Privacy Policy

Last Updated: October 2026

Introduction

This Privacy Policy describes how Atomic Sets ("we," "us," or "our") collects, uses, and protects your personal information when you use our mobile application (the "App"). We are committed to protecting your privacy and ensuring the security of your personal data.

Data Controller

Atomic Sets operates from the European Union and complies with the General Data Protection Regulation (GDPR). For authentication services, we use Supabase, with data stored in AWS EU-West (Ireland), ensuring your data remains within the European Union.

Information We Collect

We take a privacy-first approach and collect only the minimum information necessary to provide our services.

Information You Provide

• Account Information: Your name, email address and password when you create an account. Your name is shown in the App; your email address and password are used to sign you in
• Premium Access Status: If premium features are enabled, we store your premium access status (processed and stored by third-party payment providers; we do NOT store payment card details)

Information We DO NOT Collect

We do NOT collect, store, or transmit:

• Workout Data: All workout logs, exercise history, sets, reps, weights, body weight entries, exercise notes, and exercise photos are stored ONLY on your device
• Personal Health Information: We do not collect any health or fitness data
• Device Information: We do not collect device identifiers, operating system details, or device-specific information
• Usage Analytics: We do not track your app usage patterns or behavior
• Location Data: We do not collect or access your location information

How We Use Your Information

We use the limited information we collect only for:

• Account Authentication: To verify your identity and allow you to log in
• Premium Access Management: If premium features are enabled, to manage your premium access status
• Essential Communications: To send critical account-related notifications (e.g., password reset)
• Legal Compliance: To comply with applicable laws and regulations

We do NOT use your information for:

• Marketing or promotional purposes
• Analytics or behavior tracking
• Profiling or personalized advertising
• Sharing with third parties (except as legally required)

Data Storage and Security

Local Storage Only

Your Workout Data Stays on Your Device:

• All workout data (exercises, sets, reps, weights, notes, photos, templates, history) is stored ONLY on your device, protected by your device's built-in storage encryption (for example, iOS Data Protection when your device has a passcode)
• We do NOT sync, backup, or transmit your workout data to any cloud servers
• You maintain complete control over your workout data at all times
• Your workout data never leaves your device unless you export it yourself

Backup Your Data

Since your workout data is stored locally:

• iOS Users: Use iCloud Backup to automatically back up your app data (managed by Apple, subject to Apple's privacy policy)
• Android Users: Use Google Backup or your device's backup solution (managed by Google, subject to Google's privacy policy)
• Manual Export: You can export a backup file from within the App. It contains your workouts, plans, exercises and exercise notes, body weight entries, and your app settings (such as your program, weekly targets, units, how each exercise is measured and the muscles you set for exercises), but not your exercise photos. The file is created on your device and goes only where you choose to save or send it

What We Store (Minimal Cloud Data)

We only store on our secure servers:

• Name, email address and hashed password: For your account and for signing in. Your account record also holds the App's default settings from when it was created; settings you change in the App stay on your device
• Premium access status: If premium features are enabled, to verify access (no payment details)

Security Measures

• Encrypted data transmission (TLS/SSL): All communication between the app and our servers is encrypted
• Secure password hashing: We use industry-standard bcrypt or similar algorithms
• No data collection: Since we don't collect workout data, it can't be compromised on our servers
• Regular security updates: We maintain and update our authentication systems

Camera and Photos

You can add photos to an exercise, for example of how a machine is set up.

• The App asks for access to your camera or your photo library only when you choose to add a photo, and uses it only to take or pick that photo
• Photos are copied into the App's own storage on your device. They are never uploaded to us or to anyone else
• Photos are not included in the App's data export
• You can remove a photo in the App at any time, and uninstalling the App deletes them
• You can change or revoke camera and photo access in your device settings at any time. The rest of the App works without it

Importing From Other Apps

You can import a file you exported from another workout app.

• The file is read on your device, and its contents are added to your workout history on your device
• Nothing from the file is sent to us or to anyone else
• The App does not connect to the other app or to your account with it

Apple Health

If you switch on Apple Health in the App's settings and allow it when iOS asks:

• Each workout you finish is added to Apple Health as strength training
• Your body weight readings in Apple Health are read into the App, on days you have not recorded a weight yourself, so bodyweight exercises count the weight you actually move
• This happens on your device, between the App and Apple Health. Your health data is never sent to us or to anyone else, and is never used for advertising or marketing
• A workout the App added is removed from Apple Health if you delete it in the App
• You can switch this off in the App at any time, and choose what the App may read and write in the Health app

Notifications, Lock Screen and Widget

Rest timer alerts are scheduled on your device as local notifications. They involve no server, and we do not use push notifications.

While you rest, the countdown and the name of your next exercise can also appear on your Lock Screen and in the Dynamic Island. If you add the App's widget to your Home Screen, it shows this week's sessions, hard sets and muscle groups. Both are drawn on your device from the App's own data, which is shared only with the widget on the same device, and nothing is sent anywhere.

