Privacy Policy
MuscleMaxer is a training app for iPhone and Apple Watch, made by Alp Kaan Özgül ("we", "us"). This policy explains what we collect, why, who we share it with and what you can do about it. Using the App also means agreeing to our Terms of Use. We don't show ads, we don't sell your data, and we don't use third-party tracking or analytics tools.
What we collect
| Data | Why |
|---|---|
| Account details: name, username, email, password (stored only as a secure hash), and your Apple or Google account identifier if you sign in with them | To create your account and sign you in |
| Profile: age, gender, height, weight, training goal and level, sports, available equipment | To estimate calories, tune automatic rep counting, and build plans that suit you |
| Workouts: sessions, exercises, sets, reps, weights, notes and photos you add | To keep your training history and show your progress |
| Health data (only with your permission): workouts, heart rate and related measurements from Apple Health | To import workouts you record elsewhere and to calculate heart-rate zones and recovery |
| Location (only with your permission, only while you use the app): GPS routes of outdoor activities | To map your runs and rides and to build route and heatmap features |
| Motion data from your iPhone and Apple Watch | To count reps automatically. It is processed on your devices. |
| Coach conversations: messages you send to the AI coach (only if you allow the AI coach) | To answer you and generate training plans and daily guidance |
| Social activity: who you follow, likes, comments and messages | To run the social features |
| Purchases: which subscription you have and when it renews or ends | To unlock the features you paid for. Apple handles payment; we never see your card details. |
Health data
Data from Apple Health is used only to provide features inside MuscleMaxer. It is never used for advertising, never sold, and never shared with data brokers. We don't use it for any purpose you haven't asked for. You can withdraw access at any time in the iPhone Settings app under Health → Data Access & Devices.
What other people can see
Activities you share appear to people who follow you, in line with the visibility you choose. Outdoor routes can contribute to the community heatmap, which shows how often streets and paths are used. The heatmap combines many people's routes and does not show who made any of them.
Who we share data with
We share data only with the service providers we need to run the app:
- Supabase stores our database, on servers in Germany (EU).
- DigitalOcean hosts our application server, in Germany (EU).
- DeepSeek and Google (Gemini) generate the AI coach's replies and daily guidance, only if you allow it. We ask when you create your account, and you can change your answer at any time in Settings → AI Coach. When it is on, your messages and the relevant parts of your profile (age, sex, height, weight, goal, level, equipment, injuries you mention) and training history (sessions, load and recovery) are sent to them. We don't send your name, email or exact location. DeepSeek may process this data outside the EU, including in China. When it is off, nothing is sent and the rest of the App keeps working.
- Apple provides Sign in with Apple, payments and subscriptions.
- Google provides Sign in with Google, if you choose it.
We may also disclose data if the law requires it.
How long we keep it
We keep your data while your account exists. You can delete your account at any time in Settings → Delete Account. That immediately deletes your profile, workouts, routes, photos, messages and coach conversations from our database, and backups age out within 30 days. If you signed in with Apple, we also revoke the app's access to your Apple ID. The exceptions are records we must keep by law, such as purchase records.
Your choices and rights
- You can see and edit your profile in the app.
- You can turn off Health, location and motion access in the iPhone Settings app.
- You can turn the AI coach on or off in Settings → AI Coach.
- You can delete your account in Settings → Delete Account.
- You can ask us for a copy of your data or to correct it by emailing [email protected].
- If you live in the EU, the UK or Turkey, you have rights under the GDPR, the UK GDPR or KVKK, including the right to complain to your data protection authority.
Children
MuscleMaxer is not for children under 13, and we don't knowingly collect their data.
Security
Passwords are stored as hashes, and sign-in tokens are kept in the device Keychain. No system is perfectly secure, but we take reasonable steps to protect your data.
Changes
If we change this policy, we'll update the date at the top. If a change is significant, we'll also tell you in the app.
Contact
Questions or requests: [email protected]