Privacy Policy
Effective October 7, 2026
Repling is a calisthenics app for iPhone and Apple Watch: you train, and your Repling creature grows. This policy explains what Repling collects, why, who helps us process it, how long we keep it, and how to delete it. Questions: support@repling.my.
1. Information we collect
Account information
- Guest accounts. When you first open Repling, the app creates a random identifier for this installation (not your Apple advertising ID) and our server creates an account for it with a generated user ID and username. No email or name is needed.
- Sign in with Apple. We receive Apple's identifier for your account and, if you choose to share them, your email address (which may be an Apple private relay address) and your name, which we use as your initial display name. Apple's sign-in token is verified with Apple.
- Email sign-in. We store your email address. We email you a 6-digit sign-in code; the code is stored only in hashed form and expires after 10 minutes. To prevent abuse we keep the times of recent code requests for each device for a few minutes.
- Profile. Your username, display name, chosen avatar, your time zone offset (so your day and streaks roll over at your local midnight), and your privacy settings.
- Sign-in sessions. A session record tied to your device identifier, which expires after 7 days without use. Signing out removes it.
Workout, activity, and health information
- Goals and plans. Your daily workout length, active days, difficulty, and daily steps goal.
- Workouts. Each day's generated workout, which exercises and sets you completed or swapped, durations, rep counts reported by you or your watch, and the experience points, streaks, and items earned.
- Daily steps. With your permission, the iPhone app reads your step count from Apple Health and sends us your daily step total, so we can credit your steps goal.
- Walks. For walks tracked on Apple Watch we receive start and end times, active duration, steps, distance (from the watch's pedometer), and, if available, average heart rate and active energy.
- Apple Health on your devices. The watch app reads heart rate and active energy during workouts to show your live effort, and saves completed workouts to Apple Health. Apart from the daily step total and per-walk summaries above, Health data stays on your devices. We never use Health data for advertising or sell it.
- Watch calibration. If you are signed in (not a guest), your Apple Watch arm position calibration is backed up to your account. Guest calibration stays on the device. You can clear it in Settings → Rep detection.
Apple Watch motion recordings (beta)
When you track a set or a walk with the watch app, Repling records the watch's motion sensors (accelerometer, rotation rate, and gravity, about 50 samples per second) for that set or walk. The recording, plus its labels (exercise, set number, the automatic rep count, and any correction you enter), is sent to your iPhone and uploaded to our server, linked to your user ID and username. We use these recordings only to build and test Repling's automatic rep counting. They contain motion data only: no audio, location, or heart rate.
Game and social (Crew) information
- Your Repling and game progress. Your creature's name, species, level, mood, and cosmetics; your item inventory; your Tower game save; and your house and its visitors.
- Crew. Friend requests, friendships, blocks, pokes, invite codes (which expire), shared goals with your contributions, and shared workouts with their streaks.
- What your Crew can see. Your username, display name, avatar, your Repling's species, stage, and level, and your house. Whether you completed today's workout is shown only while "Share workout completion" is on (Settings → Privacy).
- Notifications. Your in-app notification feed, which notifications you've read, and your notification preferences.
Push notifications
If you allow notifications, we store your device's Apple Push Notification service token along with your device identifier and platform, and use it only to send Repling notifications (such as friend requests, pokes, and shared-workout nudges). Signing out or deleting your account removes it.
Technical logs
Like most web services, our servers keep standard request logs (such as IP address, time, requested address, and app or browser type) and error logs. We use them only to keep the service secure and working, and keep them for a limited time.
What we don't collect
Repling does not access your location, contacts, photos, camera, or microphone. It contains no advertising, no third-party analytics or tracking SDKs, and does not use Apple's advertising identifier.
2. How we use information
- To run the app: sign you in, generate your workouts, award experience, items, and streaks, grow your Repling, and sync your progress across devices.
- To power Crew features you choose to use, and to send the notifications you allow.
- To develop and improve features, in particular automatic rep counting (motion recordings).
- To keep the service secure, prevent abuse, and troubleshoot problems.
- To answer you when you contact support.
We do not sell your information, share it for advertising, or use it to track you across other companies' apps and websites.
3. Service providers
We share information only with providers that help us run Repling, only for that purpose:
| Provider | What it does | Data involved |
|---|---|---|
| MongoDB Atlas | Database hosting | The account, activity, game, and Crew data described above |
| exe.dev | Server hosting for our API and website | All data sent to our server passes through and is processed on it, including motion recordings and logs |
| Resend | Delivers sign-in code emails | Your email address and the sign-in code |
| Apple | Sign in with Apple; push notification delivery | Sign-in token; push token and notification text |
We may also disclose information if required by law, or to protect the safety of our users or the service.
4. How long we keep it
- Account, activity, game, and Crew data: for as long as your account exists. It is deleted when you delete your account.
- Guest accounts that are no longer linked to any device (for example after the app is removed and the account was never signed in) are deleted automatically.
- Email sign-in codes expire after 10 minutes; sessions expire after 7 days without use; invite codes expire.
- Motion recordings: until you delete your account (see below) or ask us to delete them.
- Deleted data may remain in routine backups for a limited period before it is overwritten.
5. Deleting your account
In the app, open Settings → Account → Delete account and confirm. This works for guest and signed-in accounts and takes effect immediately: we delete your profile, sign-in identities, sessions, push tokens, goals, workouts, walks, steps, Repling, inventory, Tower save, calibration, motion recordings, notifications, invites, and friendships, end your shared workouts, and remove you from shared goals.
Your Apple Watch motion recordings are deleted at the same time. If you no longer have the app, email support@repling.my from your account email (or include your username) and we will delete your data within 30 days.
Data on your own devices is not on our servers: deleting the app removes Repling's local data, and workouts saved to Apple Health are managed in the Health app.
6. Your choices and rights
- Edit your username and avatar in Settings → Account → Edit profile (signed-in accounts).
- Clear your watch calibration in Settings → Rep detection.
- Control what your Crew sees in Settings → Privacy, and which notifications you get in Settings → Notifications or iOS Settings.
- Turn Apple Health access on or off at any time in the Health app or iOS Settings.
- Depending on where you live, you may have rights to access, correct, export, or delete your personal information, or to object to its processing. Email us and we will respond within 30 days.
7. Security
Data is encrypted in transit (HTTPS), access to our systems is restricted, and sign-in codes are stored only in hashed form. No system is perfectly secure, but we work to protect your information.
8. International transfers
Our servers and service providers may be located in the United States or other countries, which may have different data-protection laws than where you live.
9. Children
Repling is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.
10. Changes
If we change this policy we will update the date above, and for material changes we will let you know in the app.