Privacy Policy
Last updated: 20 September 2026
- Who we are
- What data we collect
- Why we use it, and our legal basis
- Health-related data and explicit consent
- The leaderboard — what other members see
- Who we share data with
- International transfers
- How long we keep data
- Your rights
- Deleting your account
- Security
- Children
- Changes to this policy
- Contact us
1. Who we are
Muscle Club ("Muscle Club", "we", "us") is an iOS application that provides structured strength-training programs and workout tracking. This policy explains what we do with your personal data when you use the app or this website.
For the purposes of the EU General Data Protection Regulation (GDPR), the data controller is:
Muscle Club
Gísli Guðmundsson Bergs
gisli.g.bergs@gmail.com
2. What data we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Name, email address, account identifier, sign-in provider (Apple or Google) | You, via Sign in with Apple or Google |
| Fitness profile | Biological sex, height, weight and goal weight, fitness goal, training history and routine, days per week you want to train, preferred workout length, the equipment and gym you have access to, work activity level | You, during onboarding |
| Health-related answers | Injuries and health conditions you tell us about, food allergies and intolerances, supplement use, sleep duration and sleep goals, diet quality | You, during onboarding |
| Workout data | The workouts you complete — exercises, sets, reps and weights, workout duration, training volume, estimated calories, your streak and program progress | You, in the app |
| Subscription data | Whether you hold an active subscription, and which plan | Apple StoreKit |
| Technical data | App version, device type, crash and error diagnostics | Your device / Apple |
We do not collect your precise location, your contacts, your photos, or your payment card details. Payments are handled entirely by Apple — we never see your card number. The app contains no advertising or third-party analytics SDKs, and it does not read from or write to Apple Health.
3. Why we use it, and our legal basis
- To build and adjust your training program from your onboarding answers. Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)); for the health-related answers, your explicit consent (Art. 9(2)(a)).
- To create and run your account, keep you signed in, and sync your workout history across sessions. Legal basis: performance of our contract with you (Art. 6(1)(b)).
- To track your workouts, streaks and milestones so you can see your history and progress. Legal basis: performance of our contract with you (Art. 6(1)(b)).
- To run the leaderboard, which shows your display name, workout count and streak to other members. Legal basis: our legitimate interest in providing the app's community features (Art. 6(1)(f)) — see section 5.
- To verify your subscription and unlock paid features. Legal basis: performance of our contract with you (Art. 6(1)(b)).
- To fix bugs, prevent abuse, and keep the app working. Legal basis: our legitimate interests in running a secure and reliable service (Art. 6(1)(f)).
- To respond to your support requests. Legal basis: our legitimate interests, or performance of our contract with you.
We do not use your data for advertising, we do not sell it, and we do not make automated decisions about you that produce legal effects.
4. Health-related data and explicit consent
Some of what you can tell us during onboarding — injuries, health conditions, food allergies and intolerances, sleep — is health-related and may be a special category of personal data under GDPR Article 9. We process it only on the basis of the explicit consent you give when you answer those questions and create your account, and only to shape your program. Every one of those questions can be skipped.
You can withdraw that consent at any time by deleting your account (see section 10). Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.
5. The leaderboard — what other members see
Muscle Club has a leaderboard that ranks members by workouts logged and current streak. If you use the app with an account, other members can see:
- your display name — taken from your Apple or Google account name;
- your total workouts logged;
- your current streak.
Nothing else is visible to other users — not your email address, your fitness profile, your health-related answers, or the contents of your workouts. The avatars shown on the leaderboard are stock images bundled with the app, not photos of you. If you prefer a different display name than the one from your Apple or Google account, contact us and we will change it.
6. Who we share data with
We share data only with the service providers we need to run the app. Each acts as our processor under contract:
| Provider | What it does | What it sees |
|---|---|---|
| Supabase | Authentication, database hosting and video storage | Your account data, fitness profile, health-related answers, workout data |
| Apple | Sign in with Apple, App Store subscriptions, crash reporting | Your Apple account identifier, subscription status, diagnostics |
| Google sign-in (only if you choose it) | Your Google account identifier, name and email address |
We may also disclose data if we are legally required to do so, or where necessary to establish, exercise or defend legal claims. We do not sell your personal data, and we do not share it with advertisers or data brokers.
7. International transfers
Our providers may process data outside the European Economic Area, including in the United States. Where that happens, the transfer is covered by an adequacy decision or by the European Commission's Standard Contractual Clauses, together with additional safeguards where required.
8. How long we keep data
- Account, profile and workout data — for as long as your account is active.
- After you delete your account — erased from our live systems within 30 days, and from encrypted backups within 90 days.
- Support correspondence — up to 24 months.
- Records we must keep by law (e.g. transaction records) — for the period the law requires.
9. Your rights
If you are in the EEA or the UK, you have the right to:
- access the personal data we hold about you, and get a copy of it;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing;
- receive your data in a portable, machine-readable format;
- withdraw your consent at any time;
- lodge a complaint with your national data protection authority.
To exercise any of these, email gisli.g.bergs@gmail.com. We will respond within one month.
If you are in California, you have comparable rights under the CCPA/CPRA, including the right to know, delete, and correct — and the right not to be discriminated against for exercising them. We do not sell or share personal information as those terms are defined under the CCPA.
10. Deleting your account
You can delete your account and all associated data from inside the app — open Account from the Workout tab and choose Delete account. You can also email us and we will do it for you. Full instructions are on our account deletion page.
Deleting your Muscle Club account does not cancel your App Store subscription. Manage that in iOS Settings → your name → Subscriptions.
11. Security
Data is encrypted in transit using TLS and encrypted at rest by our database provider. Access to production data is restricted, and row-level security policies mean your profile and workout records are only readable by your own authenticated account. No system is perfectly secure, but we take these safeguards seriously and will notify you and the relevant authority of a breach where the law requires it.
12. Children
Muscle Club is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.
13. Changes to this policy
We may update this policy. If the change is significant, we will notify you in the app or by email before it takes effect. The "last updated" date at the top always reflects the current version.
14. Contact us
Questions, requests, or complaints: gisli.g.bergs@gmail.com