Privacy Policy

Repflow is operated by Justin Gallahar, a sole proprietor based in Indiana, United States. For privacy questions, data deletion requests, or anything else covered by this policy, contact:

Account information

• Email address — used for sign-in and account recovery.
• Name and profile photo — shown to friends on leaderboards and friend lists. Optional.
• Username — a public handle so friends can find you. Optional.
• Phone number— used only for friend discovery (see "Contacts and friend discovery" below). Optional.

Workout and fitness data

• Workouts logged (exercises, sets, reps, weights, duration)
• Cardio sessions including GPS routes for outdoor activities
• Body measurements and progress photos / videos you choose to record
• Nutrition logs (foods, macronutrients, micronutrients, water, supplements)
• Goals, training preferences, and program selections

Apple Health integration (iOS)

If you grant access, Repflow reads your steps, walking and running distance, heart rate, workouts, active energy, and cycling distance from Apple Health, and writes your finished strength and cardio workouts (with their duration, calories, and distance) to Apple Health. Repflow does not read your body weight from Apple Health.

Some of this is saved to your Repflow account: your daily steps (for your dashboard and, if you join it, the leaderboard) and the heart rate recorded during a cardio workout (stored with that session). Apple Health data is never sold, never used for advertising, and never shared with third parties for their own purposes. You can revoke access at any time in the Health app (your profile → Apps → Repflow).

Location

Repflow uses your device's GPS to track outdoor cardio (walks, runs, rides). Location is collected only while you're actively tracking a workout. The route is stored with that workout in your account. Repflow does not track your location in the background outside of an active workout session.

Camera and photos

The camera is used to take progress photos, scan food barcodes, and read nutrition labels. The photo library is used when you select an existing photo to upload as a progress photo. Repflow doesn't access your camera or photos outside of these features.

Posts, comments, and your profile

If you use Repflow's social features, the posts, photos, videos, comments, and profile details you choose to share (name, username, bio, profile photo, and banner) are stored in your account and shown to other users according to your visibility settings (public or friends only). Workouts you attach to a post share the summary shown on the post. Progress photos and videos stay private unless you choose to share them with your coach.

Reports, blocks, and moderation

You can report posts, comments, and profiles, and block other users. When you report something, we store the report (what was reported, the reason, any details you add, your account, and the time) so we can review it, and we email ourselves an alert. Reports are not shown to the person you report. Blocks are stored in your account so the blocked person's content can be hidden from you and yours from them. When we act on a report (for example removing content or suspending an account) we keep a record of the action and a copy of the removed content, which we may keep longer where the law requires it. Our Community Guidelines explain what isn't allowed.

Contacts and friend discovery

If you tap "Find from Contacts," Repflow reads your phone book to check which contacts are also on Repflow. We do this in a privacy-preserving way:

• Phone numbers are hashed on your device using SHA-256 before they ever leave your phone.
• Only the hashes are sent to our server, which checks them against the hashes of users who have added their phone numbers to Repflow.
• Your raw contact list is never uploaded or stored.
• Hashes that don't match a Repflow user are discarded immediately.

In other words: Repflow never sees the phone numbers of people in your contacts who aren't already on Repflow.

Information we do not collect

• We do not use third-party advertising networks.
• We do not use cross-app tracking SDKs.
• We do not sell or rent your data to anyone.
• We do not require permissions we don't actually use.

Repflow uses Google's Firebase platform (Cloud Firestore, Firebase Authentication, Firebase Cloud Storage, Firebase Cloud Functions) to store your account data, workouts, and media. Firebase is operated by Google LLC and stores data in Google data centers in the United States. Firebase is bound by Google's security and privacy commitments, available at firebase.google.com/support/privacy.

Data is encrypted in transit (TLS) and at rest (Google-managed encryption keys).

We use your data to:

• Provide the app's features (logging, tracking, syncing across your devices)
• Show your data on your own profile and progress screens
• Show limited public profile information (name, photo, username, weekly stats) to friends you've connected with and on global leaderboards if you've opted in by setting a username
• Send transactional emails via Firebase Authentication (sign-in verification, password reset)
• Diagnose crashes via Firebase Crashlytics (anonymized device and app state at the time of crash; no personal data)

We do not use your data for advertising, profiling for marketing purposes, or training third-party machine learning models.

