Privacy Policy

Two separate halves

WODsoup does two jobs, and each keeps its data in a different place.

• Your own training, in your iCloud. Workouts, exercises, sets, weights and history are stored in a private CloudKit database scoped to the Apple ID on your device, the same system Notes and Reminders use. We never receive it.
• Your account, on our server. This exists only if you create one, to track your PRs or to join or host a gym. It is a separate, opt-in account. The details listed below, including the test results and personal bests you log in its PRs tab, are stored on servers we operate (Supabase, in the United States).

If you never create an account, nothing that identifies you is stored anywhere we can see. The usage counts described below, and any workout you choose to send by link, are the only things the app sends, and neither identifies you.

What your own training stores

• Your workouts and programs: exercises, sets, reps, weights, rest times, and notes you write.
• Your exercise catalog: the built-in library plus any custom exercises you add.
• Your training history: completed sets and logged weights.

None of this is sent to WODsoup, its developer, or any third party. Apple's privacy practices for iCloud govern it in transit and at rest.

What your account stores

It exists only if you make one, to track your PRs or to join or host a gym. It is separate from your Apple ID and from your training data.

• Who you are: first and last name, email address, phone number, and age. If you join a gym, its owner and coaches can see these; nobody else can.
• How you signed in: an email address and password, or Sign in with Apple. If you use Apple, we store a token so your account can be fully disconnected from Apple when you delete it.
• Your gym membership: which gym, whether you're a member, coach or owner, whether you've been approved, whether you chose to be on the gym's leaderboard, and, if you leave or are removed, the reason recorded at the time.
• Which kind of device you use: whether you use WODsoup through the iPhone app, or in a web browser on an iPhone, an Android phone or a computer. It is a broad category, not a device identifier: it can't single out your phone, or tell you apart from anyone else with the same kind. It lets your gym see who is on Android, where some features aren't available.
• Waivers you sign: the document, your typed name, your drawn signature, the date, and a PDF copy. If you're under 18 and your gym asks for it, also your parent or guardian's typed name, their relationship to you (parent or legal guardian), their phone number and email, and their drawn signature. Only your gym's owner can see their phone number and email. This is your gym's legal record and is described further below.
• Workouts your coach sends you: a copy is placed in your account until you add it to your own calendar.
• Results you log in the PRs tab: test results and personal bests such as sprint and split times, top speed, jumps, lift maxes and the names of any custom tests you add, each with its date, an optional note, and who logged it. Your gym's owner or a coach can log a result for you, for example on a testing day, and it's marked as theirs. Unlike your workouts, these are kept in your account rather than your iCloud, so they follow you to a new phone and, if you join a gym, your coach can see them.
• Training sessions and plans in the PRs tab: for each session you run, its name, when it started and ended, an optional note, and which of your results were logged in it; and any session plans you save, with their names and the tests in them. These are kept in your account so they follow you to a new phone. Only you can see them: your coach sees the results themselves, as above, but not your sessions, plans or session notes.
• Workouts you finish on the web: which workout it was, and when you finished it. Not the weights or reps you entered; those stay on your device. See "Using WODsoup in a web browser" below.
• Your hosting plan, if you buy one: when you host a gym through an in-app purchase, we store which plan it is, when it renews or runs out, and the transaction number Apple gives the purchase, so our server can confirm it with Apple and hear from Apple when it renews, lapses or is refunded. Apple takes the payment; we never see your card, your bank details or your Apple ID's password.
• Payment records, if your gym uses them: your gym's owner can mark, per month, whether you have paid, how much, or that you were given a free month. WODsoup does not process payments and never sees a card, bank account, or payment method. This is only a note your gym keeps about money it collected elsewhere.

Waivers

A signed waiver is a legal agreement between you and your gym, so it is treated differently from everything else here:

• Once signed, it cannot be edited or deleted by you, your gym or us.
• Your gym's owner can open and download the copies signed at their gym. Coaches cannot.
• It survives deleting your account. Your name and signature stay with the gym as their record of an agreement you made. Everything else about you is deleted.

