Privacy Policy

Last updated: 30 October 2026

SetRepGo is a workout log for iPhone, Android and the web. This policy explains what data the app and this website collect, why, who it is shared with, and the choices you have. If you have questions, email markopetricevic@gmail.com.

In short: we collect only what the app needs to work, keep your workouts on our server so they sync between your devices, and never sell your data, show ads or track you across other apps and websites. Plans are paid through Apple or Google, so we never see your card details. You can delete your account and all its data from inside the app at any time.

What we collect

Account details: your username, email address and a password (stored only as a secure hash). If you sign in with Apple or Google, we receive your email address, an account ID from that provider and, with Apple, the name you choose to share, which we only use to make your username if you hide your email, and don't store. If you use Apple's "Hide My Email", we receive only the private relay address. We never see your Apple or Google password.
Workout data: the exercises, sets, reps, weights, durations, distances, inclines and dates you log, the supersets you create and any custom exercises you add.
Trainings and schedule: the trainings you create, and the ones you plan ahead, with the days, start time, duration and location you enter, and how long before a training you want to be reminded.
Body measurements: your height and body weight, if you enter them in the BMI calculator and save them to your profile.
Profile picture: if you add one. The app accesses your camera or photo library only when you choose to take or pick a picture, and uploads only the picture you select.
Trainer connections: if you use trainer mode, the names you give your clients, invite codes, and which accounts are linked as trainer and client.
Notifications: if you turn on notifications on a phone, a token that lets us send notifications to it, whether it's an Android phone or an iPhone, and its time zone, so reminders come at the right time.
Your plan: if you buy a plan, which plan it is, which store it's from, whether it's a free trial, when it renews or ends, and whether a payment failed. We don't receive your name, card or other payment details from the store.
App version: the version of the app you use and when you last used it, so we know when older versions are no longer in use.
Server logs: like any online service, our server records technical details of requests, such as IP addresses, to keep the service running and secure.

We do not collect your device's location (a training's location is only the text you type), contacts, health data from Apple Health or Google Fit, advertising identifiers, or analytics about how you use the app. On your device, the app keeps your sign-in session in secure storage, and your settings (such as language and units), so you stay signed in.

How we use it

To provide the app: keep your log, trainings and schedule, show your history and dashboard, and sync across devices.
To sign you in and keep your account secure.
To remind you before trainings planned at a set time, in the app and, if you turn them on, as notifications, and to tell clients when their trainer plans, changes or cancels a session.
To know which plan you have, and whether a trainer's plan covers you, so the app works as your plan allows.
To send account emails: verification codes, password reset codes and a welcome email. We don't send marketing emails.
To connect trainers and clients when both choose to.

If you are in the EU, UK or a country with similar laws, we process your data because it is needed to provide the service you signed up for (performance of a contract), and, for security, server logs and app versions, because of our legitimate interest in keeping SetRepGo safe and working. Body measurements are used only because you choose to enter them, and you can remove them at any time.

Trainers and clients

If you join a trainer with an invite code, the trainer sees your username and the workout sessions they log and schedule for you. Your trainer does not see your own workout log, email address, body measurements or profile picture. You see your trainer's username and the sessions they log and schedule. Either of you can end the connection at any time. If your trainer's plan covers you, we use that connection to give you access; your trainer doesn't learn anything more about you from it.

Who we share it with

We share data only with the services that run SetRepGo for us, and only as needed:

DigitalOcean, which hosts our server and database.
Resend, which delivers our account emails (it receives your email address, username and the email's contents).
Google Firebase Cloud Messaging, which delivers notifications to Android phones and, through Apple's push notification service, to iPhones. It receives the phone's notification token and the notification's text, such as a training's name and time. Only if you turn notifications on.
RevenueCat, which handles plans for us. It receives your SetRepGo account's ID number and your purchases and their renewals from the App Store or Google Play, but not your name or email address.
Apple and Google, if you choose to sign in with them, and, if you buy a plan, as the App Store and Google Play, which take the payment under their own terms and privacy policies.

We do not sell or rent your data, and we do not share it for advertising. We may disclose data if the law requires it. This website loads its font from Google Fonts. Its Android download links open Google Play, which distributes the app under Google's own terms and privacy policy.

How long we keep it

We keep your data while you have an account. A phone's notification token is deleted when you turn notifications off or sign out on it. Messages RevenueCat sends us about changes to your plan are kept for 90 days. Verification and reset codes expire after 30 minutes and are stored only as hashes.

When you delete your account, we delete your profile, workouts, trainings and schedule, measurements, profile picture, notification tokens, plan details and trainer connections from our database, with the sessions logged in those connections: as a trainer, your clients and the sessions you logged for them. If you signed in with Apple, we also revoke SetRepGo's access to your Apple Account. Deleting your account doesn't cancel a plan you bought: cancel it in the App Store or Google Play. Apple, Google and RevenueCat keep their own records of your purchases, as their privacy policies describe; email us if you'd like us to ask RevenueCat to delete its record too.

Your choices and rights

Delete your account in the app: Menu > Account > Delete account. This removes your account and all its data. You can also email us to ask for deletion. See how to delete your account.
Edit or remove your workouts, trainings, schedule, measurements and profile picture in the app at any time.
Turn notifications off for a phone in Menu > Account, or in the phone's settings.
Cancel your plan in your App Store or Google Play subscriptions. Menu > Account > Plan > Manage subscription takes you there.
Access or export your data, or object to how we use it, by emailing us.
If you're in the EU or UK, you can also complain to your local data protection authority.

Security

All traffic between the app and our server is encrypted with HTTPS. Passwords are stored only as bcrypt hashes, and sign-in codes are hashed and limited in how many times they can be tried. Sign-ins use short-lived tokens, kept in your device's secure storage, and end after 180 days at the latest.

Children

SetRepGo is not directed at children under 13 (or under 16 in the EU), and we don't knowingly collect their data. If you believe a child has created an account, email us and we will delete it.

Changes

If we change this policy, we'll update the date at the top and, for significant changes, let you know in the app or by email.

Contact

Email markopetricevic@gmail.com.