Privacy Policy
Last Updated: October 12, 2026
Effective Date: February 25, 2026
Introduction
Repsalot ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App").
Please read this Privacy Policy carefully. By using the App, you consent to the practices described in this policy. If you do not agree with this policy, please do not use the App.
1. Information We Collect
1.1 Personal Information
We collect information that identifies you as an individual:
Account Information:
- Email address (required for account creation)
- Display name
- Username
- Profile picture
- Date of birth (for age verification)
- Gender (optional, used for fitness calculations)
Contact Information:
- Email address for communications
- Device push notification tokens
1.2 Fitness and Health Data
We collect fitness-related information you provide:
Workout Data:
- Exercise names, sets, reps, and weights
- Workout duration and timestamps
- Workout splits and routines
- Personal records (PRs)
- Workout history and statistics
Body Measurements:
- Weight entries and history
- Height
- Goal weight
- Progress photos
- Body measurements (optional)
Nutrition Data:
- Food logs and meal entries
- Calorie and macronutrient tracking
- Custom foods you create
- Nutrition goals and preferences
Fitness Profile:
- Fitness level and experience
- Workout preferences
- Equipment availability
- Fitness goals
1.3 Social and Community Data
Social Interactions:
- Posts, comments, and likes
- Followers and following lists
- Direct messages
- Challenge participation
- Gym club memberships
- Saved posts and content
User-Generated Content:
- Photos and images you upload
- Text content in posts and comments
- Custom workout splits you create
- Shared workout routines
1.4 Technical and Usage Data
Device Information:
- Device type and model
- Operating system and version
- App version
- Device identifiers (for analytics)
- IP address
- Time zone and language settings
Usage Information:
- App features you use
- Screens you visit
- Actions you take in the App
- Time spent in the App
- Crash reports and error logs
Location Data:
- We do NOT collect precise location data
- We may collect approximate location (city/country) from IP address for analytics
1.5 Device Health Data (Steps)
With your explicit permission, Repsalot can read your daily step count from your device's health platform:
- iOS: Apple Health (HealthKit)
- Android: Health Connect
Important details about how we handle step data:
- We only read your step count. We never write to or modify your health data.
- We only access steps — no other health or medical data (such as heart rate, sleep, or clinical records).
- Step data is read on demand to display your activity in the App (Statistics and Workout tab). It stays on your device.
- We do not store your step counts on our servers, and we do not share, sell, or transmit them to any third party.
- Step data is never used for advertising or shared with our advertising provider.
- This feature is entirely optional and off by default. You turn it on under Settings → Health & Activity → Connect Steps.
How to revoke access:
- iOS: Settings → Health → Data Access & Devices → Repsalot
- Android: open the Health Connect app → App permissions → Repsalot
- You can also turn off "Connect Steps" in the App's Settings at any time.
2. How We Use Your Information
We use your information for the following purposes:
2.1 Provide App Functionality
- Create and manage your account
- Enable workout and nutrition tracking
- Calculate fitness statistics and scores
- Display your profile and content
- Facilitate social features (following, messaging, challenges)
- Send notifications about app activity
2.2 Personalization
- Customize your experience based on preferences
- Provide personalized workout recommendations
- Show relevant content in your feed
- Calculate strength scores based on your data
2.3 Communication
- Send important account notifications
- Respond to your support requests
- Send updates about new features
- Notify you about challenges and social activity
2.4 Analytics and Improvement
- Analyze app usage patterns
- Identify and fix bugs
- Improve app performance
- Develop new features
- Conduct research and analysis
2.5 Security and Fraud Prevention
- Detect and prevent fraudulent activity
- Enforce our Terms of Service
- Protect against security threats
- Verify user identity
2.6 Legal Compliance
- Comply with legal obligations
- Respond to legal requests
- Protect our rights and property
3. How We Share Your Information
3.1 Public Information
The following information is visible to other users:
- Display name and username
- Profile picture
- Bio
- Public posts and comments
- Workout posts (if you choose to share)
- Followers and following lists (unless private profile)
- Challenge participation
- Gym club memberships
You can control visibility through privacy settings.
3.2 Service Providers
We share your information with third-party service providers:
Firebase (Google Cloud):
- Database storage (Firestore)
- User authentication
- Cloud storage for images
- Analytics
- Crash reporting
- Push notifications
MongoDB Atlas:
- Nutrition database (food search)
- No personal data stored, only food information
Analytics Providers:
- App usage analytics
- Performance monitoring
- Crash reporting
These providers are contractually obligated to protect your data and use it only for the services they provide to us.
