Arnie App Privacy Policy

Data We Collect

Arnie is local-first and has no account. Everything you log stays on your device: there is no cloud sync and no backup server. The data we may process is:

• Workout logs (exercises, sets, reps, weight, RPE, notes you type) and body metrics you enter (weight, measurements) — stored on your device only. We never receive the content of a session.
• Usage analytics via PostHog (EU servers). These are pseudonymous, not anonymous: they carry a random identifier created on install, your app version, device model and OS, and your IP address reaches the server. They include per-session totals — duration, tonnage, number of sets and exercises, personal-record count — and the profile answers you give at onboarding: training goal, experience level and units.
• Crash reports: the error message, the stack trace, and the React component path. No training content.
• Subscription receipts when you purchase Arnie Pro (handled by RevenueCat / Apple / Google).
• If you allow notifications, a push token with your language and time zone, sent to our own server so reminders can be scheduled.
• Advertising identifier: the free tier shows ads through Google AdMob. On iOS we ask for App Tracking Transparency permission before any tracking identifier is used; in the EEA and the UK, Google's consent form decides what AdMob may do. You can reopen that form anytime from Settings → Privacy.

How We Use Your Data

• Show your workouts, stats, and progress inside the app.
• Improve the app (find which features help, which don't, fix crashes).
• Validate your subscription and unlock Pro features.
• Show ads in the free tier (via Google AdMob) — disabled with Arnie Pro.

We do not sell your training data — we never receive it. We do not have a social feed. Your sets are between you and the iron.

Data Sharing

We share data with the strict minimum of providers needed to run the app:

• PostHog Cloud EU — pseudonymous usage events, as described above. The content of a session is never sent; the per-session totals are.
• RevenueCat — subscription state (purchase tokens only).
• Google AdMob — ads served in the free tier. Subject to Google's privacy policy.
• Apple / Google — payment processing for subscriptions.
• trainrboost.com (our own server) — remote configuration of feature switches; the exercise illustrations the app displays, which means our server log records your IP address and which exercise images your device asked for; the push token described above if you allow notifications; and the gift code, if you redeem one. No workout you log is ever sent there.
• Expo (u.expo.dev) — over-the-air updates. The app checks for a new JavaScript bundle at launch, which tells Expo your platform, app version and IP.
• Unsplash — two decorative photographs (the welcome screen and the Pro screen) are loaded from images.unsplash.com, which sees your IP address.

Data Retention

Workout data lives on your device for as long as the app is installed. We hold no copy of it: uninstalling Arnie removes it entirely.

Other things do survive on a server, and this policy used to say the opposite: pseudonymous usage events are kept by PostHog for 12 months, then purged; your subscription state stays with RevenueCat for as long as the subscription exists; your reminder schedules are deleted from our server as soon as you turn the corresponding reminder off, but the push registration itself — the token, your language and your time zone — stays until you use Settings → Delete all my data, or until 180 days pass without the app being opened and without a reminder being delivered; and our web server keeps access logs, which record your IP address and the exercise illustrations your device requested.

Your Rights (GDPR, CCPA)

• Share your finished sessions as CSV anytime (Settings → Data → Export sessions). The export covers completed sessions and their sets.
• Delete everything from Settings → Data → Delete all my data: routines, history, personal records, body metrics and settings. Since there is no account and no server copy of your training, nothing survives it. You can also delete individual sessions and routines, and uninstalling erases everything the app stored.
• Object to analytics: turn off Share usage data in Settings → Privacy. The app then stops sending events, and keeps them off at every later launch.
• Reopen your advertising consent choices (EEA and UK) from Settings → Privacy.
• Ask what we hold about you by emailing privacy@trainrboost.com. Analytics events carry a random install identifier we cannot link back to a person: if you want them gone, tell us before you uninstall, or simply turn analytics off.

Children

Arnie is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

Contact

Questions about this policy or your data? Email us:

privacy@trainrboost.com