Privacy policy
In short
Your workouts, history and health data stay on your devices. We keep only what we need to share plans, sign you in and manage your subscription. We never sell your data or use it for advertising.
On your iPhone and Apple Watch
The app stores your workouts, training history, settings and imported plans on your device and syncs them between your iPhone and Apple Watch. If you allow it, the app reads heart rate and active energy from Apple Health and saves your strength workouts there. The app never sends health data to our servers.
Plans you share
When you create a sharing link in the app, or ask a connected AI to share a plan, our servers store that plan for 7 days. Anyone with the unlisted public link can view and import it. It includes exercises, sets, prescribed weights and workout notes. Links created in the app exclude your athlete profile, memory changes and session history. We delete the shared plan automatically after 7 days. The AI provider's privacy policy covers your conversation with the AI.
Your account
If you create an account with Sign in with Apple or Google, we receive an account ID and an email address. Apple may give us a private relay address instead of your real one. We use them to sign you in, connect your subscription and contact you about your account. You can delete your account at any time in the app under Settings. Deleting it removes your account data from our servers.
Subscriptions
Apple processes every purchase. We receive your subscription status, never your payment details. We use Superwall to show subscription offers and measure how they perform. Superwall receives app events, purchase events and a device ID. It never receives your workouts or health data.
Usage counts
We count events such as "a shared link was opened" or "onboarding was finished" to see whether the app works. These counts don't include health data or what your workouts contain.
Companies that process data for us
Cloudflare hosts our servers. Apple processes purchases and Sign in with Apple. Google processes Google sign-in. Superwall shows subscription offers. Each one processes data only to provide its service to us.
Your rights
Under laws such as Brazil's LGPD and the EU's GDPR, you can ask us for a copy of your data or ask us to correct or delete it. Write to support@notsodumbbell.com.
Children
NotSoDumbbell is not meant for children under 13. We don't knowingly collect their data.
Changes to this policy
When the app changes how it uses data, we update this page and the date at the top.