Privacy Policy

This Privacy Policy explains how Daily Reps — the Daily Reps iOS app, its Apple Watch companion app and widgets, and the Daily Reps website — collects, uses, stores, shares, and protects your information. Daily Reps is operated by Alpha Venture Technologies LLC (“we”, “us”), which is the data controller for the personal data described here. Daily Reps is offline-first: your data lives on your device and is synced to our cloud so you can use it across devices and keep it if you change phones.

1. Information we collect

• Account: your email address and password, or the identifier and email that Apple or Google provides if you sign in with them. Passwords are handled and hashed by our authentication provider — we never see or store your password in plain text. We also record when you accepted the Terms of Service and which version.
• Profile: your name, training goal, experience level, units, available equipment, session length, focus and avoided muscles, injuries you flag, target training days per week, accent and app preferences, optional self-reported gender, and bodyweight.
• Training data: the workouts you plan and the sets you log — exercises, weights, reps, RPE, warm-up flags, rest preferences, session notes, duration, and the bodyweight recorded with each session — plus the workouts, plans, and progression values the app generates for you.
• Apple Health and Apple Watch data (only with your permission — see section 4): workouts, active-energy calories, walking, running, and cycling distance, heart-rate samples, and your date of birth (used only to estimate heart-rate zones).
• Subscription and purchase data: your trial status and, if you subscribe, your plan, subscription status, renewal and expiration dates, and provider identifiers (an App Store transaction identifier from Apple, or a customer and subscription identifier from Stripe). We never receive your full card number.
• Referral data: if you use the referral program, your referral code, the codes you redeem, and the resulting reward records.
• Integration data: if you connect Strava, the access tokens needed to post on your behalf and a record of which workouts were posted.
• Device, diagnostic, and usage data: app version, operating-system version, sync timestamps, and error information generated when something goes wrong, which our providers record in server logs together with your IP address. We do not use third-party analytics or advertising SDKs in the app.
• Support communications: anything you send us at hello@alphaventuretechnologies.com, including your email address.
• On-device data: app preferences, your latest state, and cached data are stored locally so the app works offline.

2. How we use your information

• To provide the Service and sync your data securely across your devices.
• To generate your workouts and training plans and compute your stats, weight-progression suggestions, personal records, recovery estimates, heart-rate zones, and trends.
• To manage your free trial, subscription, entitlements, and referral rewards.
• To send you account emails such as sign-up confirmation, password reset, sign-in links, and verification codes. We do not send marketing email.
• To maintain security, prevent fraud and abuse, and enforce our Terms.
• To respond to your requests and support questions.
• To operate, debug, and improve the app using aggregate, de-identified metrics (see section 6).
• To comply with legal obligations and protect our rights.

3. Legal bases (EU/UK users)

Where the GDPR or UK GDPR applies, we process your data: to perform our contract with you (providing the Service, syncing, billing); on the basis of your consent for optional features such as Apple Health access and Strava posting, which you can withdraw at any time in Settings or in the Health app; for our legitimate interests in keeping the Service secure, preventing fraud and trial abuse, and improving it using aggregate data; and to comply with legal obligations. Health data is processed only with your explicit consent.

4. Apple Health & Apple Watch

If you connect Apple Health, Daily Reps — with your permission — writes your completed workouts to Apple Health (the Apple Watch app also saves the heart-rate samples and calories burned it records during a session) so they appear alongside your other activity, and reads your workouts and related activity (active-energy calories and walking, running, and cycling distance) to show them alongside your Daily Reps sessions, heart-rate samples to show live heart rate and zones during a workout and to include in Strava posts, and your date of birth, which is used only to estimate your maximum heart rate for zones and is not stored in your account.

Apple Health data stays on your device unless you direct otherwise. We do not store Apple Health data in your account database, we do not use it for advertising or marketing, we do not sell it, and we do not share it with third parties except as you direct: if you connect Strava, each posted workout includes its heart-rate samples and calories burned whenever the workout was recorded by Apple Watch running Daily Reps or by another heart-rate monitor. Those metrics are relayed through a Daily Reps server function directly to Strava for that activity and are not retained by us. Connecting Strava is your consent to this sharing. You can disconnect Apple Health or Strava at any time in Settings, and you can revoke Health access in the iOS Health app.

The Apple Watch app mirrors your current workout from your iPhone and sends the sets you log, and the heart-rate and energy summary it records, back to the phone. Live vitals shown on your wrist and phone are not uploaded to our servers.

5. Sign in with Face ID and on-device credentials

If you turn on Face ID or Touch ID sign-in, your sign-in credential is stored in your device’s secure keychain, protected by your biometrics and the Secure Enclave. It never leaves your device and we cannot read it. Turning the feature off or signing out removes it.

