion and cannot find an applicable control. Cloud-only deletion is different from account deletion. We compress uploaded photos to reduce storage and bandwidth. Data already sampled or reduced by an originating device or integration cannot be restored to its original detail by an AI tool.
Apple Health, Watch and location data
With the health permissions you choose, the app can use Apple Health and supported Apple Watch workout information for activity, heart-rate, energy, route and recovery features. Available categories depend on the device, source and permissions. Saved summaries, measurements, routes and supported workout heart-rate timelines can become part of your fitness history and eligible cloud backup.
For supported Reps & Records workouts, actual timestamped heart-rate observations can be saved and later enriched from Apple Health if a richer timeline is available. Imported sources may supply only summaries, sampled routes or reduced timelines. We do not invent raw readings from averages. Location permission is not authorization to share a route with an AI service.
Change health and device permissions in system settings and the app's privacy controls. Removing permission stops future authorized reads; it does not automatically remove previously saved records or copies already sent to a connected service.
AI Coach, text and voice
AI Coach uses relevant permitted fitness context to answer questions, analyze records, create drafts and, with separately reviewed permission, correct existing saved workouts after you confirm an exact preview. Server chat reads eligible synced cloud data. Device-local tools can also read records on that device, including unsynced workouts. Local tools do not mean the model runs privately on your device: eligible results can be sent to a remote AI provider to produce an answer.
In-app AI and voice features use Google/Gemini processing. Depending on the feature and your permissions, the provider receives your prompt, relevant fitness context, tool results, authorized photos, microphone audio or transcripts, and instructions needed to generate text or speech. Supported realtime voice may process authorized images as image frames. Conversation text, transcripts, drafts, saved facts and generated reports may be stored in our AI system. Provider processing and retention also follow the provider's applicable terms. Do not assume all audio, images or provider copies disappear immediately after a session.
AI Coach has server-authoritative sharing choices independent of ChatGPT. Additional photo, route and heart-rate timeline sharing starts off. Routes and heart-rate timelines also require applicable health access; progress photos require the relevant health and photo choices. Disabling a destination's sharing prevents newly authorized raw-data retrieval and delivery for that destination. Ordinary local readers can retain their existing offline behavior; newly enabled sensitive reads need a current consent check.
Authorized photos use an image delivery pipeline. Temporary cloud photo-access links expire within five minutes. Image bytes and those temporary links are excluded from persisted JSON tool-result records and diagnostic logs. This does not mean the original photos or every provider-side conversation copy are deleted.
AI can be inaccurate. Review advice and draft changes before use. Access, credits, provider availability and other limits depend on the feature and plan shown in the app.
Connecting ChatGPT
Connecting is optional and uses our account-linking website and OAuth authorization. It does not require the Codex app. The connection identifies your account and lets ChatGPT call tools for eligible owned, synced fitness records, including paginated older records still available under existing retention and access rules. Tools can create or update workout, program, template, custom-exercise and preferences drafts.
Core access covers permitted training records, profile and preferences. Optional health sharing adds eligible measurements, health/activity summaries, saved coaching facts and generated reports. Photos, GPS routes and heart-rate timelines each have a separate, initially disabled option. Routes and timelines also require health sharing. Private AI Coach conversations, account credentials and internal administration records are excluded from these tools.
ChatGPT is operated by OpenAI. Returned information becomes available in your ChatGPT conversation and is handled under your OpenAI account settings and policies. Review OpenAI's Privacy Policy and ChatGPT data controls. Our controls cannot erase messages already held by OpenAI or guarantee how long they remain there.
Manage ChatGPT sharing in the phone app under Profile → Privacy → ChatGPT data sharing. Use ChatGPT connection settings to disconnect. Enabling an option for ChatGPT does not enable it for AI Coach, or the reverse. Disconnecting stops future access through our connection and clears its additional sharing grants. You can connect again from a fresh ChatGPT request. Existing ChatGPT messages and app drafts are not automatically deleted by disconnecting.
Saved-workout corrections
Where available, ChatGPT and AI Coach can preview changes to an eligible existing synced workout. After you explicitly confirm the current preview, the changes save directly to that workout; they do not create a draft or another workout. Each destination requires its own updated permission review in the connection flow or Profile → Privacy. On explicit acceptance, editing starts on if you have no saved preference; an explicit Off choice stays off. Editing permission is independent of health, photo, route and heart-rate sharing. You can switch it off without losing ordinary workout editing.
Previews, confirmations, tool receipts and supporting audit records may be stored with your AI records. A preview normally expires after 10 minutes, which prevents using that preview; this does not erase supporting audit records after 10 minutes or remove provider copies. Existing retention and deletion controls still apply. Synced corrections can reach your other devices. A device with an offline edit may need conflict review before it can save over a changed cloud record. Corrections preserve imported measured health data and do not edit a provider's original workout.
Drafts and saved coaching information
Drafts from ChatGPT and AI Coach are available in Log → Drafts. Review the latest contents, then choose the available Save or Start action, or Discard. Fitness changes from these draft tools take effect through the app's review actions. Pending drafts normally expire after 30 days. Expiry prevents application; it does not promise immediate physical deletion of every supporting record. Completed or discarded drafts leave the pending list.
