Privacy Policy

Effective: October 1, 2026 · Workout X-Ray LLC

In short

Most of your information stays on your phone.
We send your workout to our own server to score it and build your plan. We don't keep it there, beyond anonymous counts of which exercises people paste.
If you upload a photo, or if our own reader can't make sense of your workout, Anthropic reads the text for us. It doesn't train AI on it.
Backing up is optional. If you do, we store your plan so you can get it back with your email.
If you buy a plan, Paddle takes the payment. We never see your card details.
Detailed measurement is your choice. If you tick the optional box, we see which screens you visit and a recording of what the app draws on your screen — never what you type, which is masked before it leaves your phone. Separately, we keep anonymous daily counts: how many people reach each screen, which link or website brought them here (the site's name only), the main choices they make (like goal shape, training days, equipment and plan), how many workouts are finished in each week of a plan, and the reason chosen if someone tells us why they didn't subscribe. Each is just a number per day, with no ID, no address and nothing stored on your phone, so none of it can be traced back to you. Visits to our website are counted the same way. We count before you're asked, and afterward only if you tick the box; if your browser sends a Global Privacy Control signal, we don't count you at all. Crash reports are always on, and carry no typed text either.
No ads, no tracking pixels, and we never sell your data.

1. Who we are

Workout X-Ray LLC, a Florida company, runs the Workout X-Ray app. Contact us at [email protected].

2. What we collect, and where it goes

Information	Where it's kept	Who else handles it
Your answers: first name, sex, year of birth, height, weight, goals, equipment and training days, and your answers about your motivation, mindset and experience, including anything you type in the "why now" box	On your phone. Sent to our server to build your scan and plan, then not kept there.	Our hosting and network providers deliver it.
The workout you paste or type	Same as above. If our own reader can't make sense of your workout, the text is sent to Anthropic to be read, and comes straight back.	Our hosting and network providers deliver it. Anthropic reads it only when our own reader fails. It doesn't use them to train models, and deletes them within 30 days, except where it must keep them longer to enforce its usage policies.
Photos of your workout notes	Sent through our server to be read. We don't store photos.	Anthropic reads the text. It doesn't use them to train models, and deletes them within 30 days, except where it must keep them longer to enforce its usage policies.
Your plan, logged sets and weights, journal notes and moods	On your phone	No one, unless you back up.
Your email address and plan backup (only if you choose "Back up my plan")	Stored on our backup database so you can restore your plan. The backup includes everything in the rows above.	Supabase (backup storage, United States) · Resend (sends your sign-in emails and, if you subscribe, the reminder before a yearly plan renews)
Payment and billing details (only if you buy a paid plan): card details, billing address, email and country	Held by Paddle, not by us. We never see or store your card details. Paddle tells us your email, which plan you bought and whether your subscription is active, so we can unlock your plan. While your subscription runs we keep your email and Paddle's subscription number, so we can send the reminder the law requires before a yearly plan renews and tell you before a price changes.	Paddle (our reseller and Merchant of Record) processes your payment and sales tax under its own privacy policy.
Your email address, if you choose "Continue with Google"	Google confirms your email address so we can sign you in. We don't receive your Google password or contacts.	Google knows you used it to sign in to Workout X-Ray, under Google's own privacy policy.
A record that you agreed	On your phone, and on our server: which versions of these documents you agreed to, when, that you confirmed you're 18+ and completed the pre-training check, and whether you ticked the optional usage-measurement box. It's linked to a random ID for your device, and to your email only if you back up.	Stored with our backup provider (Supabase).
How you use the app: which screens you see, actions like starting a scan, choosing a build or reaching the paywall, and a recording of what the app draws on your screen (only if you ticked the optional "help us improve" box)	Sent to PostHog, our analytics provider, so we can see where people get stuck. The recording is of the app's own screens, so your muscle map, your score and your plan can appear in it; every word you type is masked before it leaves your phone, and photos are blocked. It's linked to a random ID for your device, not your name. PostHog keeps recordings for 30 days. Don't tick the box and nothing is sent.	PostHog (United States). We don't send it the text of your workout, your answers, your notes or anything you type — typed text is masked in the recording. Like any service we send information to, PostHog sees your IP address.
Crash reports, if the app fails	Sent to Sentry, our error-tracking provider: the error, the screen it happened on, and your browser and device type. Our server sends Sentry its own errors the same way.	Sentry (United States). Configured to receive crash information only — no workouts, answers, notes, photos or typed text. Like any service we send information to, Sentry sees your IP address.
Basic technical information	Our server records which part of the app was requested, when, and whether it worked. It doesn't record what you typed. It also keeps the anonymous counts described above and an anonymous count of which exercises people paste, with nothing that identifies you.	Our hosting and network providers (such as Cloudflare) see your IP address to deliver the app and block attacks.

