Privacy Policy

1. Information we collect

Account information

If you create an account, we collect your email address and, if you use Google or Apple sign-in, your name and profile photo as provided by that service. You can also use Setz inGuest Mode without creating an account. In that case, your data stays on your device and is never sent to our servers.

Profile information

Display name, avatar photo (if you upload one), and gender. Gender is used only to enable a safety feature that gives women control over who can follow them. It is set once during signup and cannot be changed afterward.

Workout data

Exercises, sets, reps, weights, rest timers, workout templates, and workout history. This is the core data Setz is built to track, and it's what powers features like progress charts, personal records, and Ghost Mode.

Health data

If you choose to connect Google Health Connect (Android) or Apple Health (iOS), Setz writes your completed workout sessions, heart rate, and active calories burned to Health Connect or Apple Health. We only request the exact data types Setz actually uses, nothing broader. You can disconnect this at any time from your device's Health Connect or Health app settings.

Photos

If you choose to add a profile photo or attach a photo to a workout post, Setz opens your device's native photo picker or camera. We only receive the specific photo you select. Setz never gets broad access to your photo library.

Social features

If you follow other users, post workouts, or interact with others' posts, that activity (posts, follows, follow requests, likes/"hype") is stored so it can be shown to the relevant people. Posts can be set to Everyone or Followers Only, and you can delete your own posts at any time.

Bluetooth & wearable data

Setz can connect to Bluetooth heart rate monitors and to a paired Wear OS watch. Data exchanged with a watch (current exercise, sets, rest timer) stays between your phone and your own paired watch. It is not sent to our servers separately from your regular workout data.

Technical & diagnostic data

We collect basic error logs when something goes wrong in the app, so we can fix bugs. These logs are tied to your account only to help us investigate issues you report, and do not include your workout content.

2. How we use your information

• To sync your workout history across your devices.
• To show your profile, posts, and activity to other users you choose to interact with.
• To power features like progress tracking, personal records, and Ghost Mode.
• To send you notifications you've opted into (e.g. rest timer, gym reminders, follow notifications).
• To diagnose and fix bugs or crashes.

We do not sell your personal data, and we do not use your workout or health data for advertising.

3. Where your data is stored

Your workout data is stored locally on your device (offline-first) and, if you're signed in, backed up to our cloud database hosted on Supabase. Access to your cloud data is restricted so that only you can read or write your own records, except for the social content you explicitly choose to share (posts, profile, follow status).

4. Third-party services

Setz relies on a small number of third-party services to function:

• Supabase: our cloud database and authentication provider.
• Google Health Connect / Apple HealthKit: for optional health data sync.
• Google / Apple Sign-In: if you choose to sign in that way.
• Giphy: if you add a GIF sticker to a workout photo.
• Expo / Google push notification services: to deliver notifications you've enabled.

Each of these providers has its own privacy policy governing how they handle data passed to them.

5. Your choices & controls

• Use Guest Mode to try Setz without an account, nothing leaves your device.
• Disconnect Health Connect / Apple Health at any time from your device settings.
• Delete any post you've shared, or change its visibility, at any time.
• Control notification permissions from your device settings.
• Request a copy of your data, or request that your account and associated data be deleted, by emailing ajayrne@gmail.com. We'll process deletion requests within 30 days.

6. Data retention

We keep your account data for as long as your account is active. If you request account deletion, we remove your personal data and workout history from our systems, other than data we're required to retain for legal or security purposes.

7. Your rights under GDPR (EEA / UK users)

If you're located in the European Economic Area or the UK, you have rights under the GDPR / UK GDPR over the personal data we hold about you. These include the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data ("right to be forgotten").
• Export your data in a portable format ("data portability").
• Object to, or request that we restrict, certain processing.
• Withdraw consent at any time, where processing is based on consent (e.g. optional Health Connect / Apple Health sync).

Our legal basis for processing is, depending on the data: your consent (health data, optional features), performance of a contract (providing the app's core functionality to you), and our legitimate interest in keeping Setz secure and working (diagnostic logs). To exercise any of these rights, email ajayrne@gmail.com. You also have the right to lodge a complaint with your local data protection authority.

8. Your rights under CCPA (California users)

If you're a California resident, the CCPA (as amended by the CPRA) gives you the right to:

• Know what personal information we collect about you and why.
• Request deletion of your personal information.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information. We do not sell or share your personal information, so there's nothing to opt out of.
• Not be discriminated against for exercising any of these rights.

To exercise any of these rights, email ajayrne@gmail.com.

9. Children's privacy

Setz is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, contact us at the email below and we'll remove it.

10. Changes to this policy

If we make material changes to this policy, we'll update the "Last updated" date above. Continued use of Setz after a change means you accept the updated policy.

11. Contact us

Questions about this policy, or requests regarding your data, can be sent to ajayrne@gmail.com.