Privacy policy
Your training data should work for you — not follow you around.
This policy explains what Repout processes when you use the iPhone or Android app, why it is needed, which providers help operate the service, and how you can export or delete your data.
Effective 5 October 2026
What we collect
Depending on the features you use, Repout stores account and profile details; workout, running, strength, nutrition, body measurement and goal data; posts, comments, follows, challenges and reports; gym check-ins; device and notification registration; and subscription status. Photos or videos are stored only when you choose to upload them. If you choose to match your contacts, the app turns the phone numbers and email addresses in your address book into one-way hashes on your device and sends only those hashes; names and the address book itself are never uploaded. Hashes that match no Repout account are discarded; only matches are kept. If you add your own phone number, Repout stores only a keyed hash of it plus the country code and last two digits so you can recognise it in Settings. Phone numbers, yours and your contacts’, are used only for contact matching — never for SMS, marketing or advertising.
How we use it
We use this data to sign you in, sync your training history, calculate plans, XP and rank, show the social and gym features you request, provide safety and moderation tools, deliver notifications you enable, restore purchases, answer support requests, prevent abuse and keep the service reliable.
Location
A gym check-in sends your current coordinates to the server only to test whether you are inside the allowed radius. The coordinate and its accuracy are not written to your check-in history; Repout keeps the gym, time and day. If you start run tracking, the app records the route until you stop it, including while the app is in the background. Location access is optional and controlled in iOS Settings or Android Settings.
Service providers and sharing
Repout does not sell personal data or use it for third-party advertising. Infrastructure providers may process data to host the API and database. Apple processes Sign in with Apple and App Store purchases; Google processes Google Play purchases; RevenueCat processes purchase and entitlement information; OneSignal processes notification identifiers and delivery data. When meal-photo analysis is enabled and you choose that feature, the selected photo may be sent to the configured vision provider for that request. Public or follower-visible content is shared only according to the audience and privacy controls you select.
Retention and deletion
Data is kept while your account is active and as needed to operate the service, resolve safety reports and meet legal obligations. You can request an export in the app. Deleting your account immediately signs it out and hides it from active product surfaces; the backend is designed to permanently remove the account and its owned data within 24 hours. Limited deletion audit records may remain to prove that the purge completed.
Your choices
The app lets you control profile visibility, city and gym display, the ‘here now’ roster, who can comment, your phone number and whether people who have it can find you, notification categories, face blur, blocks and account deletion. iOS Settings or Android Settings control camera, microphone, contacts, location, photos and notification permission. You may also ask for access, correction or deletion through Support.
Security and age
Repout uses encrypted HTTPS connections in production, hashed passwords and verification codes, short-lived access tokens, rate limits and restricted administration. No online service can promise absolute security. Repout is intended for people aged 16 and over.
Changes to this policy
If the product or its data practices change, this page and its effective date will be updated. Material changes will be surfaced in the app when appropriate.
Contact
For privacy questions or requests, email [email protected]. Include the email address or Sign in with Apple account used for Repout so the request can be matched safely.