Privacy Policy

Last Updated: October 25, 2026

1. Scope

This policy explains how Reps collects, uses, stores, and shares information when you use the Reps app, website, Apple Watch app, widgets, and related services.

Reps combines information stored on your devices with optional services such as private iCloud sync, account sign-in, AI features, analytics, Buddies, and a Garmin connection. Those paths are described separately below so you can decide which features to use.

2. Information Reps handles

2.1 Account and profile information

If you create an account, Reps handles your email address, sign-in identifier, profile details, fitness goals, preferences, settings, subscription state, and service-usage records needed to operate the account and paid features.

2.2 Apple Health and fitness information

With your permission, Reps can read or write the Apple Health categories you approve. Depending on the features you enable, this can include workouts, heart rate, HRV, sleep, energy, steps, body measurements, nutrition, and related health or fitness data. You control these permissions in the Health app and can change them at any time.

2.3 Workout, nutrition, and journal information

Reps handles the information you enter or generate in the app, including exercises, sets, reps, weights, workout notes, training plans, meals, calories, nutrients, hydration, caffeine, favorites, goals, and coaching history.

2.4 Photos and camera information

If you choose meal-photo analysis or attach a photo to a meal, Reps handles the image and its derived nutrition information. Images can be stored on your device and, when you enable private iCloud meal sync, in your private iCloud database. How a meal photo can be analyzed is described in section 3.4.

2.5 Device, diagnostics, and usage information

Reps may collect app version, device and operating-system information, feature events, performance measurements, crash diagnostics, notification state, and limited service logs. We use this information to operate the app, find failures, measure product flows, prevent abuse, and improve reliability.

2.6 Location

Features that depend on local weather or outdoor activity can request location access. Reps uses the permission level you choose. You can change location access in iOS Settings.

3. Where information is stored and processed

3.1 Your device and Apple Health

Core app records are stored on your device. Apple Health data remains governed by the permissions and storage controls Apple provides. Apple explains those controls in its Health App & Privacy notice.

3.2 Optional private iCloud sync

Reps can use private iCloud storage to keep supported profile, settings, workout, meal, and photo records available across your Apple devices. Private sync is tied to your iCloud account. You can review meal-sync controls in Reps and iCloud controls in iOS Settings.

3.3 Reps account and service infrastructure

Reps uses Firebase and Google Cloud services for functions such as authentication, service delivery, analytics, diagnostics, fraud prevention, subscription support, account-linked app records, and Buddies. Stored records can include account identifiers, preferences, sync state, limited health-summary outputs, subscription or usage metadata, and content you deliberately share.

3.4 How REX's AI is processed

You choose how REX answers in Settings > How REX thinks. The default is Automatic, which works through these steps in order:

  1. On your iPhone. On devices that support Apple Intelligence, REX first answers with Apple's on-device model, so the request does not leave your device.
  2. Apple Private Cloud Compute. Where it is available, bigger requests go to Apple's Private Cloud Compute, which Apple designed to process a request without storing it or using it for training. See Apple's Private Cloud Compute overview.
  3. Google Cloud, only if you allow it. Google's AI is a backup and is used only after you turn on “Allow Google's AI for REX”. It is off until you turn it on. Without it, REX uses only Apple's AI, and a feature that Apple's AI cannot serve shows that it is unavailable instead of sending the request elsewhere.

To keep REX on Apple, choose Apple Intelligence in How REX thinks. REX chat, health reports and insights then run on your device or on Apple's Private Cloud Compute, and never on Google Cloud, even if Google's AI is allowed. Where your device supports it, Apple Private Cloud runs every answer on Apple's Private Cloud Compute. Cloud uses Google's AI for every answer once you allow it. Each REX answer shows which of these produced it.

Some features have their own switch in the same settings screen, such as meal photo and description analysis, gym machine photo matching, live workout tips, meal and recipe suggestions, and drink caffeine lookup. Each switch is off until you allow it, in every AI mode, including Apple Intelligence, and each one sends only the information it names to Google Cloud through Reps. You can turn any of them off at any time.