6. Analytics & tracking

We derive aggregate, server-side metrics from synced training data to understand how the app is used and to improve it. Any cross-user or cohort figure is K-anonymized — suppressed unless the group is large enough that no individual can be identified. We do not sell your data, do not use third-party advertising trackers, do not track you across other companies’ apps or websites, and do not show ads.

7. Where your data is stored & international transfers

Your cloud data is stored with our infrastructure provider, Supabase (a hosted Postgres platform), protected by row-level security so that only your account can read your data, and transmitted over encrypted connections (HTTPS). Our providers operate servers in the United States and may process data in other countries; if you use the Service from elsewhere, your data is transferred to and processed in those locations. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses provided by our processors.

8. Sharing

We share your information only with the service providers that operate the Service on our behalf, at your direction, or where required by law:

• Supabase — hosting, authentication, database, and server functions (stores your account and your synced training data).
• Apple — sign-in if you choose Sign in with Apple; App Store billing for subscriptions purchased in the app (Apple processes the payment and shares subscription status with us); and the HealthKit, Apple Watch, notification, and widget platform features on your device.
• Google — only when you choose to sign in with Google, to authenticate your account.
• Stripe — payment processing for website subscriptions (United States). Stripe collects and handles your payment details; we never receive or store your full card number.
• Resend — email delivery. Processes your email address to send account emails (confirmation, password reset, sign-in links, verification codes).
• Strava — only if you connect your Strava account. Daily Reps posts your completed workouts (workout name, summary, structured exercise sets, start time, and duration) to your Strava profile as activities, including heart-rate samples and calories burned when the workout was recorded by Apple Watch or another heart-rate monitor. We store the connection tokens needed to do this, but not those health metrics; disconnecting in Settings deletes the tokens, and you can also revoke access from your Strava account settings.
• Vercel — hosts the Daily Reps website (including these legal pages and referral links) and records standard web-server logs such as IP address and browser type.
• Legal and safety: we may disclose information if required by law, subpoena, or legal process, or to protect the rights, safety, or property of Daily Reps, our users, or others.
• Business transfers: if we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

We do not sell your personal information and do not share it with advertisers or data brokers.

9. Security

We protect your data with encryption in transit, row-level access controls in the database, hashed passwords, short-lived access tokens, and secrets kept out of the app. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; keep your credentials private and tell us at hello@alphaventuretechnologies.com if you suspect a problem.

10. Retention

We keep your data while your account is active. When you delete your account (Settings → Delete account), we remove your cloud data and your account, and any Strava tokens are deleted. Residual copies may remain in encrypted backups for a limited period before they are overwritten. Local on-device data is cleared when you sign out or reset the app. Support emails are kept as long as needed to resolve your request and for our records.

To prevent repeated abuse of the free trial and of the referral program, we retain a minimal record of which email addresses have already started a trial or redeemed a referral (a normalized form of the address) on the basis of our legitimate interest in preventing fraud. These records are kept after account deletion solely for that purpose and are not used to contact you or for any other use. We may also retain information where required by law, for example transaction records for tax and accounting purposes.

11. Your rights

• Access & portability: export your data anytime via Settings → Download my data.
• Correction: edit your profile and training data directly in the app.
• Deletion: delete your account and all associated cloud data via Settings → Delete account.
• Withdraw consent: disconnect Apple Health or Strava in Settings, or revoke Health access in the iOS Health app, at any time.
• EU/UK residents (GDPR): you also have the right to object to or restrict certain processing, to receive your data in a portable format, and to lodge a complaint with your local data protection supervisory authority.
• California residents (CCPA/CPRA): you have the right to know what personal information we collect, use, and disclose (described in this policy), to delete it, to correct it, and not to be discriminated against for exercising your rights. We do not sell personal information or share it for cross-context behavioral advertising, and we do not use or disclose sensitive personal information for purposes other than providing the Service. You may use an authorized agent; we will verify requests by confirming control of the account email.
• To exercise any right that is not available in the app, contact us at hello@alphaventuretechnologies.com. We respond within the time required by applicable law.

12. Children

Daily Reps is not directed to anyone under 18, and we do not knowingly collect personal data from them. If you believe a minor has created an account, contact us and we will delete it.

13. Changes

We may update this policy and will revise the “Last updated” date above. Material changes will be communicated in the app before they take effect.

14. Contact

Alpha Venture Technologies LLC operates Daily Reps and is responsible for your data. Privacy questions and requests: hello@alphaventuretechnologies.com.