Privacy & data use

What this overview covers

Training Rhythm is an offline-first iPhone and iPad workout app with optional Sign in with Apple, cloud backup, Apple Health integration and private feedback. This page describes the currently implemented app behavior, including beta features. It is being refined for the public release; detailed retention and deletion procedures remain under review.

Reading these public pages does not sign you into Training Rhythm, request Apple Health access, or submit your workout records or feedback.

Information associated with the app

Workouts and preferences

Training Rhythm stores exercise plans, workout and cardio sessions, logged sets, training goals and priorities, exercise and equipment choices, and selected machine settings on your device. Some records can also be copied to your account-bound Supabase cloud backup when you sign in and synchronization succeeds. Not all preferences or stored items are necessarily included in that backup.

Account and authentication

If you choose Sign in with Apple, Apple and Supabase Authentication process the credentials needed to establish your account. That may include an account identifier, an email address provided by Apple, and a name if supplied during initial authorization. New installs use Sign in with Apple. Existing Guest libraries can remain available locally on permitted devices without linking Apple; their records are not automatically transferred to an account.

Apple Health

If you explicitly choose Health categories and grant permission in iOS, Training Rhythm may read selected Health data to show activity, measurements or recovery context. Exporting completed workouts to Apple Health is a separate opt-in. You can change Health permissions in iOS and the app's Apple Health settings. The app does not request Health permission just because you view a help page or Settings.

Email support

When you submit a support form, we process your chosen topic, message, optional title and required reply email. Signed-in app submissions have an account-bound receipt and may include one selected screenshot. The service re-encodes that screenshot to remove metadata before private storage and email attachment. Website submissions do not require an account, are text-only and are not associated with an Apple account by email matching.

Supabase stores intake and delivery state privately. Cloudflare verifies website submissions using Turnstile and sends messages only to the verified support inbox. iCloud Mail receives the message and selected attachment. Support replies manually by email, with no in-app replies, automatic acknowledgment or marketing subscription. Reading the support page may load Turnstile for abuse prevention; these pages have no advertising analytics.

Completed support email conversations and attachments are deleted 90 days after resolution through a manual mailbox procedure. Delivered email copies are separate from automatic app-account deletion; contact support for their removal. Public form message bodies are cleared from the server delivery queue seven days after confirmed handoff or explicit cancellation. Minimal deduplication records remain to prevent repeat sends. Uncertain delivery is held for review rather than treated as completed. Provider backup and operational-log retention is separate and remains part of launch review.

Features not exposed for initial public launch

Nutrition and location-based gym discovery functionality has been developed but is currently deferred from the public launch interface. Older beta users may have local or account-associated data from those features. Hiding a feature does not erase existing records.

Why data is used

Information is used to display and preserve your training history, personalize exercise planning based on the goals and choices you provide, support account-bound backup, perform Health features you enable, and review support messages you explicitly send.

Supabase provides the cloud authentication, backup and feedback infrastructure. Apple provides Sign in with Apple and the iOS Health permission framework. These pages have no advertising pixels or visitor analytics. The support form loads Cloudflare Turnstile and processes information you explicitly submit; hosting and verification providers also process connection metadata for delivery, security and operations.

Your controls

• Sign-in and backup: Check More → Settings & account → Account & backup. Signing out stops sync, but does not by itself erase workout history from this device or delete account-held data.
• Health permissions: Use More → Settings & account → Apple Health and iPhone privacy settings to inspect or change category permissions.
• Support replies: Use More → Help & feedback or the website form. Replies arrive at the email you provide; no in-app reply inbox is required.
• Display preferences: Low-pressure display choices can hide some summary numbers. Hiding them does not delete the underlying records.

Retention, deletion, and requests

What sign-out does

Signing out disconnects the Apple-linked account and stops cloud synchronization. It does not erase workouts, machine settings or earlier nutrition records saved on this device, and it does not delete the online account or confirmed cloud records. Hiding a metric or disabling a feature also does not remove saved records.

Account deletion is not yet available in this beta

The secure self-service process to delete a Training Rhythm account and its associated cloud data is still being implemented and tested. The app must not be considered public-release-ready until this works, including cleanup of private feedback screenshots and Sign in with Apple token revocation. Do not mistake signing out or deleting the app for account deletion.

Local records and Apple Health

Local workouts and preferences are distinct from account-bound cloud backup. Data already written to Apple Health is controlled separately through iOS and the Health app; deleting a Training Rhythm cloud account would not automatically erase Apple Health history. Avoid uninstalling to troubleshoot before confirming your backup, because local training history could be lost.

Retention and contact

Training Rhythm currently retains account-bound cloud records while the account exists, subject to provider operations, security logs and backup systems. A verified time limit for backup/log retention and a complete deletion-request procedure have not yet been published. No specific automatic deletion timeframe is promised.

When signed in, use More → Help & feedback to submit an account/privacy question. Feedback submission is not a substitute for in-app account deletion. The website support form is available without app sign-in when its delivery service is enabled. Real delivery, reply handling and verification must pass before launch; an unavailable form is an explicit release blocker.

This is a beta data-use overview, not the final launch policy. It will be updated before release when deletion, retention, independent contact and App Store disclosures have been verified. Last reviewed: November 1, 2026.