Privacy Policy
Last updated: June 11, 2026
This policy describes what the HeavyMuscle app, its Wear OS watch companion, and this website collect, how it's used, and what choices you have. It's written in plain language. If something is unclear, write to support@heavymuscle.app.
Data that stays on your device
Your profile (name, weight, height, age, gender — all optional), custom workout templates, training sessions, body measurements and app settings are stored locally on your device. You can use the app fully without creating an account.
When you sign in with Google or Apple (optional)
If you choose to sign in, the items above are uploaded to our servers and synced to your account, so you can restore them on another device. Only you can access them. If you send in-app feedback, your message is stored on our servers so we can read it and act on it. You can delete your account completely from the app (Profile › Delete account), which erases all your data.
Progress photos
Progress photos you take or import stay on your device. The app reads only the date from the file's metadata, to pre-fill when the photo was taken — never the location. If you are signed in, your photos are also uploaded to your account's private cloud storage so they sync across devices; only you can access them, and deleting a photo (or your account) also deletes the copy on our servers. Photos are never used for ads or shared with third parties, and the before/after images you export are shared only where you choose.
Wear OS watch companion
If you pair the optional Wear OS watch, your phone mirrors the active workout, your templates and a few profile settings to the watch, and the watch sends back commands such as logging a set. This data moves directly between your paired devices — the companion does not upload it to our servers.
Ads
The app shows ads on some browsing screens and occasionally a full-screen ad after you finish a workout or generate a coach workout. Ads never appear during an active workout or in the coach chat. To choose what to show, the ad provider may use your device's advertising identifier. You can reset or limit your advertising identifier in your device's privacy settings.
Subscriptions & billing
HeavyMuscle Pro is an optional paid subscription. Purchases and renewals are processed by the App Store or Google Play — we never receive or store your card or payment details. We use RevenueCat to manage your subscription status across your devices; it receives a store purchase identifier tied to your account, not your payment information. Monthly and annual plans renew automatically unless you cancel at least 24 hours before the end of the current period; the lifetime option is a one-time purchase. You can manage, restore or cancel a subscription anytime from your App Store or Google Play account. Pro unlocks ad-free use and the unlimited AI coach.
AI coach
When you use the coach, a summary of your context (flagged injuries, available equipment, level, goal, recent sessions and the post-workout feedback you choose to leave) is sent to our servers to generate the response. If you import a workout from a PDF or spreadsheet, the file's content is also sent to the AI service, only to convert it into a workout. We do not send your name, email or other direct identifiers.
Analytics on this website
This site uses privacy-friendly analytics to measure things like traffic origin, country, device type and which pages and links are clicked. No personal identifiers are collected and the visitor ID is anonymous — it only helps us understand how the site is performing. IP addresses are anonymized.
Analytics in the app
The app sends usage events (screens visited, actions such as 'start workout' and 'finish workout'). The userId is anonymous and cannot identify you personally; it only helps us understand performance and improve the app.
Permissions
The app asks for system permissions only when you enable the related feature, and you can revoke them any time in system settings: the camera and the system photo picker, used only when you add progress photos; Health Connect (Android) to save your workout sessions; and notifications, used for the daily workout reminders you schedule. HealthKit (iOS) is planned.
Your rights (GDPR & LGPD)
Under the EU GDPR and Brazil's LGPD you can ask to confirm, access, correct, export, delete or restrict the processing of your data, object to it, and withdraw consent at any time. Most of this is self-service: your data lives on your device, and signing out or deleting your account erases the copy on our servers. The legal basis is your consent — given when you sign in, enable a permission, or use the coach. To run cloud sync, ads and the coach we rely on a few service providers that may process data on servers outside your country, under appropriate safeguards; data on our servers is kept only while your account exists. To exercise any right, or to complain to your data protection authority (Brazil's ANPD or your EU supervisory authority), email support@heavymuscle.app.
Contact
support@heavymuscle.app