Who can see what

• Your gym's owner sees your name, contact details, age, which kind of device you use, your signed waivers, any payment notes, and the results in your PRs tab (a coach's too, if you coach there). They can also add results for you, and correct or delete the ones they added, but never the ones you logged.
• Coaches at your gym see your name, contact details and which kind of device you use, so they can send you workouts, and the results in your PRs tab, so they can coach you. They can add results for you and correct or delete the ones they added, but never the ones you logged. They cannot see waivers or payment records. They lose access to your results as soon as you leave the gym, and only you can undo that, by rejoining with the gym's code.
• Other members of your gym see nothing about you unless you turn on the gym's leaderboard, either when you join or later from the Leaderboard. Then they see your first name, the first letter of your last name, and your best result on each test in your PRs tab, with its date. They never see your contact details, your other results or your notes. Turning it off or leaving the gym takes you off the board straight away.
• Only you can see which workouts you've finished on the web. Your gym's owner and coaches cannot.
• Other members see nothing about you.
• Nobody at another gym sees anything about you, ever.
• The developer can technically access the database that runs the service, as any operator can. It is not read, exported, or used for anything.

Notifications

If you allow them, WODsoup stores a notification token for your device so your gym can reach you. It is used only to send you announcements your gym posts and workouts your coach sends. Signing out deletes it. You are asked for permission only after you join a gym, never before. The web app doesn't send notifications.

Exercise videos

A gym owner or coach can attach a YouTube link to an exercise. When you tap Watch, the video plays inside WODsoup, but YouTube is still the one playing it. Your device connects to YouTube, and Google receives that request, including your IP address, just as it would if you opened the video in a browser. Google's handling of that is covered by their own privacy policy, not this one. WODsoup sends them nothing about you: not your name, not your email, not your gym. If you would rather not connect to YouTube at all, don't tap Watch. Nothing loads until you do.

Usage counts

The iPhone and iPad app tells us which features get used, so we know what to fix and what to build next. You can turn this off in Settings, under Share Usage Data.

• What's sent. The name of something you did, like opening the app, finishing a workout, logging a PR or opening the plate calculator, and a few short details about it, like how many exercises the workout had or which tool you opened. Each count also carries the time, the app version and a random number the app makes for itself the first time it runs.
• Your gym, if you're in one. If you're signed in and an approved member of a gym, the count says which gym, so we can see how much each gym uses WODsoup. It doesn't say which member you are.
• What's never sent. Your name, email address, account, Apple ID, location or advertising identifier, and none of the weights, reps, times or notes you log.
• Not tied to you. The random number isn't linked to your account or to anything else, and deleting the app makes a new one. Because the counts can't be traced back to you, we can't look up or delete one person's counts. Turning the setting off stops them, and throws away any that are still waiting on your phone to be sent.
• Where it goes. Our own server (Supabase, in the United States), the same place as account data. No analytics company receives it.

Using WODsoup in a web browser

Anyone without an iPhone, and anyone on a computer, can use their WODsoup account at wodsoup.netlify.app/app, which has the PRs tab and their gym if they're in one. It is the same account, stored in the same place, under the same rules as everything above. Your own training log is not part of it. That stays in the iPhone app and your iCloud.

