Privacy Policy

Introduction

Volumize ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our workout tracking application.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Password (encrypted)
• Profile information (name, profile picture - optional)

Workout Data

We store the workout data you create, including:

• Workout logs (exercises, sets, reps, weights)
• Workout templates
• Custom exercises
• Personal records
• Progress measurements (if you choose to track them)

Usage Information

We automatically collect certain information about your device and how you interact with our app:

• Device type and operating system
• Browser type
• App usage patterns and features accessed
• Error logs and performance data

Product analytics are handled by PostHog on EU servers, and record a fixed list of actions — finishing a workout, starting a program, opening a notification — together with your account ID, your plan, and counts such as how many sets a session contained. We do not record sessions or screen activity, and analytics never receive your body measurements, progress photos, or the health inputs behind your readiness score.

Error reports are handled by Sentry and contain the technical details of a failure: what went wrong, and which page it happened on. Web addresses are stripped of everything after the path before they are sent, so access tokens and sign-in codes are removed rather than transmitted.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Sync your workout data across your devices
• Send you important service updates and notifications
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues

Data Storage and Security

Your data is stored securely using Supabase, which is built on PostgreSQL and hosted on enterprise-grade infrastructure. We implement industry-standard security measures including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest
• Secure password hashing
• Row-level security to ensure users can only access their own data

While we implement strong security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Offline Functionality

Volumize is built with offline-first architecture. When you use the app offline, your data is stored locally on your device using IndexedDB. This data automatically syncs with our servers when you reconnect to the internet.

Data Sharing and Disclosure

We do not sell your personal information to third parties.

We may share your information only in the following circumstances:

• Service Providers: We use Supabase for database hosting and authentication, PostHog (EU servers) for product analytics, and Sentry for error reporting. These providers have access to your data only to perform tasks on our behalf and are obligated not to disclose or use it for other purposes.
• Legal Requirements: We may disclose your information if required by law or in response to valid requests by public authorities.
• Business Transfers: If Volumize is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You can access your account information at any time through your account settings.
• Update: You can update your account information and preferences in the app.
• Delete: You can request deletion of your account and all associated data by contacting us.
• Export: You can export your workout data at any time.
• Object: You can switch off usage-data sharing under Settings → Privacy. It takes effect immediately, on every device you sign in on, and nothing else about the app changes.

Why We Are Allowed To Process This

Most of what we hold, we hold because you asked us to: your account, your workouts, your measurements. Processing those is necessary to provide the service you signed up for.

Usage data and error reports are different — you did not ask for those, we use them to keep the app working and decide what to build next. We rely on our legitimate interest in doing so, weighed against the fact that the data is thin, stays in the EU, is never used to advertise to you or sold to anyone, and never includes your measurements, photos or health inputs. Because that basis depends on the balance being reasonable, you can object at any time by switching off usage-data sharing in Settings.

Cookies and Tracking

We use essential cookies and local storage to maintain your session and provide core functionality. We do not use advertising cookies or third-party tracking cookies.

Our analytics store nothing on your device at all — no cookie, no identifier, nothing that survives closing the tab. That is why Volumize has no cookie banner to dismiss.

Children's Privacy

Volumize is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us at: privacy@volumize.app