PRIVACY POLICY

Last updated: 28 March 2026

1. INTRODUCTION

Rep ("we", "our", "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use the Rep mobile application ("App").

2. DATA WE COLLECT

We collect the following data:

• Account data: Email address, display name, username
• Workout data: Exercise logs, sets, reps, weight, personal records, workout timestamps
• Social data: Squad memberships, feed posts, messages, reactions
• Device data: Push notification tokens, device platform (iOS/Android)
• Subscription data: Subscription status, plan type (processed by Stripe)

3. HOW WE USE YOUR DATA

We use your data to:

• Provide and improve the App's core features (workout tracking, PR detection, streaks)
• Enable squad features (feed, messaging, leaderboards)
• Send push notifications (workout reminders, squad activity, PR alerts)
• Process payments via Stripe
• Generate AI training programmes

4. DATA STORAGE

Your data is stored securely using Supabase (hosted on AWS). Workout data is also cached locally on your device using an encrypted SQLite database for offline access.

5. DATA SHARING

We do not sell your personal data. We share data only with:

• Supabase: Database and authentication hosting
• Stripe: Payment processing (subscription data only)
• Firebase (Google): Push notification delivery
• Squad members: Your workout activity, streaks, and PRs are visible to members of squads you join

6. YOUR RIGHTS

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data
• Withdraw consent for push notifications at any time

To exercise these rights, contact us at hello@rep-app.co.uk.

7. DATA RETENTION

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days. Anonymised, aggregated data may be retained for analytics purposes.

8. COOKIES

The App does not use cookies. The website (rep-app.co.uk) uses only essential cookies required for functionality.

9. CHILDREN

Rep is not intended for children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, please contact us.

10. SECURITY

We implement industry-standard security measures including encryption in transit (TLS), row-level security on all database tables, and secure token storage on device.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify users of significant changes via the App or email.

12. CONTACT

For privacy-related questions or data requests, contact us at hello@rep-app.co.uk.