Privacy Policy

Effective October 13, 2026

This Privacy Policy explains how REP LLC ("REP," "we," "us") collects, uses, shares and protects information when you use the REP app for iPhone and Apple Watch and the website at liftwithrep.com (together, the "Services"). The short version: you decide who sees your training, your raw GPS tracks never leave our private storage, and we don't sell your data or use it for advertising.

1. Information we collect

Account information

REP uses Sign in with Apple as its only sign-in method, through our authentication provider Clerk. When you sign in, we receive an account identifier and, if you choose to share them, your name and email address (which may be an Apple private-relay address). Your email address is held by Clerk for sign-in; it is not stored in REP's training database.

Profile information

Your display name, username, profile photo, bio, unit system, language, time zone, training goals and a self-reported age range (for example, 18 or older). We don't collect your birthdate. If you use REP Intelligence, also your training profile and preferences (such as experience level, available equipment, session length, training days, and exercises you like or dislike).

Workouts and training

Workouts you log or record: exercises, sets, reps, weights, durations, distances, effort ratings, notes, photos you attach, a place name you type in (such as a gym and city), personal records, templates, training plans and scheduled sessions, and the device the workout came from. Notes you mark as private are visible only to you.

Location and routes

  • During GPS activities. When you record a run, ride or walk, REP uses your precise location while the activity is in progress, including when your screen is locked. REP only asks for "While Using" location permission and never tracks you in the background outside an activity you started.
  • Route data. We store your recorded route, splits and summary (distance, pace, elevation and similar) in private storage.
  • Privacy zones. If you add privacy zones (for example, around your home), we store each zone's center encrypted.
  • Route planning. When you plan a route, we use the start point, waypoints and distance you choose. Saved routes are private to you.
  • City name (optional). If you choose "Use my city," REP uses approximate location to look up a city name and keeps only the name, not your coordinates.

Apple Health

With your permission, and only for the categories you approve in iOS Settings:

  • REP may read: steps, active energy, walking/running and cycling distance, workouts and workout routes, body weight, heart rate, resting heart rate, heart rate variability, VO₂ max, and sleep.
  • REP may write: workouts, workout routes, active energy, distance and heart rate.
  • What we store: daily summaries (steps, sleep minutes, active calories, resting heart rate, HRV and VO₂ max). Workouts you import from Apple Health are copied into REP as private activities. Body weight is used on your device for calorie estimates and is not uploaded.

Bluetooth sensors

If you connect a heart-rate strap, power meter, cadence or speed sensor, foot pod or smart trainer, REP records its readings during your workout (heart rate, power, cadence and similar) along with the sensor's manufacturer and model. We do not store the sensor's hardware address.

Social activity

Your friends and squads, the posts you share, the props and comments you give and receive, bookmarks, workout invites, Moments (short-lived photo stories) with their views, reactions and replies, and the people you block or report.

REP Intelligence (AI coach)

When you use REP Intelligence, we process your request together with relevant context (see section 4). We do not keep a transcript of your coach conversations on our servers. We do keep request metadata (such as message length and a safety classification), the workout and plan drafts generated for you, any feedback you give, and usage counts used to enforce plan limits and control costs. Voice input is transcribed on your iPhone; audio is never sent to us.

Purchases

REP Pro is purchased through Apple. We never receive your payment card details. Our subscription provider, RevenueCat, tells us whether your account has an active subscription, linked by your account identifier.

Usage analytics

We may collect a limited set of product events (for example, that a Moment was published, that an activity recording started or finished, or which onboarding steps were completed) using PostHog. These events use broad categories rather than your content, never include your workouts, photos or location, and are linked to an internal account ID so we can understand how features are used. You can turn this off at any time in Settings → Share usage analytics.

Website

If you join the waitlist on liftwithrep.com, we store your email address, where on the page you signed up, and the date, so we can tell you when REP launches. We also remember the language you pick on the website in a cookie.

What we don't collect

REP does not access your contacts or camera, does not use the advertising identifier, does not track you across other companies' apps or websites, and does not send push notifications today.

2. How we use information

  • To run the Services: sign you in, save and sync your training between iPhone and Apple Watch, and show your activity to the people you choose.
  • To plan routes, calculate statistics and personal records, and generate workouts, training blocks and coaching through REP Intelligence.
  • To process subscriptions and enforce free-tier limits.
  • To keep REP safe: detecting spam and abuse, handling reports, and enforcing our Terms of Service.
  • To understand and improve the Services through usage analytics, if you leave it on.
  • To communicate with you about the Services, such as launch announcements for waitlist sign-ups, or replies to messages you send us.
  • To comply with the law and protect the rights and safety of REP, our users and others.

We do not sell your personal information, share it for cross-context behavioral advertising, or use it to build advertising profiles. We do not use Apple Health data for advertising or data mining, and we never share it with third parties for those purposes.

