Reverfit Workout app privacy policy

This is a translation for convenience; the Spanish version is the legally binding one.

Last updated: September 17, 2026.

This policy covers the Reverfit Workout mobile app (Reverfit Entreno; on the stores, “Reverfit: Gym Workout Log”), the one you download on your own from Google Play or the App Store.

The most important thing

Without an account, your workouts stay on your phone. You can use the whole app without signing up and without giving us any data. Only if you turn it on is anything stored outside your phone: if you create an account to have your workouts in the cloud, if you join the general ranking with an alias, if you sign up for the personal trainer or if you go Pro. All of that is off by default and you can remove it whenever you want.

1. Who the controller is

• Controller: Francisco José Fraile León
• Tax ID (NIF): 27313175P
• Postal address: Apartado de Correos 1313, 41012 Sevilla (Spain)
• Email: info@reverfit.com

2. What is stored only on your phone

If you don’t create an account or join the ranking, all of this stays on your phone:

• Your training plan and the plans you save: sessions, exercises, planned sets and reps.
• What you actually do: the weight of each set, the real reps and how it went.
• Your history by day: which session you did, how many sets, how long it lasted and the estimated calories.
• Your weight, your age or date of birth and your sex, if you enter them, to estimate calories.
• If you connect a heart rate strap: your heart rate during the session and its summary (average, maximum and time in zone).
• Your notes and your settings (color theme, size of the drawings, default rest).

3. If you create an account (optional)

It’s so you don’t lose your workouts if you change phones, and to have them on several. If you create one, we keep:

• Your email address and your password (encrypted: we can’t see it).
• A copy of your workouts: the plan, the sets you do, the days trained (with the heart rate summary, if you use a strap) and the saved plans.
• If you tick the news and offers checkbox, which is off by default, that choice and the date. You can untick it whenever you want from Your account.

What for: to give you the service you ask for, saving and syncing your workouts (legal basis: performance of the service you request, art. 6.1.b GDPR). Heart rate and weight are health-related data: they only leave your phone if you decide to create the account, and they are processed with your explicit consent (art. 9.2.a), which you give by ticking the checkbox that asks for it when you create the account (without ticking it, the account is not created) and can withdraw by deleting the account. News emails, only if you tick the checkbox (art. 6.1.a). When you create the account we send you a welcome email.

4. If you join the general ranking (optional)

The ranking compares those who want to take part, without an account and with the alias you choose. If you join, the following is sent:

• Your alias and your sex (to separate the leaderboards).
• A random identifier the app creates on your phone, to know the row is yours. It is not your phone number and is not linked to your name.
• Your weekly and monthly totals: days trained, kilos moved and sets.
• Your relative strength: your best estimated max divided by your body weight.

Your weights per exercise, your name and your email are never sent. Other participants see your alias and your totals. Legal basis: your consent, which you give when you join. When you tap Leave the ranking, your row on the server is deleted.

4a. If you sign up for the personal trainer (optional)

It’s a service with a person from our team who builds your plan and talks to you. It requires your account, and to provide it we keep:

• Your name and your answers to the questionnaire: your goal, your experience, your days and your equipment, and any injuries or aches you tell them about.
• The chat messages with your trainer.
• The photos and videos you send them, in private storage: only you and your trainer see them.
• Your workouts, so they can follow how you’re doing.

If you send them a video of yourself doing an exercise so they can correct you, that video is also passed to Google’s (Gemini) artificial intelligence, which suggests a technique correction that your trainer then reviews. Google receives it without your name or your email, does not use it to train its models, and the transfer relies on the standard contractual clauses. What it returns is an automatic estimate, not your trainer’s judgment.

Legal basis: performance of the service you sign up for (art. 6.1.b) and, for injuries and other health data, your explicit consent (art. 9.2.a). They are kept for as long as you have the service or the account; when you delete the account they are deleted with it.

4b. If you go Pro

You pay through Apple (App Store) or Google Play: your card details are held by the store and we never see them. To know whether you have Pro active we use RevenueCat, which receives the purchase from the store (which plan, when it starts, renews or is canceled) together with your Reverfit identifier (your account’s or, without an account, a random one). Neither your name nor your email. The subscription is canceled from your Apple or Google account settings; deleting your Reverfit account does not cancel it. Legal basis: performance of the contract (art. 6.1.b).

5. What the app always sends, with no data about you

• The exercise drawings are requested by their file name, with no data about you.
• A once-a-day signal that the app has been opened, to know how many people use it. It only carries the app’s name: no identifier, no email, nothing that could reveal who you are. We don’t store your IP address.

6. What we DON’T do

• There is no advertising and no advertising trackers.
• We don’t sell or pass on your data to anyone.
• Your location is not collected, nor your contacts or your calendar.
• It does not connect to Apple Health or Health Connect.
• The heart rate strap connects by Bluetooth directly to your phone; Android may ask for the location permission to search for Bluetooth devices, but the app does not read your location.

7. The camera and your photos

The app lets you create an image of your workout to share: you take a photo or choose one from your camera roll and the app puts your streak and the day’s kilos on top of it. That photo doesn’t leave your phone unless you share it yourself with your phone’s share button. The photos and videos you send to your personal trainer, if you have one, do leave it: they are covered in section 4a. Permissions are asked for when they are needed and you can say no.

8. Who it is shared with

With no one, except the companies strictly necessary for the account, the ranking, the personal trainer and Pro to work, which act as processors under contract:

• Supabase: the database and the account system. The data is stored on servers in the European Union (Frankfurt, Germany).
• Vercel: where our server runs, which receives the daily signal and the requests for the drawings.
• Resend (United States): sending the welcome email and the account emails. It receives your email address only to send them. The transfer relies on the European Commission’s standard contractual clauses.
• Google (Gemini) (United States): only if you send a video to your personal trainer, to suggest the correction. See section 4a.
• RevenueCat (United States): keeping track of Pro subscriptions. It receives the purchase and your identifier, never your card. Standard contractual clauses.

Apple and Google charge the subscription as controllers of their own processing, under their own privacy policies.

If a court or a public authority legally required us to hand over information, we would have to comply.

9. How long it is kept and how to delete it

• What is only on your phone: for as long as you have the app. To delete it, uninstall the app or use Clear data in your phone’s settings.
• The account and its cloud copy: for as long as you have the account. From the app: You → Your account → Delete my account and my data. Your account, your email and your cloud copy are deleted immediately; what you have on your phone stays on your phone. If you can’t get in, there’s another way on the account deletion page.
• The ranking: for as long as you take part. When you leave the ranking, your row is deleted.
• The personal trainer: the chat, photos, videos and questionnaire, for as long as you have the service or the account; when you delete the account they are deleted.

10. Your rights

You can ask us to access your data, rectify it, erase it, restrict or object to its processing and ask for portability. You can also withdraw your consent at any time, without affecting what was done before. Write to info@reverfit.com, from your account’s email if you have one. We reply within one month at most. If you think we aren’t doing it right, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

11. Minimum age

The app is not intended for people under 16. You must be at least 16 to create an account or join the ranking.

12. Security

Communications are encrypted (HTTPS), passwords are stored encrypted and each person can only read and change their own cloud copy.

13. Important notice

Reverfit Workout is not a medical device and does not replace the advice of a doctor or a coach. Calories and heart rate are approximate. Training with weights carries a risk of injury: if you have an injury, an illness or doubts about your health, consult a professional before you start.

14. Changes to this policy

If the app starts storing data different from what is described here, we will say so on this page before it happens and, where necessary, we will ask for your permission.