3.3 Legal Requirements
We may disclose your information if required by law or in response to:
- Court orders or subpoenas
- Legal processes
- Government requests
- Protection of our rights or safety
- Investigation of fraud or security issues
3.4 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.
3.5 With Your Consent
We may share your information for other purposes with your explicit consent.
3.6 Advertising
Repsalot is free and shows ads in the feed, served by Google AdMob. AdMob may collect device identifiers (such as the Apple IDFA or Android Advertising ID), approximate location based on IP address, and ad interaction data to deliver and measure ads. See Google's policy: https://policies.google.com/technologies/partner-sites
- Personalized ads only with your permission. In the EU, UK and other regions where it is required, we ask for your consent before showing personalized ads. You can change your choice anytime in Settings → Privacy → Privacy choices.
- App Tracking Transparency (iOS). Your advertising identifier is used for tracking across other apps only if you allow it in the iOS prompt. You can change this in iOS Settings → Privacy & Security → Tracking.
- Your content stays private. Your workouts, nutrition logs, health and step data, and posts are never shared with advertisers.
3.7 Usage Statistics
We use Firebase Analytics and Firebase Performance Monitoring to see which features are used and how fast the app runs. In the EU/EEA, the UK and Switzerland they start only after you agree in the privacy choices dialog shown when you first open the app, and you can change or withdraw your choice anytime in Settings → Privacy → Privacy choices. Elsewhere they are on by default; if you object, email support@repsalot.com and we will turn them off for your account. Crash reports (Firebase Crashlytics) are always sent so we can keep the app working and secure.
4. What We DO NOT Do
We want to be clear about what we don't do with your data:
❌ We DO NOT sell your personal data to third parties, data brokers, or advertisers
❌ We DO NOT share your workout, nutrition or health data with advertisers
❌ We DO NOT track you across other apps or websites unless you allow it (see 3.6)
❌ We DO NOT collect precise location data (GPS coordinates)
❌ We DO NOT access your contacts without permission
❌ We DO NOT share your health data with insurance companies or employers
❌ We DO NOT use your step or health data for advertising or send it to our ad provider
5. Your Rights and Choices
5.1 Access Your Data
You have the right to access your personal information. You can:
- View your profile and data in the App
- Request a copy of your data by contacting us
5.2 Correct Your Data
You can update your information:
- Edit your profile in the App
- Update your fitness data
- Correct inaccurate information
5.3 Delete Your Data
You have the right to delete your data:
- Delete your account through App settings
- Request data deletion by contacting us
- Data will be deleted within 30 days
- Some data may persist in backups for up to 90 days
5.4 Export Your Data
You can request a copy of your data in a portable format by contacting us at support@repsalot.com
5.5 Privacy Settings
You can control your privacy:
- Make your profile private
- Hide specific content (posts, stats, PRs, splits)
- Control who can follow you
- Manage notification preferences
- Change or withdraw your consent to usage statistics and personalized ads (Settings → Privacy → Privacy choices, EU/EEA, UK and Switzerland), or object to usage statistics by email (see 3.7)
5.6 Opt-Out of Communications
You can opt out of:
- Push notifications (in device settings)
- Email communications (unsubscribe link)
- In-app notifications (in App settings)
Note: You cannot opt out of essential account-related communications.