3. What other people can see

  • No public feed. Every workout and post is either friends or private. Strength and manually logged workouts default to friends. GPS activities and anything imported from Apple Health or a file default to private. You can change this for each activity.
  • Friends can see the workouts and posts you share with them: name, description, exercises and sets, PRs, photos, place, effort and tag. They never see your private notes.
  • Shared maps. If you share a GPS activity with friends, they only see a cleaned-up copy of your route. We cut out your privacy zones (with an extra margin), always trim the first and last 200 meters, and remove timestamps. Your raw GPS track is never shared.
  • Sensor and health data (heart rate, power, cadence, energy) stays private unless you turn on sharing for each metric. If you turn on health sharing, friends can see your steps, sleep minutes and active calories from the last 7 days.
  • Moments are visible to friends and disappear after 24 hours. Only you can see who viewed or reacted to your Moments. Replies are visible only to you and the person who replied.
  • Your profile is discoverable. Other signed-in REP users can find you by name and see your basic profile so they can add you as a friend. This includes your name, username, photo, bio, whether you're working out right now, total workout and PR counts, friend count, how many weeks you've trained recently, your unit system, and whether you have REP Pro. People you block can't find you.

4. Service providers and other sharing

We share information only as described here:

  • Clerk (authentication): your sign-in identity, name and email.
  • Convex (database, file storage and servers, in the United States): the account, training, social and health information described above.
  • RevenueCat (subscriptions): your account identifier and purchase status.
  • AI model providers. REP Intelligence sends your request through OpenRouter to a language model (currently DeepSeek, with Google Gemini as a backup). The request includes your message and recent conversation, your training profile, and a summary of your last four weeks of training and your current plan. Health and sensor metrics are included only if you turn on "Use health data in REP Intelligence." Raw GPS data is never sent. We ask these providers not to retain or train on our requests.
  • openrouteservice (route planning, operated by HeiGIT in Germany): the start point, waypoints, distance and route preferences of routes you plan. No account information is sent. Map data © OpenStreetMap contributors.
  • Apple: Sign in with Apple, Apple Health, Apple Maps (map images, place search and city lookup) and in-app purchases, under Apple's own privacy policy.
  • PostHog (usage analytics), if you leave analytics on.
  • Website hosting: our hosting provider processes standard request data (such as IP address and browser type) to serve liftwithrep.com.
  • Instagram, only when you choose to share a Moment there. You hand the image to the Instagram app on your phone.
  • Legal and safety. We may disclose information if required by law, or to protect the rights, property or safety of REP, our users or others, including to investigate reports of harm.
  • Business transfers. If REP is involved in a merger, acquisition or sale of assets, your information may be transferred under this policy.

5. How long we keep information

  • Account, profile, training, route and sensor data: until you delete it or delete your account.
  • Moments: hidden after 24 hours. Their photos, views, reactions and replies are deleted about 48 hours later, unless you saved the Moment to your private archive or it is under review because it was reported.
  • Planned-route suggestions you don't save: 24 hours. Cached route-area data: 30 days.
  • AI drafts: 30 days. AI request metadata and audit logs: 90 days. Per-request AI usage records: about 13 months. Aggregated usage totals are kept for billing and cost accounting.
  • Reports you file or that are filed about you: kept as long as needed to keep REP safe.
  • Waitlist emails: until REP launches and we've told you, or until you ask us to remove yours.

6. Your choices and rights

  • Control visibility for each activity, set privacy zones, and choose whether to share health data and individual sensor metrics.
  • Export your data: Settings → Your Data gives you a JSON export of your profile, workouts, sensor summaries and related records.
  • Delete data: you can delete individual workouts, raw sensor recordings or imported workouts.
  • Delete your account: this happens immediately. It erases your profile, workouts, photos, Moments, routes, sensor and health data, friends and REP Intelligence data, and removes your sign-in record. It does not change anything stored in Apple Health. We keep only the records described in section 5 and a minimal log that the deletion happened.
  • Permissions: you can change location, Apple Health, Bluetooth and Photos access at any time in iOS Settings. Analytics can be turned off in REP's Settings.
  • Block and report other users from their profile or content.

Depending on where you live (for example California, the European Economic Area or the United Kingdom), you may have the right to access, correct, delete or port your personal information, to object to or restrict certain processing, and to appeal our decision on a request. You can use the in-app tools above or email support@liftwithrep.com. We will verify your request through your signed-in account and will not discriminate against you for using these rights.

7. Security

Data is encrypted in transit. Raw GPS tracks, sensor recordings and photos are kept in private storage and are shown only to people you've allowed, after an access check. Privacy-zone locations are encrypted. Sign-in tokens for direct Apple Watch uploads are stored only in hashed form. No system is perfectly secure, so please tell us right away at support@liftwithrep.com if you believe your account has been compromised.

8. Children

You must be at least 13 years old to use REP. If you are under 18, you need permission from a parent or guardian. REP asks for your age range when you set up your account and does not let anyone under 13 continue. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete the account and its information. Parents or guardians who believe their child is using REP can contact us at support@liftwithrep.com.

9. Where information is processed

REP is operated from the United States, and our main servers are in the United States. Route-planning requests are processed by openrouteservice in Germany. If you use REP from outside the United States, your information will be transferred to and processed in these countries.

10. Changes to this policy

We may update this policy as REP changes. We'll post the new version here with a new effective date, and if the changes are significant we'll let you know in the app before they take effect.

11. Contact

REP LLC, New York, USA. Email: support@liftwithrep.com. See also our Terms of Service.