Legal
Privacy Policy
The short version
- Your camera video never leaves your phone. Pose detection and form checks run on your device. Camera frames and body-tracking points are never uploaded or stored.
- We save what the app needs to coach you: your account, your profile answers (some of them health-related, such as weight and injuries), your settings and your workout results, such as reps and form scores.
- For Coach features, a reduced version of your profile and workout results, without your name or email address, is sent to Anthropic's Claude AI to write your program and workout summaries.
- We don't sell your personal information, we don't show ads, and we don't share your data for advertising.
- You can delete your account and data in the app at any time. See Delete your account.
1. Who we are
Reptiq is an AI personal trainer app for Android, with an iPhone version in development. The app, its backend services and this website (reptiq-app.web.app) are operated by Ihor Zakharov, an individual developer (contact: nograveoff@gmail.com) ("Reptiq", "we", "us"). We are the controller of the personal data described in this policy.
Questions or requests: nograveoff@gmail.com.
This policy covers the Reptiq apps and this website. It doesn't cover Google Play, the App Store, or Google and Apple sign-in, which have their own privacy policies.
2. What stays on your phone
- Camera video. During a live set, camera frames go straight to a pose-detection model that runs on your phone (MediaPipe on Android, Apple Vision on iPhone). Frames are never recorded, uploaded or stored.
- Body-tracking data. The body points the model detects, rep counting, form checks and voice cues are all computed on your phone and never leave it.
- What gets saved. When you finish a workout, only the results are saved to your account: for example, the number of reps, hold times, a form score and which form issues were detected. See section 3.
- Onboarding answers stay on your phone until you create an account. They are then uploaded as your profile.
- Local copies. The app keeps copies of some data on your phone so it works offline (for example your profile, recent workouts and downloaded voice clips). If you turned on Android device backup, Android may include this app data in your personal Google backup, under Google's terms.
3. Information we collect
We collect information you give us, information the app creates while you use it, and limited technical information from your device and our service providers.
| Category | What it includes | Why we need it |
|---|---|---|
| Account | Email address; a unique account ID; your sign-in method. If you sign in with Google or Apple, the name (and, for Google, the profile photo link) they share with us. Apple may give us a private relay email address instead of your real one. Passwords are handled by Firebase Authentication and stored only in hashed form; we never see them. | Create and secure your account, sign you in and restore your data on a new phone. |
| Fitness profile (health-related) | Sex, birth year, height, weight, optional target weight, goals, experience level, activity level, available equipment, training days, session length and reminder time, the physical limitations you select (knees, lower back, shoulders, wrists, neck, hips or ankles), focus areas and preferred units. | Choose suitable and safe exercises, estimate calories and build Coach programs. |
| Settings | Voice coaching on or off, how much the coach talks, counting reps aloud, voice choice, reminders on or off, high-accuracy tracking. | Keep the app working the way you set it, on all your devices. |
| Workout results (health-related) | Start and end time and duration; exercises, sets, reps, partial reps and hold times; form scores; which form issues were detected and how often; your effort rating (easy, right or hard); a calorie estimate; app version and platform. For Coach: your programs, weekly plans and post-workout summaries. Totals and streaks. Reports you send about AI-written text. | Show your history and progress, adapt your program and write workout summaries. |
| Devices and notifications | Push notification token, an app installation ID, platform (Android or iOS), app version and time zone. | Send reminders and coach updates at the right local time, and stop sending them to devices you signed out of. |
| Subscription | Store (Google Play or App Store), product, status (free trial, active, billing grace period, cancelled or expired), renewal and expiry dates. Our subscription provider RevenueCat keeps a customer record under your account ID with the store's transaction details. We never receive your card or bank details. | Unlock the features you paid for, show your plan, and remind you before a free trial ends. |
| Usage analytics | Google Analytics for Firebase, in the released apps: automatically collected events (such as first open, app sessions, screens viewed, app updates and in-app purchases), device model, operating system and app version, language, approximate location at country or region level (derived from your IP address) and an app-instance identifier. The app does not collect your device's advertising ID. We don't link analytics data to your account ID. | Understand how the app is used as a whole, find problems and improve features. |
| Crash reports (Android) | Firebase Crashlytics: crash details and stack traces, device and operating-system state at the time of the crash, short technical log messages and a Crashlytics installation ID. We don't link crash reports to your account ID. | Find and fix bugs. |
| Technical logs | When the app talks to our servers, our providers process your IP address and request details. Our server logs record your account ID and any errors, never camera data. | Keep the service secure, prevent abuse and fix errors. |
| Support messages | Your email address and whatever you write to us. | Answer you and handle privacy requests. |
Profile answers are choices from fixed lists; the app never asks you to type notes about your health. We don't collect your precise location, contacts, photos or microphone audio.
4. How we use it and why
We use your information only to run Reptiq. If you are in the European Economic Area, the UK or Switzerland, these are our legal bases:
- To provide the app you signed up for (performance of our contract with you): your account, syncing, live coaching settings, workout history, programs, summaries, reminders and subscriptions.
