Legal

Privacy Policy

Last updated: March 10, 2026

Overview

Repstack (“the App”) is a mobile application for managing structured training programs. Your privacy is fundamental to how the App is built. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights regarding that data.

Your data is local-first

Repstack does not have user accounts and does not require registration. Your training programs and workouts are stored locally on your device by default. There is no required cloud sync.

Data we collect

We collect the minimum data necessary to provide the App's features. The following table describes each type of data, how it is collected, and how it is used:

Data	How collected	Purpose
Program and workout content	You enter or import it into the App	Stored locally on your device. For Pro subscribers, automatically backed up to our servers.
Text sent to AI features	When you use AI import or AI chat	Routed through our server (Supabase edge function) and sent to Anthropic for processing. Not stored on our servers.
AI usage data	Automatically tracked server-side when you use AI features	Budget enforcement for Pro subscribers (tracks spend amount, not content).
Anonymous subscriber ID	Generated automatically by RevenueCat when you subscribe	Subscription status management and associating cloud backups with your device. This is not linked to your name, email, or Apple ID.

We do not collect your name, email address, location, device identifiers, IP addresses, or any other personal information unless you voluntarily provide it (for example, when contacting support).

Cloud backup (Pro subscribers)

If you subscribe to Repstack Pro, your program and workout data is automatically backed up to our cloud infrastructure (hosted by Supabase). Backups are tied to your anonymous RevenueCat subscriber ID — not your name, email, or Apple ID. Backup data does not include AI chat history.

AI processing

When you use AI features (importing programs or editing via chat), the text you provide is routed through a Supabase edge function (for usage tracking) and sent to Anthropic's API for processing. Our server (Supabase) does not store the content of your AI requests. Anthropic may temporarily process and store this data in accordance with their privacy policy. We do not store your AI conversations on any server — chat history is kept locally on your device only.

Third-party services

We share data with the following third-party services only as necessary to provide the App's features. Each service is contractually obligated to protect your data consistent with this Privacy Policy and applicable data protection laws:

Anthropic — Processes AI requests. Receives the text you submit to AI features. Anthropic's privacy policy governs their handling of this data.
Supabase — Hosts our edge functions (AI request routing, budget enforcement) and stores Pro subscriber backups. Receives anonymous subscriber IDs and backup data only.
RevenueCat — Manages subscription status. Receives an anonymous app user ID only — no name, email, or personal information.
Apple — Processes all purchases and manages billing through the App Store.

We do not sell, rent, or share your data with any other third parties. We do not share data for advertising or marketing purposes.

Data retention and deletion

Local data: All data stored on your device remains under your control. You can delete it at any time by removing programs and workouts within the App or by deleting the App.

Cloud backups (Pro): Backup data is retained on our servers for as long as your Pro subscription is active. If your subscription expires or is canceled, backup data is retained for up to 90 days after expiration to allow for resubscription, after which it is permanently deleted.

AI usage records: Server-side AI budget tracking data (spend amounts only, not content) is retained for the duration of the current billing period and deleted when the period resets.

AI request content: We do not store the content of AI requests on our servers. Anthropic's data retention practices are governed by their own privacy policy.

Your rights

You have the right to:

Access your data — Request a copy of any data we store about you on our servers.
Delete your data — Request deletion of all data stored on our servers (cloud backups, usage records) at any time.
Withdraw consent — Stop using AI features at any time (no data will be sent to Anthropic). Cancel your Pro subscription to stop cloud backups.

To exercise any of these rights, contact us at stevenlaguardia@icloud.com. We will respond to deletion requests within 30 days.

Children's privacy

This App is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly. If you believe a child has provided us with data, please contact us at stevenlaguardia@icloud.com.

Analytics and tracking

Repstack does not include any third-party analytics, advertising, or tracking SDKs. We do not collect usage data, device information, or behavioral analytics. We do not track you across other apps or websites.

Security

We use industry-standard security measures to protect data stored on our servers, including encryption in transit (TLS) and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Changes to this policy

If this policy changes, we will update the “Last updated” date at the top of this page. If a change is material, we will make reasonable efforts to notify you (for example, via an in-app notice). Continued use of the App after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy, contact us at stevenlaguardia@icloud.com.