Privacy Policy

Last updated: January 2025

Introduction

OrthoRep ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our strength training application and related services.

By using OrthoRep, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Health & Fitness Data

  • Workout sessions and exercise logs
  • Weight, sets, reps, and RPE (Rate of Perceived Exertion)
  • Heart rate data (via Apple HealthKit integration)
  • Body weight and sleep data (via Apple HealthKit, when authorized)
  • Personal records and training progress

Account Information

  • Email address (for account creation and communication)
  • User ID (for account identification)
  • Display name (optional)

Usage Data

  • App usage patterns and feature interactions
  • Crash reports and performance data
  • Device type and operating system version

Purchase Information

  • Subscription status and type
  • Purchase history (processed by Apple and RevenueCat)

How We Use Your Information

  • Core Functionality: To track your workouts, calculate progress, suggest weights, and detect personal records
  • Personalization: To provide training recommendations based on your history and goals
  • HealthKit Integration: To sync workouts with Apple Health and read recovery-related data (heart rate, sleep, weight)
  • Account Management: To authenticate you and sync your data across devices
  • App Improvement: To identify and fix bugs, improve performance, and develop new features
  • Subscription Management: To verify your subscription status and provide access to premium features

Third-Party Services

We use the following third-party services to operate OrthoRep:

Supabase (Database & Authentication)

Stores your account information and synced workout data. Data is encrypted in transit and at rest. See: Supabase Privacy Policy

RevenueCat (Subscription Management)

Manages subscription purchases and entitlements. Processes purchase data from Apple. See: RevenueCat Privacy Policy

Sentry (Error Tracking)

Collects crash reports and performance data to help us fix bugs. No personal health data is sent to Sentry. See: Sentry Privacy Policy

Apple HealthKit

We read and write health data only with your explicit permission. HealthKit data is never sold, shared with advertisers, or used for purposes other than providing app functionality. We do not use HealthKit data for tracking.

Data Retention

Local Data: Workout data stored locally on your device remains there until you delete the app or explicitly clear it.

Cloud Data: Synced data is retained in our database while your account is active. When you delete your account, all associated data is permanently deleted within 30 days.

Crash Reports: Anonymous crash and performance data is retained for 90 days for debugging purposes.

Your Rights

You have the right to:

  • Access: Request a copy of your data via the app's data export feature (Profile → Export Data)
  • Delete: Delete your account and all associated data (Profile → Delete Account)
  • Revoke Permissions: Disable HealthKit access or cloud sync at any time through iOS Settings or the app
  • Opt Out: Disable crash reporting in app settings

Data Security

We implement industry-standard security measures to protect your data. All data transmitted between your device and our servers is encrypted using TLS. Your workout data is stored in a secure database with row-level security policies ensuring you can only access your own data. Sensitive credentials are managed through secure environment variables and are never exposed in client-side code.

Children's Privacy

OrthoRep is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@orthorep.com