- To process health-related data (your explicit consent): the fitness profile and workout results described above. You give consent when you enter your profile and save workouts. You can withdraw it at any time by editing your profile or deleting your account. Some features can't work without this data.
- To send push notifications (your permission, which you control in your phone's settings).
- To keep Reptiq secure and working (our legitimate interests): preventing abuse and fraud, rate limiting, debugging, crash reports and aggregated usage analytics. You can object at any time; see section 10.
- To meet legal obligations: for example, answering lawful requests and keeping records of the privacy requests we handle.
We don't use your data for advertising, we don't sell it, and we don't use it to make decisions about you that have legal or similarly significant effects.
5. AI coaching with Claude
Coach subscribers get weekly programs and post-workout summaries written with the help of Claude, an AI model made by Anthropic, PBC. Our servers call Claude; the app never sends your data to Anthropic directly. Free and Spotter features don't use Claude.
What we send to build a weekly program
- An age band (for example "30-39") instead of your birth year, and your sex.
- A BMI band (underweight, healthy, overweight or obese) instead of your height and weight.
- Your goals, experience, activity level, focus areas, equipment and physical limitations.
- Your schedule: the planned training dates and session length.
- The exercises that suit you, and progression decisions based on your recent workouts (for example your latest average form score and effort rating for an exercise).
- Last week's plan, so the new week builds on it.
What we send to write a workout summary
The workout's duration and type, your primary goal, the exercises with their sets, reps, hold times and form scores, the most frequent form issues and your effort rating.
What we never send
Your name, email address, password, exact birth year, height or weight, any camera video or body-tracking data, or anything you typed.
Identifiers
Each request carries a one-way hashed version of your account ID, which Anthropic uses to detect abuse. Weekly-plan requests sent in batches also carry a reference containing your account ID, a random string that doesn't reveal who you are, so we can match each result to the right program.
How Anthropic handles it
Anthropic processes this data as our service provider under its commercial terms, which don't allow it to use the data to train its models. Anthropic keeps API data only for a limited period for safety and operations; results of batched requests are kept for up to 29 days.
How the AI's output is used
Our servers check every AI-written plan against fixed rules before you see it: only exercises that fit your equipment and limitations, valid reps or durations, the right number of training days and your time budget. Problems are repaired. If the AI is unavailable or its plan fails these checks, a rule-based generator writes your week instead. For users under 18, the AI is instructed to choose exercises conservatively. You can change your profile or regenerate your program at any time.
Reporting AI-written text
In the Android app you can report AI-written text, such as a workout summary or coach note, without leaving the app. We store the report with your account so we can review it: the reason you picked, the reported text, where it appeared (and which workout or plan it came from), your app version and when you sent it; it is deleted when you delete your account.
6. Who we share it with
We use these service providers to run Reptiq. They process personal data on our behalf and under contract with us:
| Provider | What they do for us | Location |
|---|---|---|
| Google (Firebase and Google Cloud) | Sign-in (Firebase Authentication), database (Cloud Firestore), servers (Cloud Functions), file storage (Cloud Storage), push notifications (Firebase Cloud Messaging, which uses Apple Push Notification service on iPhone), this website (Firebase Hosting), usage analytics (Google Analytics for Firebase), crash reports (Firebase Crashlytics), secret storage and server logs. | United States |
| RevenueCat, Inc. | Subscription management: checks your purchases with the store and tells the app and our servers which plan you have. | United States |
| Anthropic, PBC | Claude AI for Coach programs and workout summaries (see section 5). | United States |
Google Play and the App Store handle payments, free trials and refunds as independent companies under their own terms. They share subscription status with us through RevenueCat, never your payment details. Google and Apple sign-in verify your identity if you choose them.
We may also disclose information if the law requires it, to protect the rights, safety or property of our users, ourselves or others, or as part of a merger, acquisition or sale of assets. In that case we will tell you before your data falls under a different privacy policy.
We don't sell personal information, we don't share it for cross-context behavioral advertising, and we don't give it to data brokers.
7. Where your data is stored
Our database is in Google Cloud's nam5 multi-region in the United States, and our servers run in us-central1 (Iowa, United States). RevenueCat and Anthropic process data in the United States. This website is served from Google's global network.
If you use Reptiq from outside the United States, including the EEA, the UK or Switzerland, your data is transferred to the United States. We rely on appropriate safeguards for these transfers: the EU-U.S. Data Privacy Framework and its UK and Swiss extensions where a provider is certified, or the European Commission's Standard Contractual Clauses (with the UK Addendum) in our providers' data processing terms. Email us for more information about these safeguards.
