Privacy Policy
Last updated 12 October 2026
Draft: this text is awaiting legal review and may change.
Workout Plan helps you plan your training and log what you lift. This policy explains what we keep about you, why, who helps us run the app, and how you stay in control.
What we keep
Your account: the email address you sign in with and, if you continue with Google, the name and profile picture Google shares with us.
Your settings: your language and the units you see weights and measurements in.
Your training: the questionnaire answers your Plan was drafted from, your Plans, and every Session with its Exercises and Sets. Training data can say something about your health, so we treat it with care and use it only to run the app for you.
Notifications: if you allow them, the address your browser gives us to deliver Rest notifications to this device.
Feedback: the messages you send us from the app, together with your account, so we can follow up.
What stays on your phone
So you can train without signal, your Sessions and Plan are also kept on your phone, along with the app's pages and Exercise images. Signing out removes the stored pages; deleting your account from this phone removes all of it.
Cookies keep you signed in and remember your language and units. We don't use advertising or tracking cookies.
Why we use it
Only to provide the app: to sign you in, draft and keep your Plan, show your Previous Performance and history, notify you when Rest ends, answer your feedback, and find and fix errors. We don't sell your data or use it for advertising.
Who helps us run the app
Supabase stores your account and data. Vercel hosts the app and tells it which country a visit comes from, so the app can choose your language. The app doesn't keep your IP address with your data, but Supabase records it in its sign-in security log, and our other providers may record it in theirs. Sentry receives error reports, which can include your browser, device and the page where the error happened. Google signs you in if you choose it. Your browser's push service delivers notifications. Exercise videos play from YouTube's privacy-enhanced mode (youtube-nocookie.com) when you start one.
These providers may process data outside Indonesia. They handle it only to provide their service to us.
How long we keep it
Until you delete your account. Copies in our database backups disappear as those backups expire, within the retention period of our database provider. Error reports are removed automatically after Sentry's retention period.
Your choices and rights
You can see and change your training data and settings in the app at any time. Deleting your account in Settings permanently removes your account and everything in it, on our servers and on the phone you delete it from, right away; backup copies follow as those backups expire. You can also ask us about your data, including a copy of it, through the feedback form.
These rights follow Indonesia's Personal Data Protection Law (UU No. 27 Tahun 2022) and apply wherever you live.
Children
If you are under 18, use the app only with the consent of a parent or guardian.
Changes and contact
If this policy changes, we update it here and change the date above. Questions? Send them through the feedback form in the app.