• Signing in. With your email address and password. Sign in with Apple is only available in the iPhone app.
• What stays in your browser. Your sign-in, so you don't have to enter your password on every visit; whether you chose light or dark mode; the weights and reps you log during workouts; and a copy of the web app's own files, so it opens quickly. None of your gym's information (rosters, waivers, announcements or workouts) is kept for offline use.
• Doing a workout. The weights and reps you type while doing a workout are saved in your browser on that device, so they're still there when you come back to the workout, and you can change them after you finish. They are never sent to us or to your gym, they don't move to your other devices, and signing out erases them. When you finish, we record that you finished that workout, and when. Only you can see that record, and it can't be edited.
• PRs, sessions and plans. On the web these work the same as in the iPhone app: they're saved to your account on our server, not kept in your browser, so they're the same on every device you sign in on. Your browser only remembers display choices, such as metric or imperial units, the date range, the chart style and which tests you've pinned.
• Exercise demos. A demo link opens YouTube in a new tab. The web app doesn't load YouTube itself, so nothing reaches Google unless you open one.
• Hosting. This website and the web app are served by Netlify. Like any web host, Netlify receives the details a browser sends when it loads a page, such as your IP address and browser type, in order to deliver it. Your account is not stored with Netlify.
• No cookies or third parties. The website and web app don't set cookies, and load no third-party scripts, fonts, or trackers. The only other service they talk to is our account server.

What WODsoup does not do

• No analytics companies. The usage counts above go to our own server and nowhere else. The website and web app measure nothing.
• No advertising or ad networks. There are no ads, and nothing here to power them.
• No third-party SDKs for analytics, crash reporting, or marketing.
• No payment processing. No card details, bank details, or payment methods are collected or stored. Hosting and Lifting Tools purchases go through Apple. Whether you've bought the Lifting Tools is checked between your device and Apple, and we don't store it.
• No tracking across apps or websites, and no data shared with data brokers.
• No selling of data.

Shared workouts

Share, then Send Workout, makes a link to one of your workouts so someone else can add it to their WODsoup. Sharing a picture or video of a workout sends nothing to us; only the link does.

• What's sent. A copy of the workout's plan: its name, your notes on it, and each exercise with its sets, reps, weights, percentages, rest times, notes and any video link. The sets you logged, and what you lifted on them, stay on your phone.
• What's not. Your name, account, Apple ID or anything else about you. The copy is stored under a random code and isn't linked to you.
• Who can see it. Anyone who has the link. It works like a link to a shared photo, so send it only to people you're happy to show the workout to.
• How long it's kept. Until you ask us to remove it. Because the copy isn't linked to you, we can't find your links on our own: email the address at the bottom of this page with the link and we'll delete it.

Your control over your data

• Your training data. Deleting the app removes it from your device; the iCloud copy remains until you clear it from iCloud storage.
• Your details. Edit them any time from Your Account on the Gym tab, or from the Account page in the web app.
• Your PRs tab results. Correct or delete any of them, including ones your coach logged for you, from the PRs tab.
• Your sessions and plans. Rename or delete any of them from Sessions in the PRs tab. Deleting a session can keep its results or delete them with it.
• Leaving a gym. You can leave from the app. Your coach is told that you left, and the reason you pick.
• Deleting your account. In the app: Gym tab, then Your Account, then Delete Account. This deletes your details, your login, your gym membership, your PRs tab results, sessions and plans, and your notification token, and disconnects Sign in with Apple if you used it. Your own workouts are untouched. Signed waivers stay with your gym, as above.
• Deleting your account without an iPhone or iPad. The web app can't delete accounts yet. Email the address at the bottom of this page from the email address on your account, and your account will be deleted in the same way.
• Asking a question. Email the address at the bottom of this page.

Where the data lives, and for how long

Account data is stored with Supabase, on servers in the United States, which acts as our data processor. It is kept while your account exists. When you delete your account it is removed, except for signed waivers, which remain with your gym as their legal record.

Children's privacy

WODsoup is not directed at children under 13 and does not knowingly collect information from them. An account asks your age; if you are under 13, do not create one. If you believe a child has created an account, email the address below and it will be deleted.

Changes to this policy

If this policy changes, this page is updated first, with a new "last updated" date above. This version adds the gym leaderboard. The one before it added workouts shared by link, and before that came the usage counts and the Lifting Tools purchase. An earlier version added training sessions and session plans in the PRs tab, accounts made just to track PRs, and what we keep when you buy hosting for a gym, and one before that added results tracking in the PRs tab. The first version was written before WODsoup had any server at all, when the app collected nothing.

Contact