Privacy Policy

Last updated: October 2, 2026

This Privacy Policy describes how BTB Workout Log ("we", "the app") handles your information. We are committed to protecting your privacy.

1. Information We Collect

Account Information

On first launch the app automatically creates an anonymous account that needs no email address and generates a user ID. If you choose to register an account, we collect your email address for authentication purposes. You can sign up with your email and password, or via Sign in with Apple or Google.

Fitness & Workout Data

The app stores workout data you enter, including:

Exercises (name, type, category, muscle groups)
Sets (weight, reps, duration, set type)
Body weight (when recorded for certain exercise types)
Workout notes and tags
Workout dates and history

This data is stored locally on your device and synced to our cloud servers under your user ID (including while you use an anonymous account).

Analytics Data

We use Firebase Analytics and PostHog to collect usage data such as app opens, screen views, and feature usage (e.g., "workout created", "set added"). This data does not include your personal workout details (weights, reps, exercise names) and is used solely to improve the app. After you register an account, usage data is linked to your user ID so we can analyze how features are used (PostHog).

Purchase Information

Premium subscriptions are purchased and restored through the Apple / Google stores, and we use RevenueCat to manage subscription status. RevenueCat processes your user ID and purchase history (subscription type, period and status). The app never receives your payment details (such as card numbers).

2. How We Use Your Information

To provide and maintain the app's functionality
To sync your workout data across devices and back it up to the cloud
To improve the app based on analysis of usage patterns
To verify your subscription status
To authenticate your account and provide support

We do not use your data for advertising, profiling, or automated decision-making.

3. Data Storage and Security

Local Storage

Your workout data is stored locally on your device using SQLite. Authentication tokens are stored in encrypted platform storage (iOS Keychain / Android EncryptedSharedPreferences).

Cloud Storage

Data is synced to Supabase servers located in the United States. By using the app, you consent to the transfer of your data to these servers.

Encryption

All data transmitted between the app and our servers is encrypted using TLS/HTTPS. Authentication credentials are encrypted at rest on your device.

4. Data Sharing

We do not sell, trade, or share your personal information with third parties for their own purposes. We use the following third-party services solely to operate the app:

Service	Purpose	Data Processed
Supabase	Authentication & cloud data sync	Email, user ID, workout data
Firebase Analytics	Usage analytics	Event names, screen views (no personal data)
PostHog (US)	Usage analytics (feature usage flows)	Event names, screen views, device and OS information, user ID (registered accounts only)
RevenueCat	Subscription purchase & management	User ID, purchase history

Connected AI Assistants (optional)

If you choose to connect an AI assistant (for example ChatGPT or Claude) to BTB, you sign in on our authorization page and approve the specific permissions it requests. Only then can that assistant, acting on your instructions, read and add to your training data through our server.

Data accessed: exercises, workouts, sets, body parts, muscles and workout types in your account — only what the approved permissions allow. We do not receive your conversation with the assistant.
Recipient: the AI provider you connected receives the data its requests return and handles it under its own privacy policy.
What we store: a hashed access token, a log of each request (time, action, success or failure) for security and troubleshooting, and a history of imports so you can undo them.
Deletions are reversible: a connected assistant cannot permanently delete data; deleted records can be restored.
Your controls: disconnect at any time in the app (Menu → AI connection) or from the assistant. Tokens, logs and import history are deleted together with your account.

5. Your Rights

You have the right to:

Delete your account and all associated data from our servers (Settings → Delete Account)
Export your workout data via the share feature
Opt out of analytics data collection (see Section 6)

6. Analytics Opt-Out

You can limit analytics data collection through your device settings:

iOS: Settings → Privacy & Security → Analytics
Android: Settings → Google → Ads → Opt out of Ads Personalization

7. Data Retention

Your data is retained as long as you have an active account. When you delete your account through the app, all associated data is permanently and immediately removed from our servers. Local data on your device is also cleared upon account deletion.

8. Children's Privacy

BTB Workout Log is not intended for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy, please contact us at: [email protected]

← Back