We don't ask which health condition applies to you in our pre-training check. We only record that you completed it.

We use no advertising trackers and no advertising pixels of any kind. If we add another service that receives your information, we'll update this policy before we switch it on.

3. How we use your information

To score your workout and build, show and adjust your plan.
To back up and restore your plan, if you choose to.
If you buy a plan: to give you access to what you paid for, to send the notices the law requires before it renews or its price changes, and to handle cancellations and refunds with Paddle.
To see how the app is used, including recordings of the app's screens, so we can find where it confuses people and improve it — only if you ticked the optional box.
To find out when the app crashes, so we can fix it.
To reply when you contact us.
To keep the Service secure and working.

We don't sell your information, use it for advertising, or share it with anyone except the service providers named here, who may only use it to provide their service to us.

4. Health information

Some of what you enter, such as your body measurements, training and journal notes, counts as "consumer health data" under laws in Washington, Nevada and some other states. Our separate Consumer Health Data Notice explains how we handle it, and we ask for your consent before building your scan.

5. How long we keep it

On your phone: until you clear your browser data or remove the app.
Plan backups: until you delete them, in Profile or by asking us.
Records that you agreed: 6 years after you last use the Service.
Photos: not kept by us. Anthropic deletes them within 30 days.
Purchase records (your plan, your subscription status and Paddle's customer and subscription numbers): while you're a customer, and for 7 years after your last payment, because tax and accounting rules require it.
Billing contact (your email and Paddle's subscription number): while your subscription runs, and for 30 days after it ends — even if you delete your account, because deleting your account doesn't cancel your subscription.
Proof that we sent a renewal reminder (the subscription, when it was sent, and a one-way fingerprint of the email address rather than the address itself): 7 years, with the purchase records.
Server records: 30 days, for security and fixing problems. The anonymous counts identify nobody and are kept.
Usage and crash information: PostHog keeps usage events for up to 12 months and screen recordings for 30 days; Sentry keeps crash reports for 90 days. Then they delete it.
Backup copies of our database: up to 90 days, so anything you delete is gone from them within 90 days.
If you delete your account: your backup, your account and your sign-in codes are erased. We keep the record of your marketing email choice, so it can be shown and honored; the record that you agreed to these documents, no longer linked to your email; if your subscription is still running, your billing contact until 30 days after it ends; and the purchase records the tax rules above require.

6. Your choices and rights

You don't have to back up. Without a backup, nothing about your plan leaves your phone except when it's being scored or built.
You can clear the app's data from your phone at any time.
Usage measurement, including screen recordings, is optional. You choose on the consent screen, and you can change your mind by emailing us.
In Profile you can export your data as a file and delete your account, which erases your backup and your account from our server. Section 5 lists what we keep afterward, and why. Deleting your account doesn't cancel a subscription: cancel it under Manage subscription in Profile or from your Paddle receipt.
Email [email protected] to ask for a copy of what we hold, to correct it, or to delete it. We'll confirm the request comes from your email address, and respond within 30 days, or sooner where the law where you live requires.

If you're in the EU or UK, you also have rights under data protection law, including access, correction, deletion, restriction and objection, and you can complain to your local data protection authority. We process your information to provide the Service you asked for; on the basis of your explicit consent for health information and, if you ticked the box, for usage measurement; on the basis of our legitimate interest in keeping the Service secure and finding crashes; to meet legal obligations, such as keeping purchase records and sending the renewal reminders the law requires; and on our legitimate interest in keeping proof of what you agreed to, and a note not to email you after you opt out or delete your account.

7. Children

Workout X-Ray is only for people aged 18 and over. If we learn we hold information from someone under 18, we'll delete it.

8. Security

Information sent between your phone and our server is encrypted in transit. Backups are only available by signing in with your email (using a link or code we send you) or with your Google account. No system is perfectly secure, so please keep your email account secure.

9. Where your information is processed

We and our service providers process information in the United States. If you're in the EU or UK, that means your information is transferred to the United States; we use providers that offer the European Commission's standard contractual clauses for that transfer.

10. Changes

We'll post any changes here with a new effective date, and tell you in the app about important ones.