Privacy policy
In short
Your workouts, history and health data stay on your devices until you sign in to back them up or connect an AI. We keep only what we need to back up your history, share plans, let the AIs you connect read your training and manage your subscription. You never need an account to use the app. We never sell your data or use it for advertising.
On your iPhone and Apple Watch
The app stores your workouts, training history, settings and imported plans on your device and syncs them between your iPhone and Apple Watch. If you allow it, the app reads heart rate and active energy from Apple Health and saves your strength workouts there. The app sends health data to our servers only when you sign in or connect an AI, as described below.
An AI you connect
If you connect ChatGPT, Claude or another AI in the app, the app uploads a copy of your training to our servers so that AI can read it. The copy has your profile and goals, what the app remembers about you, your current plan, and the last 8 weeks of workouts with their sets, loads, notes and feedback. It also has each workout's average and maximum heart rate and active energy from Apple Health. It never includes your name. The app replaces the copy whenever your training changes. Only the AIs you approved on your iPhone can read it.
Connecting creates an anonymous account: a random ID whose key stays in your iPhone's Keychain, with no email or phone number. If you signed in with Apple, connecting uses that account instead. You can disconnect each AI in the app under Settings, Connected AIs. If you haven't signed in, disconnecting the last one deletes the copy. While you're signed in, disconnecting the last one stops the updates. We delete it automatically 30 days after its last update. The AI provider's privacy policy covers what the AI does with what it reads.
Plans you share
When you create a sharing link in the app, or ask a connected AI to share a plan, our servers store that plan for 7 days. Anyone with the unlisted public link can view and import it. It includes exercises, sets, prescribed weights and workout notes. Links created in the app exclude your athlete profile, memory changes and session history. We delete the shared plan automatically after 7 days. The AI provider's privacy policy covers your conversation with the AI.
Voice notes and plan adjustments
When you are online, voice notes are sent to our server to be transcribed and are never stored there; only the text stays, in your history. Offline, your iPhone transcribes them itself. When you ask Not So Dumbbell to adjust your program, the app sends the program, that workout with its notes and feedback, and a few earlier workouts of the program to our server, which writes the revised program and keeps none of it. Our server passes both to AI models through OpenRouter, and asks for voice notes only providers that do not keep them for training.
Your optional account
You can use the app without an account. If you sign in with Apple, the app backs up your training to our servers, so it comes back after you reinstall the app or move to a new iPhone. The backup has every workout session with its sets, loads, notes and feedback, and its average and maximum heart rate and active energy from Apple Health. It also has your workouts, your programs with their skips and pauses, your athlete profile without your name, and the date of your first finished workout. Your name stays on your iPhone. When you delete a session or a program, we keep only its ID and the date you deleted it, so your other iPhones delete it too.
From Apple we keep only the user ID that Apple creates for Not So Dumbbell, and a token that lets us revoke the sign-in. The app asks Apple for no name and no email address, so we never receive them. We store the backup, that ID and that token in a Cloudflare D1 database, linked to the key in your iPhone's Keychain. We keep them until you delete your account.
To delete your account, open Settings in the app and tap Delete Account under Account. This deletes your account and its backup from our servers, deletes every workout, program and session on that iPhone, removes the access of every AI you connected and asks Apple to revoke Sign in with Apple for Not So Dumbbell. Sign Out is different. It backs up your training, then erases it from the iPhone, and the backup stays until you delete the account.
If you stop using Sign in with Apple with Not So Dumbbell in your Apple ID settings, the app signs out on your iPhone and stops backing up. Your training stays on the iPhone. Your backup stays on our servers until you sign in again and tap Delete Account, or ask us at support@notsodumbbell.com.
Subscriptions
Apple processes every purchase. We receive your subscription status, never your payment details. We use Superwall to show subscription offers and measure how they perform. Superwall receives app events, purchase events, a device ID and, once you sign in or connect an AI, the random ID of your account and the names of the AIs you connected. It never receives your workouts or health data.
Usage counts
We count events such as "a shared link was opened" or "onboarding was finished" to see whether the app works. Our server also records when a plan is shared, opened or imported, when an AI is connected and when an account is created, with the time, your account's random ID, the AI's name, the kind of device and the country. These counts don't include health data or what your plans and workouts contain.
Companies that process data for us
Cloudflare hosts our servers and stores the backups. OpenRouter routes voice notes and plan requests to AI models. Apple processes purchases and Sign in with Apple. Superwall shows subscription offers. Each one processes data only to provide its service to us.
Your rights
Under laws such as Brazil's LGPD and the EU's GDPR, you can ask us for a copy of your data or ask us to correct or delete it. Write to support@notsodumbbell.com.
Children
Not So Dumbbell is not meant for children under 13. We don't knowingly collect their data.
Changes to this policy
When the app changes how it uses data, we update this page and the date at the top.