← SteadyGym

Privacy Policy

Last updated 19 August 2026.

What we store

Only two things:

  • Your email address and password — needed to sign you in. The password is never stored in readable form; our auth provider stores a one-way hash.
  • The workout data you enter — exercises, sets, reps, weight, cardio activity, duration, distance, RPE, routines, your own workout notes and titles, plus your unit (kg/lb) and rest-timer preferences, and the timestamps of when entries were made.

We do not ask for or store your name, phone number, birthday, gender, height, weight, photos, contacts or location.

No ads, no analytics, no tracking

There is no Google Analytics, Tag Manager, Meta or TikTok pixel, Mixpanel, Amplitude, Hotjar, FullStory, Segment, or any advertising SDK in this app. We do not profile you, build an advertising ID, or sell or share your data with anyone.

Cookies and on-device storage

No advertising or tracking cookies. Your browser stores your login session, your light/dark theme choice, and an active rest-timer countdown locally on your device so it survives a reload. Clearing your browser data removes all of it.

Who else is involved

  • Supabase — hosts the database and handles sign-in, password resets and account emails. Like any web service, it records connection metadata such as your IP address for security and abuse prevention.
  • Fonts — the two typefaces used by the app are self-hosted and served from this site, so no font provider ever sees your IP address.
  • GitHub (raw.githubusercontent.com) — illustration images on exercise detail pages come from the open-source Free Exercise DB hosted there. Your browser requests the image directly; nothing about your account is sent.
  • Your hosting provider — serves the app and keeps standard server logs.

Who can see your workouts

Only you. Every table enforces row-level security tied to your account, so no other user can read or change your data. There is no social feed and nothing is public.

Export and deletion

Settings → Your data exports everything as JSON or CSV. Settings → Delete account permanently removes every row you own and the login itself. Deletion is immediate and cannot be undone.

Errors

No error-tracking or performance-monitoring service is installed. Unexpected errors are written to the server log with a technical stack trace only.

Contact

Questions about your data? Reach out through the channel you use to contact the app owner, and we’ll respond.