When a request goes to Google Cloud, Reps sends the information needed for that request to Reps cloud infrastructure and Google's Vertex AI. This can include health context, workout or meal history, text you enter, and a meal photo you choose to analyze. Under Google's terms and the configuration Reps uses, Google may keep request data for up to 24 hours in a temporary cache, and may log requests for abuse monitoring. Reps therefore does not promise zero retention for AI requests sent to Google. See Google Cloud's data-retention documentation.

3.5 Buddies

Buddies lets you compare progress privately with up to 3 people you invite. It is optional and is currently available in TestFlight test builds of Reps.

  • What is shared: nothing until you switch a metric on. You choose each metric separately: VO₂ max, resting heart rate, heart rate variability, sleep, steps, active energy, training load, workout streak, workout days this week, and readiness. Your buddies see each reading as a range, unless you both choose Exact numbers. You can also send a fixed nudge or cheer. Buddies never share messages, photos, or free text.
  • With whom: only people who accept a one-time invite link from you, or whose link you accept. An invite link works once and expires after 7 days. A safety code lets you and a buddy confirm, in person or on a call, that no one is in between.
  • How it is protected: each reading is encrypted on your iPhone for your buddy's device before it is sent, so Reps servers store it without being able to read the value. The servers do keep the facts needed to run Buddies: each device's public key, who is a buddy of whom, which metrics a share covers (not their values), and when a nudge or cheer was sent.
  • Retention: a shared reading expires 72 hours after your phone last sent it. Switching a metric off deletes it from your buddies right away. A nudge or cheer expires after 3 days.
  • Report and block: use Report buddy in a buddy's menu, or Report a problem in the Safety section, to email Reps Support. The report includes an account identifier for the person you report, never a health value. Blocking someone removes them from your buddies, stops them sending you another invite, and deletes the readings, nudges and cheers between you. They are not told. Removing a buddy does the same without blocking them.
  • Deleting your account: removes your Buddies key, your buddy list, your invites, and the shares, nudges and cheers you sent or received, and detaches you from each buddy.

Reps no longer has a public community feed. New posts cannot be created. You can still delete a post you made earlier, and deleting your account removes your posts.

3.6 Garmin

Connecting a Garmin account is optional, and nothing is shared until you choose to connect. You sign in on Garmin's own page and choose there which health and activity data Garmin may share with Reps, such as sleep, heart rate, HRV, Body Battery, stress, pulse ox, respiration, body composition, and activities.

  • Sign-in: your Garmin sign-in tokens are stored only on your iPhone. Reps never asks for or sees your Garmin password.
  • How your data reaches your iPhone: Garmin sends your data to a Reps server relay. The relay encrypts it right away so that only your iPhone can read it, keeps only that encrypted copy until your iPhone downloads it, then deletes it. An encrypted copy your iPhone has not downloaded within 72 hours expires and is deleted automatically. Reps never keeps or logs a readable copy of your Garmin data on its servers.
  • What the relay keeps to route deliveries: a scrambled (hashed) form of your Garmin user ID, linked to your Reps account and your iPhone's public encryption key. It holds no health values.
  • How it is used: only to show you your own Garmin numbers in Reps and to personalize your own readiness and energy insights. Garmin data is never sent to AI models, never sold, and never used for advertising.
  • Disconnecting: you can disconnect Garmin in Reps settings at any time. Reps then tells Garmin to stop sending data and revoke Reps' access, deletes your Garmin sign-in tokens from your iPhone, and deletes any encrypted copy still waiting on the relay. Deleting your Reps account does the same. You can also remove Reps in Garmin Connect; Garmin then stops sending data and revokes Reps' access, and the relay deletes any encrypted copy still waiting.

Garmin's own handling of your data is covered by Garmin's privacy policy.

4. How Reps uses information

  • Provide workout, recovery, nutrition, sync, coaching, and account features
  • Calculate and display health, readiness, training, and nutrition summaries
  • Process AI requests that you initiate
  • Save and synchronize records when you enable the relevant sync feature
  • Deliver the Buddies readings, nudges, and cheers you choose to share, and handle reports
  • Process purchases and confirm access to paid features
  • Measure feature use, diagnose crashes, improve performance, and prevent abuse
  • Respond to support, security, and account requests

4.1 Optional product and offer emails

Reps may send optional product, offer, and re-engagement emails when you have opted in or another lawful basis applies under applicable law. Reps does not treat an account, past installation, or Firebase record as marketing consent. When consent is required, Reps asks for it and records it before sending marketing emails.

