Privacy Policy

Your privacy is important to us. This policy explains how WOD Tracker collects, uses, and protects your personal information.

1. Data Collected

We collect the following information to ensure the proper functioning of the application:

User Profile: Name, email address, and profile picture.
Workouts (WODs): Session details, scores, dates, and notes.
Personal Records (RM): Weights and performances on various exercises.
Usage Data: Technical information on how you interact with the app.
Notifications: Your device's push token, whether you allowed notifications, your preferences (evening recap, reminders) and your device's time zone offset, so we write to you at a sensible hour.
Referrals: Your referral code, the link between you and the person who invited you (or whom you invited), how the code reached us (link, manual entry or Google Play install referrer, which only carries the code) and the reward status.

2. Use of Data

Your data is used exclusively to:

Provide workout tracking services.
Sync your data across all your devices.
Improve user experience and app features.
Manage your premium subscription (via RevenueCat).
Send you useful notifications: your trial guide, an evening recap at most once a day when something happened (reactions, new followers, your box's scores), a Sunday summary and a few reminders after several days without a session. The recap and reminders can be turned off in Settings > Preferences, and all notifications in your phone settings.
Run the referral program: link your account to the person who invited you and show the store’s free-month introductory offer when eligible. The App Store or Google Play handles the payment method and subscription billing; RevenueCat synchronizes Pro access. Your referrer only sees your name when you join, nothing beyond what your profile already shows.
Occasionally email you news or offers about WOD Tracker (for example free Pro days in exchange for your feedback). You can object at any time, free of charge, in the app settings (Account & privacy) or with the unsubscribe link included in every email. Account emails (password reset…) are not affected.

3. Storage and Security

All your workout data is securely stored on Convex servers. Authentication is also handled by Convex, ensuring industry-standard security for your credentials.

4. Retention

Your data is kept while your account is active. A guest account that never signed up is deleted after 90 days of inactivity. A registered account inactive for 2 years is deleted, after a warning sent 30 days before. Deleting your account erases all your data, including your referral links and notification settings.

5. Your Rights

In accordance with GDPR, you have the following rights:

Right to access your data.
Right to rectification.
Right to erasure (see our account deletion page).
Right to data portability.
Right to object, including to receiving promotional emails.

6. Third-Party Services

We use the following services to operate WOD Tracker:

Convex: Authentication, database and storage.
Vercel: Website hosting.
RevenueCat: In-app subscription management.
PostHog: Usage analytics and session recordings with personal data masked (you can turn recordings off in the app settings).
Google (Gemini): The AI features (whiteboard scan, workout generator), with only the photo or text you submit.
Expo: Push notifications to your device.
Resend: Emails you send us (support, feedback) and the ones we send you (password reset code, offers about the app).
Strava: Activity import, only if you connect your account (see below).
Garmin: The WOD Tracker watch app, only if you install it (see below). Your watch data goes from the watch to your phone, then to Convex.

7. Strava

If you connect your Strava account, WOD Tracker imports your activities (runs, rides, swims…) into your training journal. This connection is optional, free, and can be removed at any time.

What we keep: for each activity, its sport, date, time zone, durations, distance and elevation gain, for your journal, weekly totals and records.
What we only cache: the other details (name, heart rate, power, calories, device, laps, splits, route, description) are read from Strava when you open an activity and deleted after 7 days at most.
Private: your Strava data is visible to you only. It never appears on your public profile, in your friends' feeds, in leaderboards or in any count shown to other users.
Never used for AI or shared: your Strava data is never sent to an AI service, never used to train a model, never sent to our analytics, and never shared with third parties. It is hosted by Convex, and the notification of a new import goes through Expo to your own device.
Deletion: disconnecting Strava in the app, revoking WOD Tracker from your Strava settings, or deleting your account deletes your Strava tokens and every imported activity. If Strava refuses our access and you do not reconnect, everything is deleted after 14 days.

WOD Tracker is not affiliated with or endorsed by Strava.

8. Garmin Watch

If you use the WOD Tracker app on a Garmin watch, the watch times your WOD and sends the session to your phone, which saves it with your result. Using the watch is optional.

What we keep with your result: the session timing (start, duration, rounds and the splits of each movement), your heart rate (average, minimum, maximum, a heart-rate curve, the time spent in each zone computed from the zones of your Garmin profile, and your recovery 30 and 60 seconds after the end), the distance when the WOD includes running, and calories. Your GPS route is never sent: the watch only uses its position to measure distance.
Health data: heart rate is health data. It is only collected when you choose to send a session from your watch, and it is used only to show you your session and your progress.
Who sees it: your heart rate, distance and calories are visible to you only. Athletes who can see your results only see the time spent on each movement.
Per-movement breakdown: if you turn it on, the watch records your movement (accelerometer) during the WOD and your phone works out the time spent on each movement. This recording stays on your phone and is erased once the breakdown is done.
Detection research (optional, with your explicit consent): if you agree to help improve the detection, the accelerometer recording (10 readings per second) and your heart rate during the WOD are sent to WOD Tracker, only to make movement detection more accurate. 20 recordings at most, never public, never sent to an AI service or to our analytics, deleted automatically after 6 months. Withdrawing your consent in the app settings (Connected watch) deletes every recording already sent.
Never used for AI or shared: your watch data is never sent to an AI service, never sent to our analytics and never shared with third parties. It is hosted by Convex.
Deletion: deleting a result deletes its watch data; deleting your account deletes all of it, research recordings included.

WOD Tracker is not affiliated with or endorsed by Garmin.