Privacy Policy

Last updated: March 30, 2026

1. Data We Collect

RepStack collects the following data:

  • Account: email address, display name
  • Profile: goals, equipment, height, weight (optional)
  • Training: sessions, exercises, sets, reps, weight, durations, difficulty ratings
  • Push notifications: Web Push subscription endpoint (if enabled)

2. How We Use Your Data

Your data is used exclusively to:

  • Provide the workout tracking service
  • Generate personalized AI recommendations (Premium)
  • Send push notifications (timers, ready sessions)
  • Improve the service (anonymous analytics via Plausible)

3. What We Don't Do

  • We never sell your data
  • We don't share your data with third parties (except hosting)
  • We don't use your training data for advertising
  • We don't profile you for commercial purposes

4. Hosting and Processors

Data is hosted on Amazon Web Services (AWS), Europe region (Ireland and Paris). Processors:

  • AWS (hosting, database, storage) — Ireland / Paris
  • Anthropic (Claude API, for Premium AI features) — training data is sent anonymized
  • Plausible Analytics (web analytics) — collects no personal data

5. Data Retention

Your data is retained as long as your account is active. Upon account deletion, all data is erased within 30 days. Anonymous analytics data (Plausible) is retained indefinitely.

6. Security

Data is encrypted in transit (HTTPS/TLS) and at rest (AWS encryption). Authentication uses time-limited JWT tokens. No passwords are stored. Production data access is protected by MFA.

7. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

  • Access: obtain a copy of your data
  • Rectification: correct your data
  • Erasure: delete your account and all your data
  • Portability: export your data in a readable format
  • Objection: object to the processing of your data

To exercise these rights: contact@repstack.io

8. Cookies

RepStack uses only technical cookies (JWT authentication, interface preferences). No advertising or third-party tracking cookies are set. Plausible Analytics works without cookies.

Contact

For any data-related questions: contact@repstack.io
RepStack, 15 rue de Rivoli, 75001 Paris, France