Reps does not use Apple Health, workout, nutrition, meal, photo, or other health and fitness data to choose who receives marketing emails or to personalize marketing offers. You can withdraw consent at any time by using the unsubscribe link in a marketing email or by contacting Reps Support. Unsubscribing stops optional product, offer, and re-engagement emails; it does not stop necessary service messages about your account, purchases, security, or support requests.

5. Sharing and disclosure

Reps does not sell your personal information. Information can be disclosed:

  • To service providers: when needed to provide authentication, cloud processing, AI, analytics, diagnostics, messaging, storage, and other app functions
  • To Apple: through Apple Health, iCloud, App Store purchases, and other Apple services you choose to use
  • To your buddies: only the Buddies metrics you switch on, and the nudges and cheers you send
  • To connected services: when you authorize an integration such as sharing a workout to Strava
  • For legal or safety reasons: when required by law or reasonably necessary to protect users, Reps, or others
  • In a business transfer: subject to this policy and applicable law if Reps is reorganized, financed, acquired, or sold

6. Retention

Retention depends on the record and the feature that created it. On-device records remain until you remove them, delete app data, or use a relevant deletion control. Private iCloud records remain while sync is enabled and until they are removed through Reps or Apple's storage controls. Buddies readings expire as described in section 3.5, and encrypted Garmin deliveries as described in section 3.6. Account, service, analytics, diagnostic, and earlier community records are kept as needed to provide the feature, meet security or legal obligations, resolve disputes, and enforce agreements.

AI providers may retain request data under their applicable terms, configuration, and safety requirements. Deleting a Reps account does not automatically remove information held independently by Apple, a connected service, another user, or a provider where its own lawful retention obligations apply.

7. Your controls

  • Apple Health: review or revoke categories in the Health app
  • iCloud: manage Reps' iCloud access in iOS Settings and supported sync controls in Reps
  • Location, camera, photos, and notifications: manage permissions in iOS Settings
  • AI: choose how REX answers in Settings > How REX thinks, and turn Google's AI and each feature's switch on or off there
  • Buddies: switch each shared metric on or off, remove or block a buddy, and report a buddy or a problem
  • Garmin: disconnect Garmin in Reps settings or remove Reps in Garmin Connect, as described in section 3.6
  • Connected services: disconnect integrations in Reps or through the connected provider
  • Product and offer emails: use the unsubscribe link in an optional marketing email or contact support to withdraw consent
  • Export: use Profile > Privacy & Data > Export Data for the supported CSV export
  • Account deletion: use Profile > Account > Delete Account and follow the confirmation steps

If Reps reports that a deletion step could not finish, retry while signed in or contact support@reps.siddharthnatamai.com.

8. Security

Reps uses authentication, platform access controls, encrypted network connections, and provider security controls intended to protect information. No storage or transmission method is completely secure, so Reps cannot guarantee absolute security.

9. International processing

Reps and its service providers can process information in Canada, the United States, and other countries where they operate. Those countries may have different data-protection laws from the place where you live.

10. Children's privacy

Reps is not directed to children under 13 and does not knowingly collect personal information from a child under 13. Contact us if you believe a child has provided personal information.

11. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of certain personal information, or to object to or limit certain processing. Reps does not discriminate against people for exercising applicable privacy rights.

To make a privacy request, email support@reps.siddharthnatamai.com. Reps may need to verify your identity before completing a request.

12. Changes to this policy

Reps may update this policy as the product or legal requirements change. The date at the top shows the latest revision. Material changes will be communicated through an appropriate channel.

13. Contact

Email: support@reps.siddharthnatamai.com
Developer: Siddharth Natamai
Website: reps.siddharthnatamai.com

Questions about privacy?

Ask how a specific Reps feature handles your information.

Contact Support