Privacy
Updated 23 August 2026
This covers the three Repple apps — Repple, Repple Coach and Repple Studio — and this website. They share one account system and one database, so this policy covers all of them together.
The short version. We collect what the app needs to do its job and nothing else. We do not sell your data. We do not use it for advertising. Health and fitness data is never used for anything but showing you your own training. You can export everything or have it deleted, at any time, by asking.
Who we are
Repple is operated by Washateria LLC. For anything in this policy, write to support@repplefitness.com.
What we collect
| What | Why | When |
|---|---|---|
| Email and password | To create and secure your account. | Always. Passwords are stored hashed; we never see them. |
| Name and profile photo | So your coach knows who you are. | If you enter them. |
| Date of birth, sex, height, weight | Heart-rate zones and calorie estimates are calculated from these. | If you enter them. |
| Workouts — exercises, sets, reps, weight, perceived effort, cardio, calories, time in heart-rate zone | Your training history, progress and personal records. | When you log a workout or import one. |
| Apple Health data — heart rate, active energy, steps, resting heart rate, workouts | Live heart rate and calories during a session, and importing workouts you recorded on your watch. | Only if you grant Health permission. You can revoke it at any time. |
| Body measurements, InBody scans and progress photos | To show change over time. | If you record them. |
| Food and meal logs | Nutrition tracking, and sharing with your coach if you have one. | If you use the nutrition features. |
| Check-ins and habits | Weekly progress and consistency. | If you use them. |
| Messages between you and your coach | To deliver them. | When you send one. |
| Device push token | To send notifications you have asked for. | If you allow notifications. |
| Connected device tokens (WHOOP, Oura, Fitbit, Garmin, Spotify) | To read the data you connected them for. | Only if you connect that service. |
| Crash and error reports | To find and fix faults. | When the app hits an error. |
| Payment records | For trainers and gyms taking payment through Repple. | Card details are handled by Stripe and never reach our servers. |
We do not collect location, contacts, browsing history, or advertising identifiers.
Apple Health, specifically
Health data gets stricter treatment than everything else, because it should:
- It is read only after you grant permission, and only the types listed above.
- It is used solely to show you your own training and recovery.
- It is never used for advertising or marketing, and never sold or shared with data brokers.
- It is not shared with anyone other than a coach you have deliberately linked to your account.
- Revoke it whenever you like in iOS Settings → Privacy & Security → Health → Repple. The app keeps working without it.
If you allow it, Repple can also write completed workouts back to Apple Health so your rings and history stay accurate.
Who can see your data
- You. Always.
- Your coach, if you accept a coaching link — they can see your training, and your nutrition and check-ins where those features are used together. You can end the link.
- Your gym, if you are a member of one, sees membership and attendance information for running the gym. Owners do not get your private messages.
- Nobody else. We do not sell data, we do not share it for advertising, and we do not hand it to third parties for their own purposes.
Services we rely on
These process data on our behalf so the app can work. They are bound to use it only for that:
- Supabase — database, sign-in and file storage.
- Expo — delivering push notifications.
- Resend — sending account emails such as password resets.
- Stripe — payments, where a trainer or gym takes them. Stripe handles card details directly; we never receive them.
- WHOOP, Oura, Fitbit, Garmin, Spotify — only if you connect them, and only for what you connected them for.
Keeping it safe
Data is encrypted in transit and at rest. Access is enforced at the database itself: every table carries row-level rules, so one person's records are not reachable by another account even if the app asked. Nobody at Repple browses your training data as a matter of routine.
How long we keep it
For as long as your account exists, because a training history is only useful over time. When you delete your account we remove your personal data within 30 days, except anything we are legally required to keep — payment records for tax purposes being the usual case.
Your rights
- Get a copy. Ask and we will export everything we hold about you.
- Correct it. Most of it you can edit in the app; ask us for the rest.
- Delete it. Request account deletion in Me → Settings, or email us.
- Withdraw consent. Turn off Health access or disconnect a device whenever you like.
- Object or complain. If you are in the UK or EU you may also complain to your data protection authority.
Email support@repplefitness.com for any of these. We will respond within 30 days.
Children
Repple is not intended for children under 16. We do not knowingly collect data from them. If you believe a child has an account, tell us and we will remove it.
Where data is held
Our database and file storage are operated by Supabase and may be processed outside your country. Where data leaves the UK or EEA, it is transferred under the safeguards those rules require.
Changes
If this policy changes in a way that matters, we will say so in the app before the change takes effect. The date at the top always reflects the current version.
Contact
Questions, requests or complaints:
support@repplefitness.com