6. Data Retention
Active Accounts
- We retain your data as long as your account is active
- Data is stored indefinitely while you use the App, except chat messages
- Chat messages are deleted automatically one year after they are sent, and a conversation with no new messages for a year is deleted with them
Deleted Accounts
- Data is deleted within 30 days of account deletion
- Some data may persist in backups for up to 90 days
- Anonymized data may be retained for analytics
Legal Requirements
- We may retain data longer if required by law
- We may retain data for legal disputes or investigations
7. Data Security
We take security seriously and implement measures to protect your data:
Technical Measures
- Encryption in transit: All data transmitted using HTTPS/TLS
- Encryption at rest: Data encrypted in Firebase databases
- Secure authentication: Firebase Authentication with industry standards
- Access controls: Limited employee access to user data
- Regular security audits: Ongoing security assessments
Organizational Measures
- Employee training on data protection
- Confidentiality agreements
- Incident response procedures
- Regular security updates
Your Responsibility
- Keep your password secure
- Don't share your account
- Log out on shared devices
- Report suspicious activity
Important: No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
8. Children's Privacy
Age Requirement
- Our App is not intended for children under 13
- We do not knowingly collect data from children under 13
- Users must be 13+ to create an account
If We Discover Child Data
- If we learn we have collected data from a child under 13, we will delete it immediately
- Parents can contact us if they believe their child has provided information
Parental Rights
- Parents can request access to their child's data
- Parents can request deletion of their child's data
- Contact us at support@repsalot.com
9. International Users
Data Transfers
- Our servers are located in the United States
- Your data may be transferred to and processed in the US
- We use Firebase (Google Cloud), which complies with international data protection standards
European Union (GDPR)
If you are in the EU, you have additional rights:
Legal Basis for Processing:
- Consent: You consent to our processing when you create an account
- Contract: Processing necessary to provide the App
- Consent: usage statistics and personalized ads in the EU/EEA, UK and Switzerland (see 3.6 and 3.7)
- Legitimate interests: crash reports, security and keeping the App working
Your GDPR Rights:
- Right to access your data
- Right to rectification (correct your data)
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
Data Protection Requests:
- Email: support@repsalot.com
Supervisory Authority:
- You have the right to lodge a complaint with your local data protection authority (in Slovakia: the Office for Personal Data Protection of the Slovak Republic)
California (CCPA)
If you are a California resident, you have rights under the California Consumer Privacy Act:
Your CCPA Rights:
- Right to know what personal information we collect
- Right to know if we sell or disclose your information
- Right to delete your personal information
- Right to opt-out of the sale of your information (we don't sell data)
- Right to non-discrimination for exercising your rights
How to Exercise Your Rights:
- Email: support@repsalot.com
- We will respond within 45 days
We Do Not Sell Your Data:
- We do not sell personal information to third parties
- We do not share data for monetary consideration
10. Cookies and Tracking
What We Use
Essential Cookies:
- Authentication tokens (keep you logged in)
- Session management
- Security features
Usage Statistics (see 3.7):
- Firebase Analytics (EU/EEA, UK and Switzerland: only with your consent)
- App usage patterns
- Performance monitoring
Third-Party Tracking
- Google AdMob serves ads in the app (see 3.6)
- We track you across other apps only if you allow it in the iOS App Tracking Transparency prompt
- Firebase Analytics and Performance Monitoring follow your privacy choices (see 3.7)
Your Choices
- You can change your privacy choices in Settings → Privacy → Privacy choices, or object to usage statistics by email (crash reports stay on)
- You cannot disable essential cookies (required for app functionality)
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes:
Notification:
- We will update the "Last Updated" date
- For significant changes, we will notify you via:
- In-app notification
- Email notification
- Prominent notice in the App
Your Acceptance:
- Continued use of the App after changes constitutes acceptance
- If you don't agree with changes, please stop using the App and delete your account
Review Regularly:
- We encourage you to review this policy periodically
- Check the "Last Updated" date for recent changes
12. Contact Us
Repsalot is run by the Repsalot team, based in Slovakia. If you have questions, concerns, or requests regarding this Privacy Policy or your data:
Email: support@repsalot.com
Support: Available through the Help & Support section in the App
Response Time: We will respond to your inquiry within 30 days
13. Our Website and Pre-Launch Waitlist
This section covers our website, repsalot.com, and our pre-launch waitlist, which you can join without an App account.
What We Collect When You Join the Waitlist:
- Your email address
- When you signed up and when you confirmed your email
- How you found us (for example, the campaign or website that linked you to us) and your browser's language setting
Why We Collect It:
- To confirm your sign-up (double opt-in) and to tell you when Repsalot launches, including early-access invitations
- To understand which channels bring people to Repsalot
- We do not use your waitlist email for anything else, and we never sell it
Legal Basis: Your consent (GDPR Art. 6(1)(a)), which you give by joining and confirming. You can withdraw it at any time.
Abuse Prevention: To stop automated sign-ups, we briefly keep a one-way, keyed hash of your IP address (never the address itself) and delete it within about a day.
Who Processes It: Google Firebase (Cloud Firestore and Cloud Functions) stores the data and sends our emails through our email provider. At launch we may use an email service provider to send the launch announcement; it only receives the addresses of people who confirmed.
How Long We Keep It:
- Unconfirmed sign-ups are deleted after 30 days
- Confirmed sign-ups are kept until you unsubscribe, or at the latest 12 months after the App launches
Your Choices:
- Every email we send has a link that removes you from the list immediately
- You can also email support@repsalot.com to access or delete your waitlist data
Cookies: Our website does not use advertising or tracking cookies.
Summary
We collect your fitness data, account information, and usage data to provide and improve the App. We use Firebase for secure storage and do not sell your data to third parties. You can access, correct, or delete your data at any time. We take security seriously and comply with GDPR and CCPA regulations.
Thank you for trusting Repsalot with your fitness journey! 💪