Privacy Policy

• Account info: name, username, email, and a hashed password (or, if you use Google sign-in, the name/email/profile photo Google provides).
• Fitness data: workouts, sets, reps, weights logged, cardio sessions, body measurements, weight history, and nutrition/macro goals you enter.
• Profile photo, if you upload one.
• Usage data: basic technical data like IP address and browser type, collected automatically to keep the Service secure and working.

• To operate the Service — save your workouts, show your progress, run your schedule;
• To generate the AI-powered "Insights" and "Coach's Take" summaries (see below);
• To authenticate you and keep your account secure;
• To improve and troubleshoot the Service.

We do not sell your personal information.

To generate your daily Insights and weekly Coach's Take, a summary of your recent training data (exercises, sets, weights, schedule — not your name, email, or password) is sent to Google's Gemini API for processing. That data is subject to Google's API terms and is not used by Google to train their models when accessed this way. We cache the generated text so the same summary isn't regenerated on every page load.

• Service providers we use to run Repra: Neon (database hosting), Vercel (application hosting and photo/file storage), and Google (sign-in and the Gemini API described above). These providers only process data on our behalf.
• Other users, but only for fields you explicitly choose to make public — your profile page has separate toggles for showing your weight, program, maxes, and workout days. Everything is private by default until you turn a toggle on.
• We may disclose information if required by law, or to protect the rights, safety, or property of Repra or others.

We keep your account and fitness data for as long as your account is active. If you request deletion (see below), we'll delete your account data within a reasonable time, except where we're required to retain something for legal or security reasons.

• Access/correction: most of your data is editable directly in the app (Profile, Schedule, etc.).
• Visibility: control what's public via the toggles on your Profile page.
• Deletion: email billy.e.riley@gmail.com to request your account and data be deleted.

Repra is not directed to children under 16, and we don't knowingly collect information from them. If you believe a child has created an account, contact us and we'll remove it.

We use reasonable technical measures (like password hashing and encrypted connections) to protect your data, but no method of transmission or storage is 100% secure, and we can't guarantee absolute security.

We may update this Privacy Policy from time to time. If we make material changes, we'll update the effective date above.

Questions about this policy or your data? Email billy.e.riley@gmail.com.