Privacy Policy

What we collect

• Your email and password (hashed) when you sign up.
• Training data you log: workouts, sets, reps, weights.
• Body metrics you choose to record: weight, measurements, photos.
• Server logs including IP address, user agent, and request timing — used for rate limiting and debugging.

How we use it

To provide the service, send transactional email (account confirmation, password reset), and improve the product. We don't use your data for advertising and we don't sell it.

Sharing

We don't share your personal data with third parties except as required by law or to providers we use to operate the service (e.g. our email-delivery provider). Those providers only see what they need to see (e.g. your email when sending you a confirmation link).

Storage

Data is stored on servers in compliance with the Protection of Personal Information Act (POPIA) of South Africa.

Retention

We keep your data until you delete your account. Account deletion is permanent and processed within 30 days.

Your rights

Under POPIA you have the right to access your personal information, correct it, request its deletion, and export the data connected to your account from Settings → Account. You can also lodge a complaint with the Information Regulator. Email drikusvdwalt+stockforge@gmail.com to exercise these rights.

Cookies

We use only essential session cookies required for sign-in. We don't use marketing or tracking cookies.

Marketing email

We don't send marketing email. The only emails you'll receive are transactional (account confirmation, password reset, security notifications). If we ever introduce marketing email, it will be opt-in.

Contact

Privacy questions? drikusvdwalt+stockforge@gmail.com.