Saved coaching facts and reports can contain health information and are distinct from private conversations. Use available memory, conversation, privacy and deletion controls to manage them, or contact support for help exercising a data right.
Optional Strava exports
Strava is a separate optional connection. An eligible export can include the workout name, start time and offset, elapsed duration, completed exercise details, repetitions, weight, set duration and available calories. Automatic uploading starts off. Heart-rate export is a separate, initially disabled choice requiring applicable health permission. Consented uploads can include actual timestamped readings. The current export does not send GPS routes, notes, photos, other health fields or imported workouts.
Export is one-way: later edits or deletions in Reps & Records do not change or remove the Strava activity. Strava controls the exported copy's visibility. Optional activity-read permission checks whether activities this app uploaded still exist and supports deletion notifications; it does not import unrelated Strava activities.
We hold encrypted connection credentials on our servers. Retry queues may temporarily contain consented export data, including heart-rate samples; queued copies are removed when the export succeeds, is cancelled or permanently fails. Display names and terminal activity links expire after seven days. Duplicate-prevention receipts can remain until account deletion. Disconnecting removes retained credentials and connection data, stops unsent uploads and attempts provider revocation. If revocation cannot be confirmed, also remove access in Strava. Already-started uploads and existing Strava activities are not undone. Strava-derived connection/activity information is not supplied to AI providers or used by us for model training.
Website and support
Our public site explains the app and provides policies and account linking. Contact [email protected] or use Help & Support in the app for assistance. The website feedback form and Support & FAQ page have been removed.
Previously submitted website feedback can include a description, optional reply email, category and screenshot. Retained private attachments are available to authorized support staff through authenticated storage access. Removing the form does not itself delete historical submissions.
Historical attachments uploaded under the earlier public-storage implementation may remain reachable until their private migration and public-copy removal have completed. Contact support to request earlier removal. Private storage cannot recall files someone already downloaded.
Public pages use Vercel Web Analytics and Speed Insights for page/performance measurements. Public-page telemetry removes query strings and fragments and excludes account-linking/authentication URLs. We honor browser Do Not Track and Global Privacy Control for this optional telemetry. Hosting, authentication and security infrastructure still processes requests and necessary operational logs. Sign-in cookies/session storage support account linking; we do not use advertising cookies.
New beta registration is closed. Historical registration records remain only for handling the earlier testing relationship, support, applicable legal needs and deletion requests; closing registration does not silently delete those records.
Providers and international processing
We use providers as needed for the selected feature:
- Supabase: authentication, OAuth, database, storage, server functions and sync.
- Vercel: website hosting, retained website feedback attachments, public-page analytics and performance monitoring.
- Google/Gemini: in-app AI text, image and voice processing. OpenAI: ChatGPT when you independently connect and use it.
- Apple and Google: supported sign-in, operating-system integrations, notification delivery and applicable app-store services. RevenueCat: subscription entitlements and purchase lifecycle handling. The applicable store handles payment information.
- Sentry: app crash/error diagnostics. Email/support and infrastructure providers handle support and service communications as needed.
- Strava: when connected and used as described above.
Providers may process data outside the Netherlands or EEA. Where required, applicable adequacy decisions, contractual safeguards such as standard contractual clauses, and other legally required measures govern transfers. Contact us for information about the relevant safeguards. Independent provider accounts such as ChatGPT and Strava also have their own terms and privacy choices. We do not promise zero provider retention or identical data-use rules across providers.
Retention, exports and deletion
Local records stay on a device until removed through app/device controls. Uninstalling is not an account-deletion request. Sync, deletion requests and permission changes reach our services when online. Cloud retention follows the applicable category and account rules above. Account, purchase, security, support and operational records remain only as needed for their purpose and applicable legal obligations; backups and provider logs follow their normal lifecycle rather than disappearing instantly.
Export files and signed download links are temporary, normally available for seven days. Keep downloaded copies secure. Exporting does not erase the underlying records. Deleted sync records can leave temporary tombstones, normally cleaned up after 30 days, to propagate deletions reliably.
The in-app account-deletion flow schedules deletion with a seven-day cancellation period. The request must reach the server; eligible deletion is processed afterwards. Cancelling during the available period stops that scheduled request. Some transaction, security, legal or fraud-prevention records may need to remain. Export first if you want a copy. See deletion instructions for local, account, cloud-only and third-party records.
Turning off sharing or disconnecting does not recall existing AI conversations, exports, support files already downloaded, or activities held by another service. Manage those copies with that provider as well.
Your choices and rights
Depending on applicable law, you can request access, correction, erasure, restriction or portability, or object to processing based on legitimate interests. You may withdraw consent for optional processing. Use in-app privacy/connection controls or email [email protected]. We may need proportionate identity checks before releasing or changing account data; do not send passwords or identity documents unless we explain a secure, necessary process.
You may complain to the Dutch Autoriteit Persoonsgegevens or your local supervisory authority. We handle rights requests within the applicable legal period, generally one month, and explain any lawful extension. Ordinary requests are free.
Children and changes
The service is not intended for children under 13 or people below a higher minimum age applicable to their use of the service. Where a minor needs parental permission under local law, that permission is required. Contact us if you believe a child supplied data without appropriate authorization.
We publish policy updates with the date above and communicate material changes through appropriate channels. A policy update does not silently enable additional AI sharing permissions.