Privacy Policy

01Introduction

Welcome to Iterate, a mobile application developed by Philip, an independent solo developer. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our app. By using Iterate, you agree to the terms of this Privacy Policy.

02Information We Collect

2.1 Information You Provide

Account Information:

Email address (used for account creation, authentication, and communication). If you sign up using Sign in with Apple, we receive your name and an email address (which may be an Apple private relay address) from Apple.

Profile Information:

Name, username, body illustration preference, profile picture (avatar), bio, and a self-reported location. The “location” field is free-form text you optionally enter yourself (for example, a city or region) — it is not derived from your device's GPS or precise location.

Workout Data:

Details of your workouts and routines, including exercises, sets, repetitions, weights, duration, rest timers, and (if enabled) RPE (rate of perceived exertion). If you create custom exercises, this may include images you upload for those exercises.

Social Connections:

Your followers, the people you follow, and friends you connect with in the app, as well as users you block.

Privacy & Display Settings:

Whether your profile is public or private, whether you appear in friends' live activity, and whether your join date is shown.

Preferences:

App settings such as units (weight, distance, body measurement), language, theme, default timers, and notification preferences.

2.2 Information Collected Automatically

Device Information:

Device model, operating system, and unique device identifiers (e.g., IDFV).

Usage Data:

How you interact with the app, including features used, screens visited, and session activity.

Approximate Location:

We do NOT collect your device's GPS or precise location, and the app does not request location permissions or include any map features. Our service providers may derive an approximate, coarse location (such as country or region) from your IP address for analytics and security purposes.

Live Activities & Widget Data:

Data related to ongoing workouts that powers Live Activities and the home-screen widget.

Diagnostics:

Crash reports, error logs, and performance data used to keep the app stable.

Push Notifications:

A push notification token and data about delivery of and interaction with notifications.

2.3 Information from Third Parties

Sign in with Apple:

If you choose to sign in with Apple, we receive your name and email (or Apple private relay email) from Apple.

In-App Purchases:

We receive subscription and purchase status from the App Store via our payments provider (RevenueCat). We do not collect or store your payment card details.

03How We Use Your Information

Account Management:

To create and manage your user account and authentication.

Workout Tracking:

To log, sync, and display your workout data and routines across your devices.

Social Features:

To let you connect with, follow, and share workouts with other users and friends.

Profile Display:

To display your profile information to other users based on your privacy settings.

Subscriptions:

To provide and manage Pro features and in-app purchases.

Analytics:

To understand user behavior and improve our app.

Diagnostics:

To monitor, debug, and improve the stability and performance of the app.

Push Notifications:

To send you relevant notifications and reminders.

Customer Support:

To assist you with any issues or questions, including bug reports you submit.

Marketing:

To send you promotional materials, with your consent.

04Data Sharing and Third-Party Services

Supabase:

Used as our backend platform for account authentication, database storage, and file storage (e.g., profile pictures and custom exercise images).

RevenueCat:

Used for managing in-app purchases and subscriptions.

PostHog:

Used for analytics to understand how users interact with the app.

Sentry:

Used for error tracking, crash reporting, and performance monitoring.

Expo:

Used to deliver push notifications and app updates.

Apple:

Used for Sign in with Apple and App Store in-app purchases.

WatermelonDB:

Used on your device for offline data storage and synchronization with our backend.

05Data Retention

User-Provided Data:

We retain your user-provided data as long as your account is active or as needed to provide you services. You can request the deletion of your account and associated data at any time, and the app provides an in-app option to delete your account.

Usage Data:

We retain usage data for as long as necessary to provide our services and to comply with legal obligations.

Analytics Data:

We retain aggregated and anonymized analytics data indefinitely.

06Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption:

Secure transmission of data using SSL/TLS.

Access Controls:

Restricting access to personal information to authorized personnel only, including database row-level security.

Regular Audits:

Conducting regular security audits and assessments.

07Your Rights

7.1 Rights Under GDPR (EU Users)

Access:

You have the right to request access to your personal information.

Correction:

You have the right to request correction of any inaccurate or incomplete personal information.

Erasure:

You have the right to request the deletion of your personal information.

Portability:

You have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format.

Restriction:

You have the right to request the restriction of processing your personal information.

Objection:

You have the right to object to the processing of your personal information for marketing purposes.

7.2 Rights Under CCPA (California Users)

Access:

You have the right to request access to your personal information.

Deletion:

You have the right to request the deletion of your personal information.

Opt-Out:

You have the right to opt-out of the sale of your personal information to third parties. We do not sell your personal information.

08Children's Privacy

Iterate is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information.

09Tracking Technologies

Device Identifiers:

We use unique device identifiers to support analytics and improve the app.

Tracking Technologies:

We use tracking technologies to analyze app usage and provide analytics. The app does not use advertising identifiers (such as IDFA) for tracking.

10Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated Privacy Policy on the app and, where necessary, through in-app notifications or other communication methods.

11Contact Us

Iterate is developed and maintained by Philip, an independent solo developer. If you have any questions or concerns about this Privacy Policy or the data practices described here, please contact:

Philip
Email: philip@iterate.fit