Privacy Policy

Last updated: September 16, 2026

WOD Tracker ("the App") is developed by Manuel Lorenzo. This privacy policy explains how the App accesses, collects, uses, and shares your data.

1. Data Storage

Your data is stored locally on your device by default. This includes:

• Workout data — exercises, sets, weights, repetitions, RPE, dates, notes, templates, and programs
• Body composition data — body weight, body fat percentage, and body measurements (chest, waist, hips, arms, legs, neck, shoulders), if you choose to record them
• Preferences — units, theme, reminder settings, and other app settings

If you opt into cloud backup (premium feature), this data — including your body composition entries — is transmitted to and stored in Firebase/Google Cloud infrastructure under your account. Cloud backup is manual (not real-time sync) and uses a last-write-wins strategy. If you do not enable cloud backup, none of this data leaves your device.

2. Health Data

If you enable Health Sync (premium feature), WOD Tracker writes your completed exercise sessions to Google Health Connect (Android) or Apple Health (iOS). The App never reads any data from Health Connect or Apple Health.

The health data written includes:

• Exercise session records — exercise names, workout start and end times
• Set details — weight, repetitions, and unit of measurement (kg/lbs)

How health data is handled:

• Health data written to the platform health store is processed entirely on your device and is never uploaded to our servers.
• Health data is not sold, shared, or transmitted to any third party.
• Health Sync requires your explicit opt-in and permission grant through the system health permission dialog.
• You can revoke health permissions at any time through your device's Settings app.
• The App requests write access only to Health Connect and Apple Health. It does not request or hold read access to your stored health records.

Heart rate on a paired watch

If you install the WOD Tracker app on a Wear OS watch, it reads your heart rate from the watch's own sensor while a workout is open on screen. This is the only health data the App reads, and it does not come from Health Connect or Apple Health — it comes directly from the sensor, with your permission.

• Heart rate is shown on the watch while you train and is never saved. It is not written to the App's database, not included in backups or exports, and not sent to the phone.
• It is never uploaded to our servers and never shared with any third party.
• Reading stops as soon as you leave the workout screen.
• It requires your explicit permission grant on the watch, which you can revoke at any time in the watch's Settings app. If you decline, everything else in the watch app still works — you simply do not see a heart rate.

3. Camera and Microphone

Two optional features use device sensors. Both require your permission, and neither uploads what it captures:

• Form Check (camera) — analyzes your movement technique using on-device pose detection. Video is processed entirely on your device in real time. It is never recorded, stored, or uploaded.
• Voice logging (microphone) — lets you dictate a workout instead of typing it. Speech is transcribed by your device's own speech recognition service, provided by the operating system. The App does not store or transmit audio recordings.

4. Personal Information

We do not collect or sell any personal information. The only feature that shares your data with a third party for processing is the AI Coach, and only after you allow it (see Section 6). If you use Google Sign-In or Sign in with Apple for cloud sync, your authentication is handled entirely by Google or Apple. We only store your anonymized user ID to associate your backup data.

5. Analytics & Crash Reporting

We use Firebase Crashlytics to collect anonymous crash reports to improve app stability. No personally identifiable information is included in these reports. We also use Firebase Analytics to understand aggregate usage patterns (e.g., which features are popular). No individual tracking or advertising profiles are created.

6. AI Coach

The AI Coach (PRO) writes its replies with Gemini, an AI service run by Google. The App reaches Gemini by way of Firebase AI Logic. The first time you open the AI Coach, the App shows what it sends and who receives it, and nothing is sent until you tap Allow.

What is sent to Google, and only while you use the AI Coach:

• The messages you type to the coach, and the latest messages of the same chat, so the reply makes sense in context.
• The names of your last 5 exercises and how many days you trained this week.
• On Android only: up to 3 of your personal records and your weight unit (kg or lb).
• When you open a finished workout with an AI summary: how many exercises it had.

What is never sent: your name, email address, account ID, Apple Health or Health Connect data, body composition data, photos, camera or microphone data, and location.

How it is used: only to write the coach's reply. The App keeps the conversation in memory for the current session and does not store it on our servers. Google processes the data under the Gemini API Additional Terms of Service and the Google Privacy Policy, which protect your data at least as well as this policy. The App uses Gemini's no-cost tier, and under those terms Google may use this data to improve its services, which can include human review. Do not type anything into the AI Coach that you want to keep private.

Your choice: the AI Coach is optional. You can turn off data sharing at any time in Settings > Legal & Privacy (Android) or Settings > AI Coach (iOS). When it is off, nothing is sent to Google and the AI Coach asks again before it is used.

The AI Coach provides general training information only. It is not medical advice, and it is not a substitute for a qualified healthcare professional or certified fitness professional.

7. Third-Party Services

The App integrates with the following third-party services:

• Google Health Connect / Apple HealthKit — Health data sync, write-only (see Section 2)
• Wear OS watch sensor — Live heart rate during a workout, shown on the watch only and never stored (see Section 2)
• Firebase — Cloud backup, crash reporting, and analytics
• RevenueCat — Subscription management (processes subscription status, not payment details)
• Google Play / Apple App Store — Payment processing for subscriptions (we do not have access to your payment details)
• Google Gemini, via Firebase AI Logic — AI Coach replies, only after you allow it (see Section 6)

8. Data Deletion

You can delete your data at any time:

• Cloud data: Settings > Cloud & Backup > Delete Account & Data
• Local data: Uninstall the app or clear app data through device settings
• Health data: Revoke permissions through your device's Health Connect or Apple Health settings. Sessions already written to Health Connect or Apple Health are managed there, not by the App.

9. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the App after changes constitutes acceptance.

11. Contact

For privacy concerns or questions, please contact us through the app store listing or at manulorenzop@gmail.com.