8. How long we keep it
| Data | How long |
|---|---|
| Account, profile, settings, programs, workout history and reports of AI-written text | Until you delete your account, or a specific item at your request. |
| Device push tokens | Removed when you sign out on that device, and when you delete your account. |
| Subscription records | Our copy and the RevenueCat customer record are deleted when you delete your account. Records of subscription events, which contain your account ID, are deleted with your account or expire after 90 days, whichever comes first. |
| Weekly-plan generation records | Deleted automatically after 30 days. Anthropic keeps batch results for up to 29 days. |
| Server logs | Up to 30 days. |
| Usage analytics | Event-level data is kept for up to 14 months. Aggregated reports that don't identify anyone may be kept longer. |
| Crash reports | 90 days. |
| Support emails | As long as we need to answer you. We keep a short record of privacy requests (your email address, the request and the date we completed it) for up to 24 months to show that we handled them. |
| Backups at our cloud provider | Deleted data can remain in Google's internal backup systems for a limited time, typically up to about 180 days, until those systems are overwritten. It isn't used during that time. |
| Purchase records at Google Play or the App Store | Kept by Google or Apple under their own policies; we can't delete them. |
9. Deleting your account
You can delete your account in the app at any time. On Android: Profile → Account → Delete account. This immediately deletes your profile, settings, programs, workout history, device tokens, files stored under your account, your RevenueCat customer record and finally your sign-in account. You can also ask us by email. All the details, including what is kept and for how long, are on the Delete your account page.
Deleting your account doesn't cancel a subscription. Cancel it in Google Play or the App Store to stop being charged.
10. Your rights and choices
Everyone
- Correct your profile and settings in the app at any time.
- Turn notifications and reminders off in the app or in your phone's settings.
- Refuse camera access. Live coaching needs the camera, but the rest of the app keeps working.
- Ask us for a copy of your data, or for deletion of specific data (for example your workout history) without deleting your account.
- Delete your account.
EEA, UK and Switzerland
You have the right to access your personal data, to correct it, to have it erased, to restrict or object to its processing (including processing based on our legitimate interests, such as analytics), to receive it in a portable format, and to withdraw consent at any time without affecting processing that already happened. You can also complain to your local data protection authority; in the UK, that's the Information Commissioner's Office.
How to make a request
Email nograveoff@gmail.com from the email address on your Reptiq account, or tell us that address. We may ask you to confirm the request from that address before we act on it. Requests are free. We reply within one month (45 days for US state law requests) and will tell you if we need more time, as the law allows.
11. Notice for US state residents
This section supplements the policy for residents of California and other US states with consumer privacy laws.
Categories we collected in the last 12 months: identifiers (email address, account ID, device and app-instance identifiers, IP address); customer records (name and email address); characteristics that some laws protect (sex and age, from your birth year); commercial information (subscription details); internet or other electronic activity (app usage and diagnostics); and sensitive personal information (account login, and health-related data: your fitness profile and workout results). Sources: you, your device, Google or Apple sign-in, the app stores and RevenueCat. Purposes and recipients are described in sections 4 to 6.
No sale or sharing. We don't sell personal information or share it for cross-context behavioral advertising, including that of users under 16. Because we don't, there is nothing to opt out of; we still honor Global Privacy Control signals where they apply.
Sensitive and consumer health data. We use sensitive personal information, including consumer health data, only to provide the features you ask for, as described above. We don't sell it or use it to infer characteristics about you.
Your rights: to know and access the personal information we hold about you, to delete it, to correct it, to opt out of sale, sharing and targeted advertising (which we don't do), and not to be discriminated against for using these rights. You can use an authorized agent; we will verify the request with you. If we decline a request, you can appeal by replying to our decision. If the appeal is denied, you can contact your state's Attorney General.
12. Children and teens
Reptiq is not directed to children under 13, and the app doesn't accept a birth year that makes you younger than 13. We don't knowingly collect personal data from children under 13. If we learn that we have, we delete it. Parents or guardians who believe their child has given us data can contact us.
For users aged 13 to 15, the app shows a note recommending that they train with a parent's or guardian's guidance. In some countries, including some EU member states, a parent must consent before a person under 16 can use online services; in those countries, teens should use Reptiq only with that consent. When writing programs for users under 18, the AI is instructed to choose exercises conservatively.
13. Security
Data travels between the app and our servers over encrypted connections (TLS) and is encrypted at rest by Google Cloud. Security rules let only you read your own data, and only our servers can change subscription and program data. API keys are kept in Google Secret Manager. Deleting your account requires a recent sign-in. No system is perfectly secure; if a breach affects your personal data, we will notify you and the authorities as the law requires.
14. App permissions
- Camera: for live form coaching. Frames are processed on your phone only (see section 2).
- Notifications (optional): workout reminders, new-week alerts, a reminder before a free trial ends and check-ins after missed workouts. The app asks only when you turn on reminders or get your first program.
- Internet: to sync your account and check your subscription.
The coach voice uses pre-recorded clips and your phone's built-in text-to-speech. On Android, if you pick a voice marked "Needs internet", your phone's text-to-speech provider (for example Google) processes the spoken text, such as exercise names and cues, online.
15. Changes to this policy
We will post any changes on this page and update the date at the top. If a change materially affects how we use your data, we will tell you in the app or by email before it takes effect, and ask for your consent where the law requires it.
16. Contact us
Email nograveoff@gmail.com with any question about this policy or your data.