Privacy Policy

01Introduction

Welcome to Iterate, a mobile application developed by Philip, an independent solo developer. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our app. By using Iterate, you agree to the terms of this Privacy Policy.

02Information We Collect

2.1 Information You Provide

Account Information:

Email address (used for account creation, authentication, and communication). If you sign up using Sign in with Apple, we receive your name and an email address (which may be an Apple private relay address) from Apple.

Profile Information:

Name, username, body illustration preference, profile picture (avatar), bio, and a self-reported location. The “location” field is free-form text you optionally enter yourself (for example, a city or region). It is not derived from your device's GPS or precise location.

Workout Data:

Details of your workouts and routines, including exercises, sets, repetitions, weights, duration, rest timers, and (if enabled) RPE (rate of perceived exertion). If you create custom exercises, this may include images you upload for those exercises.

Social Connections:

Your followers, the people you follow, follow requests you send and receive, and users you block.

Phone Number:

If you add a phone number so people who already have it can find you, the app hashes it on your device before sending it. We store that hashed form together with the number's country and last four digits, which we use to show you which number is on file. You can remove it at any time in the app's settings.

Contacts:

If you choose to find people from your contacts, the app reads your address book on your device and hashes each phone number there. Only these hashes are sent to us, to be compared against the numbers other users have added. Your contacts are never stored on our servers.

Direct Messages:

Messages you send and receive in the app, and when you last read each conversation, so your conversations sync across your devices and the other person can see that you have read their message.

Comments, Likes & Cheers:

Comments and replies you post on workouts, likes you give, and cheers you send during someone's live workout, including any text you write in a cheer. A cheer also appears in your direct-message conversation with that person.

Reports You File:

When you report a workout, comment, or profile we store what you reported, the description you wrote, and your account, so we can review it and act on repeat offenders. The person you reported is not told who reported them.

Privacy & Display Settings:

Whether your profile is public or private, who can see your live activity (everyone, your followers, followers you follow back, or no one), who can send you direct messages, whether your join date is shown, and whether you have been shown a notice about a change to who can see your content.

Preferences:

App settings such as units (weight, distance, body measurement), language, theme, default timers, and notification preferences.

2.2 Information Collected Automatically

Device Information:

Device model, operating system, and unique device identifiers (e.g., IDFV).

Usage Data:

How you interact with the app, including features used, screens visited, and session activity.

Approximate Location:

We do NOT collect your device's GPS or precise location, and the app does not request location permissions or include any map features. Our service providers may derive an approximate, coarse location (such as country or region) from your IP address for analytics and security purposes.

Live Activities & Widget Data:

Data related to ongoing workouts that powers Live Activities and the home-screen widget.

Diagnostics:

Crash reports, error logs, and performance data used to keep the app stable.

Push Notifications:

A push notification token and data about delivery of and interaction with notifications.

2.3 Information from Third Parties

Sign in with Apple:

If you choose to sign in with Apple, we receive your name and email (or Apple private relay email) from Apple.

In-App Purchases:

We receive subscription and purchase status from the App Store via our payments provider (RevenueCat). We do not collect or store your payment card details.

03How We Use Your Information

Account Management:

To create and manage your user account and authentication.

Workout Tracking:

To log, sync, and display your workout data and routines across your devices.

Social Features:

To let you follow other users, share workouts with them, and comment on, like, and cheer their workouts.

Direct Messages:

To deliver the messages you send and keep your conversations in sync across your devices.

Finding People You Know:

If you add a phone number or search your contacts, to match hashed phone numbers so that you and people who already have your number can find each other.

Profile Display:

To display your profile information to other users based on your privacy settings.

Subscriptions:

To provide and manage Pro features and in-app purchases.

Analytics:

To understand user behavior and improve our app.

Diagnostics:

To monitor, debug, and improve the stability and performance of the app.

Push Notifications:

To send you relevant notifications and reminders.

Customer Support:

To assist you with any issues or questions, including bug reports you submit.

Marketing:

To send you promotional materials, with your consent.

04What Other People Can See

Iterate is partly a social app, so some of what you log is shown to other people. This section describes who, by default and after any changes you make.

