This policy explains what data RepCup, the iPhone app, and this website handle, why, and what you can do about it. RepCup is iPhone only; there is no web version.
1. Who is responsible
The controller of your data is the developer of RepCup, established in Lithuania and shown as the seller on RepCup's App Store page. Write to [email protected] about anything in this policy.
2. What stays on your iPhone
These never leave your phone:
- The camera picture. RepCup reads it on the phone, frame by frame, to find your joints and count reps. It is not recorded, stored or sent anywhere.
- Your body's pose (the joint positions found in the picture) and the angles from your practice reps.
- Your achievements, your settings, and images of share cards until you choose to share them.
Your sets, history and streak are also kept on your phone. If you never sign in, they stay there only. When you sign in, your sets are copied to your account (section 3).
3. What we store when you sign in
You sign in with Apple only to create or join a league, or to appear on the weekly leaderboard. Then we store:
- Your account: the identifier Sign in with Apple gives us, and your display name. RepCup asks Apple for your name only, never your email, and turns it into a short name such as "Jamie R.", which you can change.
- Your avatar: the one you pick from RepCup's built-in set, or a photo you choose from your library (cropped square, up to 512 KB).
- Your sets: exercise, start and end time, your time zone and local hour, reps counted, longest run, refused reps and why (such as "hips"), duration, how the set ended, and our check that it was counted live.
- Leagues: the leagues you create (name, exercise, rules, stakes line) or join, your role, results of each round, and who you reported or blocked.
- The weekly leaderboard: your division and weekly totals on each board.
- Notifications: your three notification switches, your device's push token if you allow notifications, and the notifications we sent you.
- Your free week: the day you first opened RepCup, so the free week stays the same on another phone.
- Pro: whether you have Pro, and its purchase and renewal history (section 6).
- App events: a short record of actions such as creating or joining a league, sharing an invite, or answering the notification question, with the app version. We use them to see what works and to fix problems. They are linked to your account and never used for advertising.
- Sign-in details: our database provider keeps technical records of sign-ins, such as IP address and device, to keep accounts secure.
4. Who sees what
- People in your leagues see your display name, your avatar (your photo, if you chose one), and your numbers on that league's table, such as place, total reps, days active and best set. They never see your individual sets.
- Your weekly leaderboard group sees your display name, your avatar from the built-in set (never a photo) and your weekly totals.
- Anyone with a league's invite link sees the league's name, exercise, rules and stakes line, the creator's display name and avatar, the number of members and the leader's score, and up to five members' built-in avatars. No photos and no sets.
- Notifications to other members can include your display name, for example "Jamie R. just passed you".
- Share cards are made on your phone and go only where you send them. A round's result card shows the league's top places.
- We see reports you send and what they are about, to review them.
If you block someone, they disappear from your tables. A league's creator can hide a member's photo on that league, and a photo you report is hidden for you at once.
5. Why we use it
- To provide RepCup (the contract between us): your account, leagues, the leaderboard, notifications you switched on, and Pro.
- Legitimate interests: keeping scores fair (checking that sets were counted live), keeping accounts secure, handling reports and abuse, and improving the app from app events. The daily nudge, if you leave it on, picks its time from the hours you usually work out over the last 14 days.
- Your permission: the camera, notifications and photos each need your OK in iOS, and you can withdraw it in the iPhone's Settings at any time.
We don't sell your data, share it for advertising, or track you across other companies' apps and websites. RepCup has no ads and no third-party analytics.
6. Service providers
We use a few companies to run RepCup. They process data only on our instructions:
- Supabase: our database, sign-in and photo storage, in the EU (Ireland).
- Apple: Sign in with Apple, App Store purchases, and delivering notifications. Apple's own privacy policy applies to your Apple ID.
- Expo: passes notifications to Apple for delivery. It receives your push token and the notification's text.
- RevenueCat: keeps track of Pro subscriptions. It receives an app-specific user number and your App Store purchase records, not your name.
- Cloudflare: hosts this website.
- Apple iCloud Mail: holds the messages you send to [email protected].
Some of these companies are in the United States. Where your data leaves the European Economic Area, it is protected by the safeguards the GDPR requires, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
7. How long we keep it
- Your account data is kept until you delete your account.
- Notifications we sent are kept for 90 days, app events for 2 years.
- Reports are kept while the accounts involved exist.
When you delete your account, we delete your profile, photo, sets, memberships, results, reports, blocks, push tokens, notifications and app events, and end your Sign in with Apple link to RepCup. Leagues you created stay for their other members, without your name. Copies in our database provider's backups are gone within 30 days.
8. Your choices and rights
- See and take your data: Me → Settings → Export my data.
- Correct it: change your display name and avatar in the app.
- Delete it: Me → Settings → Delete my data. Data that is only on your phone goes when you delete the app.
- Notifications: switch each kind off on the Me tab, or all of them in the iPhone's Settings.
If you live in the EU, the UK or another place with similar laws, you also have the right to access, correct, delete or move your data, to restrict or object to how we use it, and to complain to the data protection authority where you live, or to Lithuania's State Data Protection Inspectorate (vdai.lrv.lt). For anything you can't do in the app, write to [email protected] and we'll answer within 30 days. If you live in California or another US state with a privacy law, you have similar rights; we don't sell or share personal information.
9. This website
repcup.com sets no cookies, runs no analytics and loads nothing from other companies; even its fonts are served from here. Cloudflare, which hosts it, sees visitors' IP addresses in order to deliver and protect the site.
An invite page (repcup.com/j/…) asks our database for that league's preview (section 4). When you tap "Get RepCup", it copies the invite link to your clipboard, so the app can offer to paste it after you install it. Invite pages are kept out of search engines.
10. Children
Counting without an account has no age limit: nothing about you leaves the phone. Signing in is for people aged 13 or over, or older where the law of your country requires it. If you think a child under that age has signed in, write to us and we'll delete the account.
11. Security
Data travels encrypted. On your phone, your sign-in is stored encrypted, with its key in the iPhone's Keychain. On our side, access rules let each person reach only their own data and what their leagues share, and photos are given out only through links that expire within an hour.
12. Changes
If we change this policy in a way that matters, we'll tell you in the app before the change applies. The date at the top always shows the current version.
13. Contact
[email protected]. The rules of the app are in the terms of use.