Privacy policy

Last updated 11 August 2026 · Draft for legal review

WodBuddy is a workout tracking app for iOS, Android, Apple Watch and Garmin devices. This policy explains what we collect, why, and what you can do about it. If anything here is unclear, email contact@wodbuddy.app.

What we collect

• Account data — your email address and authentication identifiers, so you can sign in and reach your workouts from any device.
• Workout data — workouts you create, edit or capture, plus the results you log: reps, rounds, loads, times and splits.
• Whiteboard photos — images you capture for workout recognition, processed to extract text and structure.
• Watch and health data — activity data your watch records during a WodBuddy workout, such as duration, heart rate and calories, where you grant permission.
• Usage data — anonymised events about which features are used, to help decide what to build next.
• Device data — app version, operating system, device model and language, for support and compatibility.

Why we use it

• To run the app: storing your workouts, syncing them to your watch, and returning results to your phone.
• To recognise the contents of whiteboard photos you take.
• To send notifications you have opted into, such as workout reminders.
• To fix bugs, prevent abuse, and understand which features get used.
• To handle subscriptions and purchases, processed by Apple and Google.

Health data

Health and fitness data is only read or written with your explicit permission through Apple Health, Garmin Connect or the equivalent platform service. It is used to record and display your workouts. We do not sell health data, and we do not use it for advertising.

Who we share it with

We do not sell your personal data. We share it only with service providers that make the app work, under contract and limited to what they need:

• Cloud hosting and database providers, for storing your account and workouts.
• Firebase, for authentication and push notifications.
• An analytics provider, for anonymised product usage.
• Apple and Google, for app distribution and payments.
• Garmin and Apple platform services, for syncing workouts to your watch.

We may also disclose data where the law requires it.

Where data is stored

Your data is stored on servers operated by our hosting provider and may be processed in countries other than your own. Where required, transfers rely on standard contractual clauses.

How long we keep it

Account and workout data is kept while your account is active. Whiteboard photos are kept only as long as needed to process and display the workout you created from them. When you delete your account, your data is removed from production systems within 30 days and from backups within 90.

Your choices

• Access and export — request a copy of your data.
• Correction — edit your workouts and results in the app at any time.
• Deletion — delete your account in Settings, or email us and we will do it.
• Permissions — revoke camera, health or notification access in your device settings; the affected features stop working, the rest of the app keeps running.
• Analytics — opt out of usage analytics in Settings.

Children

WodBuddy is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

Security

Data is encrypted in transit, access to production systems is restricted, and credentials are managed through our authentication provider. No system is perfect; if a breach affects you, we will notify you as required by law.

Changes

If this policy changes materially, we will tell you in the app or by email before the change takes effect.