Privacy Policy – RepDay

1) Who is responsible

1.1) Personal data is any information that can identify you. This policy explains what RepDay does with it.

1.2) The person responsible for data processing for this app, within the meaning of the General Data Protection Regulation (GDPR), is Abdullah Riaz, 101 Lalazar, Lahore, Pakistan, Tel.: 0923314994587, email: abdullahriaz95+repday@gmail.com.

2) No account

RepDay does not ask you to create an account. There is no sign-up, no password, and no profile stored on our servers. We do not ask for your name or email address inside the app. If you email us, we use that address only to reply, and we delete the correspondence once the request is finished, unless the law requires us to keep it. The legal basis for answering email is our legitimate interest under Article 6 (1) (f) GDPR, and Article 6 (1) (b) GDPR where the message is about a purchase.

3) What stays on your phone

Your training record is stored on the device. That includes workouts, sets, weight, reps, routines, history, personal records, body measurements, progress photos, exercise notes, plate inventory, settings, and the local backups the app keeps. Removed items sit in a trash screen on the device until you clear them.

This record is not uploaded to us. It leaves the phone only when you export it, or when you share a file yourself. Deleting the app deletes the copy stored in the app, unless you have already exported a file or the operating system keeps a backup of the device.

4) Export and import

Export writes a file you choose where to save or send. Import reads a file you choose, shows you what it found, and writes nothing until you confirm. Neither step sends the file to us. A file you then email, message, or store in a cloud drive is handled by that other service, under its own terms.

5) Mixpanel

Release builds of RepDay send product analytics to Mixpanel, Inc. Debug builds do not. We use this to see which screens were opened and what happened on the paywall, so we can tell whether the app is being used and where a purchase failed. The legal basis is our legitimate interest in operating and improving the app under Article 6 (1) (f) GDPR.

What is sent:

• The name of a screen that became visible, such as the train tab, a workout, history, or settings.
• Paywall events: that it was shown or dismissed, and whether a purchase or restore completed, was cancelled, failed, or found nothing to restore. A completed purchase includes the package identifier, the package type, the price, and the currency. A failure can include an error code.
• Mixpanel's automatic events, which cover app opens and sessions, plus device details such as the operating system, device model, and app version, tied to an anonymous identifier Mixpanel creates.

The workout log, body measurements, progress photos, and the answers you give during onboarding are not included in these events. We do not attach your name or email, because the app never collects them. We do not sell this data, and we do not use it to build an advertising profile.

Mixpanel is in the United States, so this information may be processed there. Mixpanel's privacy policy is at https://mixpanel.com/legal/privacy-policy.

6) Subscriptions

The first week includes logging, routines, history, and records. After that week, RepDay Pro is what keeps the app. Payment is taken by Apple or Google, through the store account on the device. We never see your card number.

Subscription status is read through RevenueCat, Inc., 300 Euclid Avenue, San Francisco, CA 94118, USA. RevenueCat receives an anonymous app user id, the store receipt information needed to know whether Pro is active, and the product you bought. We use that only to unlock Pro. The legal basis is Article 6 (1) (b) GDPR. RevenueCat's privacy policy is at https://www.revenuecat.com/privacy. Apple's is at https://www.apple.com/legal/privacy/ and Google's is at https://policies.google.com/privacy.

7) Notifications

A rest timer can notify you when it finishes, if you allow notifications. That alert is scheduled on the phone. There is no push-notification server, and the contents of a workout are not sent in order to deliver it.

8) Advertising

RepDay has no ads. We do not sell your training record, and we do not share it with advertisers.

9) Children

RepDay is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has sent us personal data, email abdullahriaz95+repday@gmail.com and we will delete it.

10) Your rights

If the GDPR applies to you, you have the following rights in relation to the personal data we actually process, which is the analytics and subscription data described above, and any email you send us. The training record on your phone is in your control: export it, or delete the app.

• Access (Art. 15 GDPR): you can ask what personal data we process, why, who receives it, and how long we keep it.
• Rectification (Art. 16 GDPR): you can ask us to correct personal data we hold that is wrong.
• Erasure (Art. 17 GDPR): you can ask us to delete personal data we hold, where the law requires it.
• Restriction (Art. 18 GDPR): you can ask us to limit processing while a request is checked, or instead of deletion.
• Portability (Art. 20 GDPR): where processing is based on consent or a contract and is carried out by automated means, you can ask for the personal data you provided, in a common machine-readable format.
• Objection (Art. 21 GDPR): where we rely on legitimate interest, you can object, for reasons related to your situation. We will stop unless we have compelling grounds, or the processing is needed for legal claims. We do not use your data for direct marketing.
• Complaint (Art. 77 GDPR): you can complain to a supervisory authority, in particular where you live or work, or where the issue happened.

To use these rights, email abdullahriaz95+repday@gmail.com. Because the analytics identifier is anonymous, we may not be able to find a particular person's events from an email alone. Say so if you have the identifier, and we will look.

11) Changes

If this policy changes, the new version will be posted at this address with a new date. Continued use of RepDay after that date means you accept the updated policy.

12) Contact

Questions about this policy: abdullahriaz95+repday@gmail.com.