Privacy policy

Last updated: 22 September 2026. Draft for the open beta (v0.9); the founder reviews it before the store launch.

Outrep is a workout log. This policy says what the app stores, where, and what leaves your device. The short version: your training data stays on your phone unless you create an account and turn on sync, and nothing is sold, shared with advertisers or used to profile you.

What the app stores on your device

• Workouts, sets, exercises, routines, programs and personal records you log or import.
• Preferences: units, bodyweight and sex if you enter them (optional, used only for the strength-standards table), rest timer, plate inventory, theme.
• The rest timer’s end time, so the alarm survives a restart.
• Movement diagrams: the app downloads the small looping figures it draws for some exercises from Outrep’s own website and keeps them in its cache. Nothing about you is sent to fetch them — no account, no exercise you looked at, no identifier — and the diagrams are the same for everyone.
• If you use the watch app: the same data mirrored between phone and watch over the Wear OS Data Layer, which never leaves your devices.

All of this lives in the app’s private storage, and the training database is excluded from your device backup on every platform: it is not copied into an Android cloud backup, nor into an iCloud or iTunes backup on iPhone and Apple Watch. Your training history therefore does not follow you to a new device unless you turn sync on. On Android the app’s preferences are excluded as well; on Apple a small set of device preferences (units, theme, the rest timer’s end time — never your workouts) is part of the system backup. Your sign-in session is never backed up on either platform. Deleting the app, or Profile → Delete all local data, removes all of it.

Optional account and sync

You can use every feature without an account. If you create one (email and password, magic link, Google or Apple sign-in), Outrep stores:

• Your email address and a user id, to identify your account.
• Your workouts, routines, records and profile settings, so they sync between your devices and can be restored on a new phone.
• If you choose Sign in with Google or Sign in with Apple, your device asks that provider for a sign-in token; the provider learns that you are signing in to Outrep, and the token carries your name and profile picture URL, which the authentication service (Supabase Auth) stores with your account together with the IP address and device description of each sign-in. Outrep itself only shows your email. Email sign-in and magic links involve no third-party provider.

Account data is held on a Supabase project operated by the app’s developer. Rows are protected by row-level security so only your account can read or write them. Sign out to stop syncing; Delete account removes your account and every synced row from the server. Local data on the device is kept unless you delete it too.

Purchases (Outrep Pro)

Outrep Pro is sold through Google Play and the App Store. When you buy it, the store handles the payment: Outrep never sees your card or your billing address. To unlock Pro on your devices and let you restore it, the purchase receipt, the product you bought and its expiry date are validated and stored by RevenueCat, the app’s billing provider, under a customer id. That id is random and anonymous until you sign in; after you sign in it is your Outrep account id, so Pro follows your account. The app keeps the expiry date with your profile (pro_until) and syncs it with your account like any other profile field. RevenueCat’s own privacy policy applies to the data it processes for us. Nothing about a purchase is used for advertising. Manage or cancel subscriptions in your store account; a refund is handled by the store.

What is not collected

• No advertising identifiers, no ad networks, no trackers.
• No location, contacts, photos or health-platform data.
• No analytics SDK ships in the beta. If a crash reporter is added later, it will receive stack traces and event counts only (never workout content, names or emails) and this policy will be updated first. The only counts kept about purchases are which paywall was shown and whether a purchase completed, was cancelled or failed; never the price or the account.

Feedback email

Send feedback opens your own email app with a subject line and a device line (app version, OS version, device model, language) pre-filled. Nothing is sent until you send the email yourself.

Permissions

• Notifications (Android 13+): only to show the rest-timer countdown and the “rest over” alert.
• Wear OS: physical activity and body sensors, only so the watch can keep the workout session running in the background.

Children

Outrep is not directed at children under 16.

Changes and contact

Changes are announced in the app’s release notes and dated at the top of this document. Questions: feedback@outrep.fit.

This page is generated from docs/legal/privacy.md in the app repository so the app and the site never differ.