Public profile (the default):

Your username, name, avatar, bio, location field, and the workouts you share are visible to anyone using Iterate — including people who don't follow you, through the Explore feed and through search. Anyone can follow a public profile.

Private profile:

Only followers you have approved can see your shared workouts: when someone asks to follow you, you decide whether to approve the request, and you can remove a follower at any time. You can switch to a private profile at any time under Privacy in the app's settings; the change applies to your past workouts as well as new ones. Switching from private to public approves any pending follow requests.

Individual workouts:

Each workout can be marked private when you save it, regardless of your profile setting. A private workout is visible only to you, and never appears in any feed or on any shared link.

Photos you attach:

Photos attached to a shared workout are visible to everyone who can see that workout. Treat them as public unless your profile is private or the workout is marked private.

Share links:

A shared workout, routine, folder, or profile also has a page on iterate.fit that anyone with the link can open, whether or not they use the app. These pages ask search engines not to index them, but a link you send can be forwarded on.

Live activity:

While you are training, people in your chosen live-activity audience can see that a workout is in progress and send you cheers. By default that is followers you follow back; you can change it to everyone, all followers, or no one under Privacy in the app's settings. A private profile is never visible beyond its approved followers. Notifications that you have started training are only sent to your followers.

Comments:

Comments you post on a workout are visible to everyone who can see that workout.

Direct messages:

Messages are shown only to the people in that conversation. You choose who can message you: everyone, your followers, followers you follow back, or no one.

Phone number:

If you add a phone number, people who already have it in their contacts can find your profile through it. The number itself is not shown to anyone.

Not shown to others:

Your email address, your body weight and body measurements, and any workout you marked private.

When we add a feature that widens who can see existing content, we tell the people affected inside the app before their content appears in it, and give them the option to make their profile private instead.

05Data Sharing and Third-Party Services

Supabase:

Used as our backend platform for account authentication, database storage, and file storage (e.g., profile pictures and custom exercise images).

RevenueCat:

Used for managing in-app purchases and subscriptions.

PostHog:

Used for analytics to understand how users interact with the app.

Sentry:

Used for error tracking, crash reporting, and performance monitoring.

Expo:

Used to deliver push notifications and app updates.

Apple:

Used for Sign in with Apple and App Store in-app purchases.

WatermelonDB:

Used on your device for offline data storage and synchronization with our backend.

06Data Retention

User-Provided Data:

We retain your user-provided data as long as your account is active or as needed to provide you services. You can request the deletion of your account and associated data at any time, and the app provides an in-app option to delete your account.

Usage Data:

We retain usage data for as long as necessary to provide our services and to comply with legal obligations.

Analytics Data:

We retain aggregated and anonymized analytics data indefinitely.

07Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption:

Secure transmission of data using SSL/TLS.

Access Controls:

Restricting access to personal information to authorized personnel only, including database row-level security.

Regular Audits:

Conducting regular security audits and assessments.

08Your Rights

7.1 Rights Under GDPR (EU Users)

Access:

You have the right to request access to your personal information.

Correction:

You have the right to request correction of any inaccurate or incomplete personal information.

Erasure:

You have the right to request the deletion of your personal information.

Portability:

You have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format.

Restriction:

You have the right to request the restriction of processing your personal information.

Objection:

You have the right to object to the processing of your personal information for marketing purposes.

7.2 Rights Under CCPA (California Users)

Access:

You have the right to request access to your personal information.

Deletion:

You have the right to request the deletion of your personal information.

Opt-Out:

You have the right to opt-out of the sale of your personal information to third parties. We do not sell your personal information.

09Children's Privacy

Iterate is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information.

10Tracking Technologies

Device Identifiers:

We use unique device identifiers to support analytics and improve the app.

Tracking Technologies:

We use tracking technologies to analyze app usage and provide analytics. The app does not use advertising identifiers (such as IDFA) for tracking.

11Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated Privacy Policy on the app and, where necessary, through in-app notifications or other communication methods.

12Contact Us

Iterate is developed and maintained by Philip, an independent solo developer. If you have any questions or concerns about this Privacy Policy or the data practices described here, please contact:

Philip
Email: philip@iterate.fit