Privacy Policy

Repsody ("Repsody," "we," "us," or "our") provides a strength-training planning, logging, nutrition, and AI-coaching application (the "Service"). This Policy describes what information we collect, how we use it, and the choices available to you. By creating an account or otherwise using the Service, you agree to the practices described here.

This Policy is written to be broad and permissive in our favor as the operator of the Service. It is not a substitute for legal advice, and nothing here limits rights you may have that cannot be waived under applicable law.

We collect information you provide directly and information generated by your use of the Service, including:

• Account information: email address, display name, date of birth, and password (stored as a salted hash, never in plaintext).
• Training data: plans, training maxes, logged sets, personal records, gyms, and equipment.
• Nutrition and supplement data: logged foods, macro targets, meal plans, supplement regimens, and dose logs, if you use those features.
• Body composition and photos: weight, measurements, and progress photos you choose to upload.
• AI chat content: messages you send to the in-app AI coach, and de-identified excerpts of those conversations that we retain separately from your account for product analysis (see Section 5).
• Third-party wearable data: if you connect a WHOOP account, we receive recovery score, sleep performance and duration, day strain, heart-rate variability, resting heart rate, workout strain and heart-rate data, and body weight (see Section 4).
• Usage and device information: log data, timestamps, and technical information about how you access the Service.

We use the information we collect to:

• Operate, maintain, and provide the features of the Service;
• Generate AI-assisted coaching, plan suggestions, and prescriptions;
• Improve, test, and develop the Service, including its AI-driven features, using aggregated, de-identified, or otherwise anonymized data;
• Communicate with you about your account and the Service;
• Detect, prevent, and address technical issues, abuse, or violations of our terms; and
• Comply with legal obligations.

We may share information with service providers who help us operate the Service (for example, cloud hosting, database, and AI-model providers), who are contractually restricted from using it for their own purposes. We do not sell your personal information to third parties for their own marketing purposes.

If you choose to connect a WHOOP account, we retrieve daily recovery, sleep, workout, and body-weight data from WHOOP's API on your behalf, using OAuth credentials that WHOOP issues directly to you and that you authorize us to use. We store only recovery score, sleep performance percentage, sleep hours, day strain, heart-rate variability, resting heart rate, workout strain/heart-rate/energy-expenditure metrics, and body weight. We do not store blood-oxygen, skin-temperature, respiratory-rate, sleep-stage detail, heart-rate time-series data, or any other WHOOP data beyond what is listed above, and we do not retain the raw data WHOOP returns to us.

Your WHOOP access and refresh tokens are encrypted at rest and are never exposed to, or used by, any AI model directly. You may disconnect your WHOOP account at any time from Settings, with the option to permanently delete the WHOOP-derived data we've stored. A manually entered body-weight value always takes precedence over one synced from WHOOP.

The Service uses third-party large language model providers (currently Google Gemini) to power chat, coaching suggestions, and related features. Messages and relevant account context are sent to these providers to generate responses. AI-generated content, including training, nutrition, and recovery guidance, may be inaccurate or inappropriate for your circumstances and is provided for informational purposes only. It is not medical, dietary, or professional advice, and you should consult a qualified professional before making health-related decisions.

De-identified excerpts of chat conversations may be retained separately from your account, without any information that identifies you or links back to your account, for the purpose of improving the Service.

If you grant another user (a "coach") access to your account, that person can view the specific categories of data you've authorized (for example, training, nutrition, body measurements, photos, or wearable data) and, in some cases, act on your behalf. You control which categories are shared and can revoke access at any time. We are not responsible for a coach's use of information you choose to share with them.

We retain your information for as long as your account is active or as needed to provide the Service. You may delete your account at any time, which removes your personal data from our active systems, subject to limited records we retain where required for legitimate business, security, or legal purposes. Some information tied to a coaching relationship you participated in may be retained by the coach's account after your deletion.

Certain features are intentionally ephemeral: for example, data entered into the bloodwork-analysis tool is never written to our primary database and is discarded when your session ends.

We use reasonable technical measures to protect your information, including password hashing and encryption of sensitive data such as third-party integration tokens. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service is not directed to children under 13, and we do not knowingly collect information from children under 13. Certain features, including AI coaching, nutrition, supplement, and body-composition tools, are restricted to users who are 18 or older. If you believe a child has provided us with information, please contact us and we will take appropriate action.

We are based in, and process and store data in, the United States. If you access the Service from outside the United States, you consent to the transfer of your information to, and its processing in, the United States, which may have different data protection laws than your jurisdiction.

You can access and update most of your information directly within the Service. You can delete your account, disconnect connected third-party services such as WHOOP, and manage notification and AI-coaching preferences from Settings. Depending on your jurisdiction, you may have additional rights over your personal information; contact us to make a request.

THE SERVICE, INCLUDING ALL CONTENT, FEATURES, AND AI-GENERATED OUTPUT, IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WITHOUT LIMITATION ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, OR THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE. YOU USE THE SERVICE, INCLUDING ANY TRAINING, NUTRITION, SUPPLEMENT, OR RECOVERY GUIDANCE IT PROVIDES, AT YOUR OWN RISK. TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE DISCLAIM ALL LIABILITY FOR ANY INJURY, LOSS, OR DAMAGE ARISING FROM YOUR USE OF THE SERVICE OR RELIANCE ON ANY CONTENT IT PROVIDES.

We may update this Policy from time to time. If we make material changes, we will update the "Last updated" date above. Your continued use of the Service after a change becomes effective constitutes acceptance of the revised Policy.

Questions about this Policy can be sent to [email protected].