Privacy Policy

Only two things:

• Your email address and password — needed to sign you in. The password is never stored in readable form; our database and authentication provider, Supabase, stores a one-way hash.
• The workout data you enter — exercises, sets, reps, weight, cardio activity, duration, distance, RPE, routines, your own workout notes and titles, plus your unit (kg/lb) and rest-timer preferences, and the timestamps of when entries were made.

We do not ask for or store your name, phone number, birthday, gender, height, weight, photos, contacts or location.

If you enable two-factor authentication, we also store the security data needed to verify your login codes, and hashed backup recovery codes. These are never used for anything beyond signing you in.

There is no Google Analytics, Tag Manager, Meta or TikTok pixel, Mixpanel, Amplitude, Hotjar, FullStory, Segment, or any advertising SDK in this app. We do not profile you, build an advertising ID, or sell or share your data with anyone.

The only third-party service that touches your email address is Resend, our email delivery provider, used solely to send account and support emails.

No advertising or tracking cookies. Your browser stores your login session, your light/dark theme choice, and an active rest-timer countdown locally on your device so it survives a reload. Clearing your browser data removes all of it.

Only you. Every table enforces row-level security tied to your account, so no other user can read or change your data. There is no social feed and nothing is public.

Settings → Your data exports everything as JSON or CSV. Settings → Delete account permanently removes every row you own and the login itself. Deletion is immediate and cannot be undone.

No error-tracking or performance-monitoring service is installed. Unexpected errors are written to the server log with a technical stack trace only.

Questions about your data? Email support@steadygym.com and we’ll respond directly.