RepIo · Legal
Privacy Policy
RepIo is a workout planner and tracker. It is built so that your training data stays on your own phone. There is no account, no subscription, no advertising and no analytics profile.
1. Who is responsible
RepIo is published by Grafizum, a sole proprietorship established in Switzerland. Grafizum is the controller for the processing described below. Operator details are in the Legal Notice.
For any question, request or complaint about this policy, write to privacy@grafizum.com.
2. What stays on your device
Everything you create in RepIo is stored locally on your phone, in the app's private storage. That includes:
- your training plan and weekly schedule;
- the exercises you log, with sets, reps, weight and dates;
- your levels, progression and the history behind them;
- your settings, including the theme you choose and your equipment selection.
This data is not sent to us or to anyone else. It is not backed up to our servers, and we cannot read it. Removing it is entirely in your control: uninstalling the app deletes it, and clearing the app's storage in Android settings does the same.
3. What we receive
There is one case in which data leaves your device: when you choose to send us a support message from inside the app.
| What is sent | The subject and message you type, the device model, the app version, and the time the message was sent. |
|---|---|
| When | Only when you press send. Nothing is transmitted while you use the app. |
| Where it goes | Google Firebase Firestore, a database service operated by Google. The connection is encrypted in transit. |
| Why | To read your message, answer it, and fix the problem you reported. |
To protect that one endpoint against abuse, the app uses Firebase App Check with Google Play Integrity. That check confirms the request comes from a genuine installation of RepIo distributed by Google Play. It does not identify you.
When you install or update the app, Google Play processes the download and any update check under Google's privacy policy. RepIo asks Google Play whether a newer version exists; that request contains no workout data.
4. What we do not do
- No advertising, and no advertising identifier.
- No analytics or usage tracking, and no third-party tracking SDKs.
- No crash reporting service; if the app crashes, nothing is sent to us.
- No sale or sharing of personal data with anyone.
- No access to your location, camera, microphone, contacts, calendar, SMS, photos or files.
- No connection to Google Fit, Health Connect or any other health platform.
5. Why we process it, and on what basis
Support messages are processed to answer your request and to keep the service secure. Under the Swiss FADP we rely on processing in good faith, purpose limitation and proportionality. Where the GDPR applies, the basis is the performance of our agreement with you (answering your request) and our legitimate interest in keeping the service secure and free of abuse.
6. How long we keep it
Support messages are kept until your request is resolved, and then for no longer than 12 months so that we can recognise a recurring problem. After that they are deleted. Data on your device is kept for as long as you keep the app installed, and is deleted when you uninstall it.
7. Who else is involved
We use Google Firebase (Firestore and App Check) to receive and store support messages, and Google Play to distribute the app. These providers process data on our behalf or as independent controllers under their own terms. We do not transfer personal data to anyone else, except where the law requires it.
Because these providers operate internationally, a support message may be stored outside Switzerland or the European Economic Area, under the safeguards those providers have in place.
8. Your rights
You can ask us for a copy of the support messages you sent, ask us to correct them, or ask us to delete them. You can also object to our processing or ask us to restrict it. Write to privacy@grafizum.com and we will respond within 30 days.
You also have the right to complain to a supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU or EEA, the authority in your country of residence.
9. Children
RepIo is intended for adults and is not directed at children. We do not knowingly collect data from children. Because the app has no account and stores training data locally, a child using it does not create a record with us.
10. Health and fitness disclaimer
RepIo provides general fitness and training information. It is not a medical device and does not provide medical advice, diagnosis or treatment. If you have a medical condition, are pregnant, or are recovering from injury, speak to a qualified healthcare professional before starting or changing a training programme.
11. Security
Data on your device is protected by Android's app sandbox. Support messages travel over an encrypted connection, and the receiving endpoint is protected by App Check so that only genuine copies of the app can write to it. No system is perfectly secure, but we limit what leaves your device to the minimum described above.
12. Changes to this policy
If the app's data behaviour changes, this page is updated before the change ships, and the date at the top changes with it. Material changes will also be described in the app's release notes.
13. Contact
Grafizum, Switzerland — privacy@grafizum.com
Operator details: grafizum.com/legal-notice