heavybase

01 What we collect

heavybase is local-first. Most of your data lives on your phone and only leaves it for the specific purposes below.

• Workout data — your templates, weekly schedule, logged sessions, streaks, and the display name you set. Stored on your device.
• Account info — if you choose to sign in, Apple provides your name and an email address (which may be Apple's private relay address). We use this to create and identify your account.
• Fitness intake — when you ask the AI coach to build a plan, the details you enter (such as days per week, experience level, focus, and equipment) are sent to our coach service to generate that plan.
• Music connection — if you connect Spotify, an access token is stored on your device so the app can show and control playback. We don't read your listening history.
• Subscription status — if you subscribe, our payments provider records that a purchase was made so the app knows your access level. Apple handles the actual payment; we never see your card details.

02 How we use it

To run the app and nothing more: to save and sync your workouts, to identify your account when you sign in, to generate AI workout plans you request, to enable music controls you turn on, and to unlock features you've paid for.

03 Guest mode

You can use heavybase without an account. In guest mode everything stays on your device only — nothing syncs to the cloud and no account is created. If you sign out later, you stay in guest mode and your local data remains usable.

04 Where your data is stored

Your data lives on your device, and — when you're signed in — in our cloud backend so it syncs across reinstalls and devices. We rely on a small set of trusted providers to operate the app:

Apple

Sign-in and payment processing.

Supabase

Cloud database and authentication for syncing your account data.

OpenAI

Generates AI workout plans from the intake details you provide.

Spotify

Music playback, only if you connect it.

RevenueCat

Manages subscription status.

Each provider only receives what it needs to perform its function.

05 What we don't do

We don't sell your data. We don't share it for advertising, and we don't use it for anything beyond running heavybase for you.

06 Deleting your data

You're in control. You can delete your account and its cloud data directly inside the app — your local data is removed when you uninstall, and account deletion clears what's stored in our backend. If you'd rather we handle it, email us and we'll take care of it.

07 Children

heavybase isn't directed at children under 13, and we don't knowingly collect information from them. If you believe a child has provided us information, contact us and we'll delete it.

08 Changes to this policy

If this policy changes, we'll update this page and revise the effective date above. Significant changes will be reflected here before they take effect.

09 Contact

Questions about your privacy, or want your data deleted? Reach out and a real person will respond.