Data Sharing and Disclosure

We do NOT sell, rent, or trade your personal information.

Since we collect minimal data and your workout data stays on your device, there is very little to share. We may share the limited account data we collect only in these circumstances:

Service Providers

• Authentication Services: For secure login functionality
• Payment Processors: If premium features are enabled, payment processing is handled by Apple App Store or Google Play Store - they process all payment data
• Server Hosting: For storing account credentials

Note: If premium purchase features are enabled in the future, we may integrate additional third-party services for payment and subscription management. This privacy policy will be updated accordingly, and you will be notified of any changes.

All service providers are contractually obligated to protect your data and use it only for specified purposes.

Legal Requirements

We may disclose your account information when:

• Required by law, court order, or governmental regulation
• Necessary to protect our rights, property, or safety, or that of our users
• Needed to investigate fraud, security issues, or violations of our Terms of Service

Business Transfers

• In the event of a merger, acquisition, or sale of assets, your account data (name, email and premium access status) may be transferred
• You will be notified beforehand and given the option to delete your account

What We Never Share

We never share:

• Your workout data, exercise notes, or exercise photos (they are only on your device)
• Your personal health information
• Your usage patterns or analytics data

Your Rights and Choices

Your Workout Data (On Your Device)

Since all your workout data is stored locally on your device, you have complete control:

• View Your Data: Access all your workout data within the App at any time
• Update Information: Modify your exercises, workouts, notes, photos, and preferences freely
• Export Data: Export your workout data and app settings for backup or transfer purposes
• Delete Data: Remove specific workout entries, exercises, photos, or all data from your device
• Backup: Use iOS iCloud Backup or Android backup solutions to protect your data

Account Management

• View Account Info: Access your name, email and premium access status in the App
• Delete Account: Permanently delete your account through the App settings
• This removes your name, email and premium access data from our servers
• Your local workout data remains on your device until you manually delete it or uninstall the app
• Data Retention: Deleted account data is permanently removed from our servers within 30 days, except where legal retention is required (e.g., financial records for tax compliance)

Communications

• Essential Only: We only send critical account-related emails (password reset, account notifications)
• No Marketing: We do not send promotional or marketing communications
• Opt-Out: You can manage notification preferences in App settings

Third-Party Services

The App integrates with minimal third-party services:

• Authentication Services: For secure account management
• Payment Processing: If premium features are enabled, payment processing is handled via Apple App Store or Google Play Store (all payment data is handled by Apple/Google; we never see or store your payment card details)
• Device Backup Services: iOS iCloud Backup or Android backup solutions (optional; managed by Apple/Google)

We do NOT use:

• Analytics services
• Advertising networks
• Social media integrations
• Tracking or profiling services

Each third-party service has its own privacy policy. We encourage you to review:

• Apple Privacy Policy
• Google Privacy Policy

Children's Privacy

The App is not intended for users under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

International Data Transfers

Since your workout data is stored only on your device, it never crosses international borders through our services.

For the minimal account data we store (name, email and premium access status):

• Your data may be processed on servers in countries other than your residence
• We ensure adequate safeguards are in place, including standard contractual clauses approved by regulatory authorities
• We comply with GDPR (for EU users) and other applicable data protection laws

Regional Privacy Rights

For EU/EEA Users (GDPR)

• Right to access, rectify, or erase your personal data
• Right to data portability
• Right to restrict or object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

For California Users (CCPA)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising privacy rights

For Other Regions

• We respect and comply with applicable local data protection regulations

Data Retention

On Our Servers (Minimal)

• Active Accounts: Your name, email and premium access status are retained while your account is active
• Deleted Accounts: Account data is permanently deleted from our servers within 30 days
• Legal Obligations: Financial records related to premium purchases may be retained longer for tax compliance (typically 5-7 years depending on jurisdiction)
• Backups: Deleted account data is removed from backup systems within 90 days

On Your Device (Your Control)

• Workout Data: Remains on your device indefinitely until you delete it
• App Uninstall: Deleting the app removes all local workout data, notes, and photos from your device
• Device Backups: Your workout data may persist in iOS iCloud Backup or Android device backups according to your device settings

Cookies and Tracking

We do NOT use cookies or tracking technologies.

The App:

• Does NOT use cookies
• Does NOT use analytics or tracking services
• Does NOT collect usage statistics
• Does NOT track your behavior or activities

We only use:

• Local Storage: To store your workout data, preferences, and app settings on your device (this data never leaves your device)

Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be notified through:

• In-app notification
• Email to your registered address
• Updated "Last Updated" date at the top of this policy

Continued use of the App after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data:

Email: dev@atomicsets.app Response Time: We aim to respond within 30 days

Compliance and Certifications

We are committed to compliance with:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Personal Information Protection and Electronic Documents Act (PIPEDA)
• Other applicable data protection laws

Your Consent

By using the App, you consent to this Privacy Policy and our collection and use of information as described herein.

Note: This Privacy Policy is effective as of October 2026. We recommend periodic legal review to ensure compliance with evolving privacy laws in your target markets.