Privacy Policy

Last updated: July 11, 2026

Who We Are

This Privacy Policy explains how Divv Saxena, an individual developer based in India, collects, uses, stores, and protects personal information in connection with the iOS app Muscle Man: Workout Tracker, the related account services, and these hosted legal pages.

You can contact us at hello@divvsaxena.com.

Information We Collect

Account Information

We support Sign in with Apple only. Apple may withhold your name. We may receive an Apple-provided identifier and your email address or Apple private relay email. This information is stored in Supabase. Supabase servers may be located outside your country.

Workout Data

We collect workout sessions, exercises, sets, weights, reps or durations, dates, and streak information. This data is stored in Supabase and linked to your account ID so the app can sync your training history.

Onboarding Profile

We store your onboarding profile locally on your device using UserDefaults. This may include your name (up to 15 characters), fitness goal, training frequency, experience level, available equipment, physical limitations or pain areas, height, and weight. Physical limitations, pain areas, height, and weight are health-adjacent information because they can relate to your physical condition.

Purchases and Subscription Data

Purchases are processed by Apple. We use RevenueCat as our subscription management provider. RevenueCat receives purchase receipts and a pseudonymous app user ID. We do not send your name or email address to RevenueCat from the app.

Local Notifications and Offline Queue

Workout reminder notifications are local only. We do not use push notifications or remote messaging. Notification data does not leave your device. If you log workouts while offline, unsent workout entries are stored on-device until connectivity returns and then synced to Supabase.

HealthKit

If you choose to connect Apple HealthKit, the app may read height, body mass, active energy, and step count on a read-only basis. HealthKit access is optional.

HealthKit data is neverwritten to our servers, never used for advertising, and never shared with third parties. We use it only within the app experience you request and handle it in line with Apple's HealthKit rules.

Information We Do Not Collect

We do not collect your location, contacts, photos, or advertising identifiers. We do not include third-party advertising SDKs. We do not use third-party analytics SDKs inside the app, and our in-app analytics are local stubs only.

How We Use Information

  • -To create and maintain your account using Sign in with Apple.
  • -To store, sync, and display your workout history.
  • -To manage subscription status and access to Pro features.
  • -To keep the service secure, prevent abuse, and investigate fraud or misuse.
  • -To save your onboarding choices and app preferences on your device.
  • -To deliver local workout reminder notifications if you enable them.

Lawful Bases

If GDPR or similar laws apply to you, our main lawful bases are:

  • -Contract performance for account access, workout syncing, subscription entitlements, and core app features.
  • -Consent for HealthKit access and local notifications, which you can control in your device settings.
  • -Legitimate interests for security, fraud prevention, abuse detection, service integrity, and legal defense.

Sharing and Service Providers

We share information only as needed to operate the app, comply with the law, or protect our rights. Our main service providers are:

Apple for Sign in with Apple, in-app subscriptions, and optional HealthKit access. Apple Privacy Policy

Supabase for backend data storage and syncing. Supabase Privacy Policy

RevenueCat for subscription management using receipts and a pseudonymous app user ID. RevenueCat Privacy Policy

International Transfers

Your information may be processed on infrastructure operated by Supabase and RevenueCat in countries other than your own. Those countries may have different data protection laws. Where required, we take reasonable steps to protect personal information during international transfers.

Security

We use HTTPS for data in transit and rely on Supabase protections including row-level security for server-stored workout data. No method of transmission, storage, or security control is completely guaranteed, so we cannot promise absolute security.

Retention and Deletion

We keep account and workout data while your account is active. If you delete your account in the app under Settings, your workout data is erased from our servers. Locally stored onboarding and offline queue data remains on your device unless you remove the app or clear it through the app flow.

Your Rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. You can exercise these rights by emailing us at hello@divvsaxena.com. You can also delete your account in-app under Settings.

For California users, we do not sell personal information. For EEA and UK users, this section is intended to support your GDPR-style rights, including access, correction, deletion, portability, and complaints to your local supervisory authority where applicable.

Website Analytics and Cookies

These hosted legal pages may load website analytics through Google Analytics. That service may use cookies or similar technologies on the website. This website analytics setup is separate from the mobile app data practices described above.

Children

The app is not directed to children and is intended for users aged 13 and older, or 16 and older where local law requires a higher minimum age. We do not knowingly collect personal information from children.

Breach Notifications

If we become aware of a personal data breach affecting you, we will provide notice as required by applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time. We will update the Last updated date above. If changes are material, we may notify you in the app or by email where appropriate. Continued use after an update means you accept the revised policy.

Related Terms

This Privacy Policy should be read together with our Terms of Service.

Contact

For privacy questions, requests, or complaints, contact hello@divvsaxena.com.