Privacy policy
The short version
Rack works without an account, and then everything stays on your phone.
If you sign in, we store your training on our server so it's backed up and your crew can see your finished workouts.
Progress photos never leave your phone. No ads, no analytics, no tracking, and we never sell your data.
You can delete your account and all your data from the app at any time.
Who we are
Rack is a gym-logging app made by Stingray Commerce LLC ("we", "us"), based in the United States. For anything about privacy, email [email protected].
Without an account
You can use every training feature without signing in. Your program, workouts, body stats, badges, settings and progress photos are stored only on your phone. We don't receive any of it. Uninstalling the app, or using You → Erase all data on this phone, deletes it.
What we collect when you sign in
Signing in is optional. It backs up your training and lets you join a crew. When you're signed in, the app sends the following to our server:
Your account
- Email address, used to sign you in.
- Name: the name you choose in the app, or your name from Google if you sign in with Google. Rack also stores your initials.
- If you sign in with Google, Google also gives our sign-in service your Google account ID and a link to your Google profile picture. Rack doesn't show or use the picture.
- A random account ID, and when you created your account and last signed in.
Your training
- Programs: which template you use, its days and exercises, target weights and reps, and where you are in the program.
- Workouts, once you finish them: the session name, start and finish time, and XP earned.
- Sets: exercise, weight, reps, how hard it felt, estimated one-rep max, and whether it was a personal record.
- Badges you've earned, and when.
- Settings: units, coach tone, experience level, training days per week, your goal, XP, reminder days and time, and whether you post to your crew.
Body stats (health information)
- Bodyweight and optional waist, chest, arm and thigh measurements, with the date.
Your crew
- The crew you're in, when you joined, and who invited you.
- Reactions you give to crewmates' workouts.
- People you mute or block.
- Reports you send: who you reported, the reason you picked, and the workout you reported from, if any.
Security logs
Like most online services, our sign-in and database provider keeps short-lived technical logs of requests, including your IP address and device or browser type. They are used only to keep the service secure and working, not to track you.
What never leaves your phone
- Progress photos. They're saved in the app's private storage on your phone. They are not uploaded, backed up or shared.
- Workouts you haven't finished yet. They're sent once you finish them.
- Reminder notifications. Your phone schedules them itself; no notification server is involved.
- Small counters used for badges, such as how often you opened help tips or watched exercise demos.
Who can see your data
| Who | What they can see |
|---|---|
| You | Everything in your account. |
| Your crew (up to 12 people you or they invited) | Your name and initials, your training days per week, and your finished workouts (session name, time, top lifts, XP, records). Workouts are shown only while Post my sessions to crew is on; it's on by default and you can turn it off in Crew settings. They also see reactions on posts. Never your email, goal, body stats, reminders or photos. |
| People you block, and people who block you | Nothing about each other. |
| Everyone else | Nothing. There is no public profile or public feed. |
| Us | We can access the database to run the service, investigate reports and answer your requests. We don't look at your data otherwise. |
Why we use it
- To back up your training and restore it on a new phone.
- To run your crew: posts, reactions, the member ring and crew badges.
- To keep people safe: blocks, mutes and reports.
- To sign you in and keep your account secure.
We don't use your data for advertising, profiling or selling, and we don't train any AI models with it.
If you're in the UK or EU: we use your data to provide the service you asked for (contract). We use your body stats only because you choose to enter and back them up (your explicit consent), and you can withdraw that consent by deleting them or your account.
Services we use
- Supabase hosts our database and sign-in, and sends sign-in emails. Your data is stored in their United States data center. Supabase processes it only on our behalf. See supabase.com/privacy.
- Google, only if you choose Continue with Google. Google tells us your name and email address so you can sign in. See policies.google.com/privacy.
We don't use advertising, analytics or crash-reporting services.
How long we keep it
We keep your account data until you delete it or your account. When you delete your account, it's removed from our database straight away. Copies may remain in our hosting provider's backups and security logs for a short time (up to 30 days) before they are overwritten.
Deleting your data
- In the app: You → Delete account. This deletes your account and all its data from our server, and erases everything on your phone, including progress photos.
- Without the app: follow the steps on our account deletion page.
- Just this phone: You → Sign out → Sign out and erase this phone.
Your rights
You can ask us for a copy of your data, to correct it, or to delete it, by emailing [email protected]. Email us from the address you sign in with, so we know it's you. We reply within 30 days. Depending on where you live, you may also have the right to complain to your data protection authority.
Security
Data travels between the app and our server over encrypted connections (HTTPS). Database rules make sure each person can only read their own data and their own crew's shared workouts. The keys that can change other people's data stay on the server and are never in the app.
Children
Rack is not meant for children under 13, and we don't knowingly collect data from them. If you think a child has given us data, email us and we'll delete it.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change affects how your data is used, we'll tell you in the app first.