Privacy Policy

Ace ("the app", "we", "us") is a personal training and nutrition tracker. This policy explains what data the app collects, why, and what you can do about it.

What we collect

Account. Email address (or Google account identifier, if you sign in with Google) and password (stored as a salted hash — we never see or store your plaintext password).

Fitness data you enter. Workouts, exercises, sets, reps, weights, rest times, and the routines you build or that the app generates for you.

Nutrition data you enter. Meals you log, calorie and macro targets, and dietary preferences.

Body measurements you choose to enter. Weight, height, age, and sex — all optional, used only to estimate calorie targets. Leaving these blank never invents a default value.

Health app data (only if you turn it on). If you enable Apple Health or Health Connect access, we read the metrics you authorise: your steps and active energy, your body measurements (height, weight, body fat, lean mass), your heart rate and heart-rate variability, and your cardio-fitness and respiratory-rate readings. We use them to show your activity, track progress against your goals, and show effort during workouts. This is off by default, you choose which types to share in Apple's own permission sheet, and you can turn it off in Settings at any time.

Sleep. If you allow Health access, Ace reads your sleep from Apple Health or Health Connect and stores one record per night — when you slept, how long, and the sleep stages if your device reports them. We keep this because recovery is part of training: it's shown back to you, and measured against a sleep goal you set. We do not read the moment-by-moment sensor detail behind it, and sleep is never used for advertising or shared with advertisers or data brokers.

Heart rate. If you work out with an Apple Watch, Ace records your heart rate during the session. We keep the individual readings, not only a summary, so that we can show you effort during and after a workout and build better training insights over time — for example how hard a session really was, or how your recovery changes. Heart rate is never used for advertising and is never sold or shared with advertisers or data brokers.

Motion sensor data (invitation-only research). Ace is building automatic rep counting. To do that we need raw accelerometer and gyroscope recordings from real workouts, so we run a small research programme with a handful of invited testers. If you are one of them, and only if you also turn the setting on, the app records that raw sensor data during active workouts and uses it to develop and improve exercise and rep detection. If you have not been invited, Ace does not record raw motion data at all — the option is not shown, and our servers reject it. Invited testers can turn it off at any time in Settings, and delete everything already collected in the same step.

Apple Watch data. If you use the companion Watch app, workout state syncs between your phone and watch over Apple's on-device WatchConnectivity framework — it does not pass through our servers as a separate data flow beyond the same workout data described above.

Strava data (only if you connect it). If you choose to connect a Strava account, we access the OAuth token needed to export your completed workouts to Strava. You can disconnect at any time.

Usage data. Basic app usage (crash logs, performance data) may be collected to keep the app working correctly.

What we don't collect

We don't run ads, and we don't have any ad or analytics SDK that tracks you across other apps or websites. We don't sell your data to anyone, ever.

How we use your data

Solely to run the app's features for you: tracking your training and nutrition, generating personalized routines, computing your progress reviews, and syncing between your phone and Apple Watch. Nothing here is used to build advertising profiles.

Who we share it with

• Supabase (our database and file storage provider) hosts your data on our behalf, under their own data-processing terms.
• Apple (HealthKit, WatchConnectivity, Sign in with Apple where used) — only for the specific health/fitness features you opt into.
• Google — only if you choose to sign in with a Google account.
• Strava — only if you choose to connect your account, and only workouts you explicitly export.
• Sentry — our crash-reporting provider. When the app hits an error, we send a technical report so we can fix it: what broke and where in the code. These reports carry your Ace account identifier and nothing else about you — your weight, heart rate, workouts and food entries are stripped out before anything is sent, and we do not record your screen.
• RevenueCat — our subscription provider. If you subscribe, they process your purchase and renewal status so the app knows what you have access to. They receive your Ace account identifier and the subscription itself — never your training, nutrition, or health data.

We do not share your data with anyone else, and never for advertising or marketing purposes.

How long we keep it

Your training and nutrition history — workouts, sets, meals, measurements, goals, and the heart-rate readings attached to them — is kept for as long as your account exists. It is your record, so we don't expire it or thin it out; deleting your account deletes all of it.

Raw motion recordings from the research programme are kept only while they are useful for developing rep detection, and are deleted when you leave the programme, when you turn the setting off and choose to delete them, or when you delete your account — whichever comes first.

Account and subscription records are kept while your account is active. Some billing records are held by Apple and RevenueCat under their own retention rules, which we don't control.

When you delete your account, your data is removed from our systems. Backups roll off on their own schedule and are not used to restore deleted accounts.

Your rights

You can access, correct, or delete your data at any time from within the app. You can request full account deletion from Settings → Account → Delete account (or by contacting us — see below), which permanently removes your account and all associated data from our systems.

Children

Ace is not directed at children under 13, and we do not knowingly collect data from them.

Changes to this policy

If this policy changes, we'll update the date at the top and post the new version here.

Contact us

Questions about this policy or your data: privacy@prsnt.app