Privacy Policy
Last updated 18 September 2026
The short version. Your workouts, records and progress photos stay on your iPhone, unless you choose to keep a copy of your photos in your own Photos library. We hold your sign-in details and a small profile. Health data is never used for advertising. We do not sell personal data.
- Who we are
- What we collect
- Apple Health
- What we do not collect
- How we use it
- Who processes it
- Where it is kept
- How long we keep it
- Deleting your data
- Your rights
- California
- Children
- This website and cookies
- Security
- Changes
- Contact
1. Who we are
myReps is operated by Wellbrad LLC ("we"). We are the controller of the personal data described here. Contact: support@myreps.net.
2. What we collect
| Data | Where it lives |
|---|---|
| Account: email, name, the identifier from Sign in with Apple or Google if you use them, and a record of your plan | Our backend |
| Profile: the answers you give when setting up, such as units and training days | Your iPhone only |
| Training data: templates, workouts, sets, records, schedule, body measurements | Your iPhone only |
| Progress photos | Your iPhone only. Never uploaded by myReps. If you turn on Copy to Photos, a copy of each photo is also saved to your own Photos library on the iPhone, which follows your own iCloud settings |
| Imported spreadsheets, PDFs and links | Read on your iPhone. When you are signed in, the imported rows are also staged on our backend |
| Custom exercises and exercise requests, including any video you attach | Our backend. Request videos are sent to us so we can add the exercise |
| Feedback you post, with your name, email, app version, device model, iOS version, plan and the last error the app showed | Our feedback provider. Posts on the board are public |
| Crash reports, when crash reporting is enabled in a release. No name or email is attached | Our crash-reporting provider |
| Email you send to support | Our mailbox |
3. Apple Health
With your permission, myReps on Apple Watch reads heart rate and active energy during a session and saves the workout to Apple Health. This data stays on your devices and in Apple Health. We do not receive it, we never use it for advertising or marketing, and we never sell it or give it to data brokers. Turn access off at any time in the Health app under Sharing, Apps.
4. What we do not collect
No location, no contacts, no advertising identifier, no tracking across other apps or websites, and no third-party analytics. myReps does not currently show ads. Before it does, this policy will be updated and the change announced in the app.
5. How we use it, and the legal basis
- To run your account: performance of our contract with you.
- To answer support email and act on feedback and exercise requests: our legitimate interest in supporting and improving the app.
- To diagnose crashes: our legitimate interest in keeping the app working.
- Apple Health access, camera and photo access: your consent, given in the iOS prompt and withdrawable in Settings.
- To meet legal obligations, where they apply.
6. Who processes it
We share data only with the providers that run the service for us:
| Provider | Purpose | Receives |
|---|---|---|
| Supabase | Accounts, database, file storage | Account, profile, staged imports, custom exercises, request videos |
| Apple | Sign in with Apple, App Store billing, Apple Health | What Apple already holds about your Apple Account. We receive no payment details |
| Google sign-in, business email | Your Google identifier if you sign in with Google; support email | |
| Resend | Sending account email such as password resets | Your email address and the message |
| UserJot | Feedback board | The feedback items listed above |
| Sentry | Crash reports, when enabled | Technical crash data without name or email |
| Cloudflare | Hosting this website and routing email | IP address and request details of website visitors |
| Expo | Building and delivering the app | No personal data from you |
We may also disclose data if the law requires it, or to a successor if the business is sold, under this policy.
7. Where it is kept
Our backend is hosted in the European Union (Ireland). Some providers process data in the United States. Where data leaves the EEA or the UK, the provider's standard contractual clauses or an equivalent safeguard apply.
8. How long we keep it
- Account and profile: until you ask us to delete them.
- Data on your iPhone: until you delete it or remove the app.
- Feedback posts: until you or we remove them. They can outlive your account because they are public.
- Support email and crash reports: no longer than needed to resolve them.
- Encrypted backups held by our host expire on a rolling basis.
9. Deleting your data
In the app, Resources, Privacy, Delete Account removes your templates, history, records and progress from the device, which is the only place they are kept. To remove your sign-in record and profile from our backend, email support@myreps.net from the address on the account and we will delete it within 30 days. Progress photos were never held by us: delete them in the app or remove the app. Copies you chose to keep in your Photos library are yours and stay there until you delete them in Photos.
10. Your rights
Wherever you live you may ask us for a copy of your data, to correct it, or to delete it. If you are in the EEA or the UK you also have the right to restrict or object to processing, to data portability, to withdraw consent, and to complain to your data protection authority. Email support@myreps.net. We answer within 30 days and never charge for a reasonable request.
11. California
We do not sell personal information and do not share it for cross-context behavioural advertising, as those terms are defined in the CCPA and CPRA. California residents may ask to know, correct or delete the personal information we hold, through the contact above or an authorised agent, and will not be treated differently for doing so. In the last 12 months we collected the categories in section 2: identifiers, account details, and the content you chose to send us.
12. Children
myReps is not directed at children under 13, and we do not knowingly collect their data. A parent or guardian who believes a child has given us data can email us to have it deleted.
13. This website and cookies
myreps.net sets no cookies, runs no scripts and has no analytics, so there is no cookie banner to answer. Our host processes IP addresses to deliver pages and block abuse. Inside the app, the feedback board is a web view run by UserJot and may use its own storage.
14. Security
Traffic is encrypted in transit. Every table on our backend enforces row-level security, so your rows are readable only by your own signed-in account. No system is perfectly secure; if a breach affects your data we will tell you and the relevant authority as the law requires.
15. Changes
Material changes are announced in the app before they take effect. The date at the top is the current version.
16. Contact
Wellbrad LLC. support@myreps.net.