We do not sell or rent your personal data. We share data only in the following limited circumstances:

• With other Repflow users you choose: friends on your leaderboard see your name, photo, username, and weekly workout statistics.
• With a coach you connect to: coaching is for users 18 and over, and starts only when you enter a coach's invite code in the app. While you're connected, your coach always sees your name, email, username and age, and can write you notes. Everything else follows your switches in "What your coach can see" (shown when you connect, and any time under Account → Coach): Workouts (sessions, sets, reps, weights, time, distance, program and PRs), Body (weigh-ins, goal weight, measurements, body fat), Nutrition (your food log and Strategy targets; off unless you turn it on), Progress photos and videos(only items you mark "Share with coach"), check-ins, and AI summaries (off unless you turn it on). Switching something off hides it from your coach right away. Each time your coach opens your data we record it, and the app shows when your coach last viewed it. Check-ins you send (weight, sleep, energy, stress, training and nutrition adherence, your notes, and any photos you attach, which are shared with your coach) are stored in your account. Messages between you and your coach are text only, stored by Repflow, checked by an automatic language filter, and kept read-only after coaching ends, for safety; we review a message only if it's reported. Coaches never see your social activity or your conversations with other users. You can disconnect any time, and a coach can end the connection; either way the coach loses access to your data right away. Disconnecting doesn't delete anything from your account.
• With service providers: Google (Firebase) for storage and authentication. Mapbox for rendering maps of your cardio routes — your route data is sent to Mapbox tile servers solely to render the visible map area; Mapbox does not retain it. Anthropic(the Claude AI model) for Ask Repflow, only if you turn it on (ages 18 and up): when you ask a question, we send your question, the conversation so far, and a short summary of your own Repflow data (age, sex, height, experience, goals, equipment, injuries you entered, recent workouts and personal records, weight trend, Strategy targets and logged intake, program, goals, and Insights). We never send your name, email, username, photos, videos, posts, friends, or Apple Health data. Anthropic processes this to produce the answer and doesn't use it to train its models; it keeps it only for a limited time under its commercial terms. TODO(legal): confirm Anthropic's retention period and data processing terms.
• For legal reasons: if required by valid legal process (subpoena, court order). We commit to challenging overbroad requests.
• In a business transfer: if Repflow is acquired, user data would transfer to the acquirer subject to this same policy.

Access and export

You can view all of your data inside the app. To request a full export of your account, email repflowtraining@gmail.com.

Correction

You can edit your profile, workouts, measurements, and other entries directly in the app at any time.

Deletion

You can delete individual workouts, photos, foods, etc. from inside the app. To delete your entire account and all associated data, email repflowtraining@gmail.com from the email address on the account. Account deletion is permanent and processed within 30 days.

Permission controls (iOS)

Camera, photos, location, contacts, motion, and Apple Health access can be revoked at any time in iOS Settings → Privacy & Security. Repflow features that depend on those permissions will stop working, but the app continues to function for everything else.

California, EU/UK, and other regions

If you live in California (CCPA/CPRA), the European Union (GDPR), the United Kingdom (UK GDPR), or another region with data protection laws, you may have additional rights including the right to access, port, correct, and erase your personal data, and to lodge a complaint with a supervisory authority. To exercise these rights, email repflowtraining@gmail.com.

We do not "sell" personal data as defined under the CCPA, and we do not process personal data for cross-context behavioral advertising.

Repflow is not intended for children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please email repflowtraining@gmail.com and we will promptly delete it.

We retain your account data for as long as your account is active. When you delete your account, your data is permanently removed within 30 days, except where retention is required by law (e.g., financial records for tax purposes, which Repflow does not currently maintain).

Crash logs and diagnostic data collected by Firebase Crashlytics are retained for up to 90 days.

Ask Repflow conversations are stored in your account so you can read them again. You can delete one or all of them in the app, and a conversation is deleted automatically 12 months after its last message. Erase all data and account deletion remove them. Usage counts (how many questions you asked this month) are kept to apply monthly limits, and answers that our safety checks flag, or that you report, are kept for up to 90 days for review.

We protect your data with industry-standard measures including TLS encryption in transit, Google-managed encryption at rest, and server-side authorization rules that prevent users from reading data belonging to others. No system is perfectly secure; if we ever experience a data breach affecting your information, we will notify affected users without undue delay.

We may update this policy from time to time. Material changes will be communicated via the app or email, and the "Effective date" at the top will be updated. Continued use of Repflow after a change indicates acceptance of the updated policy.

Privacy questions, data requests, or anything else covered by this policy: