Privacy policy

What we collect

• Account: your email address, a password (stored only as a secure hash by our database provider) and the display name you choose.
• Training settings: your level, the division you compete in (men's or women's weights), units, equipment, movements to avoid and, if you add it, your bodyweight.
• Training data: the results you log (scores, scaling choices, weights, effort ratings and any notes), your training sessions, lifts, the workouts you build and your weekly program.
• Subscription: if you buy Premium, which plan you have, which store it came from and when it renews or ends. Payment details stay with Apple or Google.
• Usage and crash data (can be turned off): which screens and features are used, and technical details when the app or site crashes, such as the device model, operating system and app version. These are linked to your account id only, never your email, name or notes.

We don't sell your data, show ads, or use your data to train AI models. Bodyweight and training data can say something about your health, so we use them only to provide the features you use.

What other athletes can see

When you log the daily workout, a benchmark or a lift, your display name and that result appear on leaderboards that other signed-in athletes can see. Your email, bodyweight, notes, custom workouts and program are never shown. Strength rankings show only your lift divided by your bodyweight.

Apple Health

On iPhone you can choose to save your training to Apple Health. It is off until you turn it on in the app's settings, and iOS asks for your permission first.

• What Varyd writes: each result and session you log, as a workout with its type, start and end time, and an estimated energy burn (worked out from its length and, if you added it, your bodyweight).
• What Varyd reads: nothing. Varyd never reads any data from Apple Health.
• Where it goes: what Varyd writes stays in Apple Health on your devices. We don't send Apple Health data to our servers or to anyone else, and we never use it for advertising or marketing or sell it.
• How to stop: turn it off in the app's settings, or in iPhone Settings → Health → Data Access & Devices → Varyd. Workouts already saved stay in Apple Health until you delete them there.

Why we use it

• To provide the service you signed up for: your account, workouts, results, rankings and analytics (performance of our contract with you).
• To keep Varyd working and improve it, using crash reports and usage counts (our legitimate interest). You can object at any time by turning off “Share usage data and crash reports” in the app's settings.
• To send emails you need, such as confirming your address or resetting your password.
• To comply with the law where we must.

Who helps us run Varyd

These providers process data for us, only on our instructions:

• Supabase: database and sign-in, hosted in the EU (Ireland).
• Vercel: hosting for varyd.app and the app's server.
• Resend: account emails.
• Sentry: crash reports.
• PostHog (EU cloud): usage analytics.
• RevenueCat: manages subscriptions bought in the app. It receives your account ID and your purchase history from the store, so Premium unlocks on every device you sign in to.
• Apple and Google: app distribution and payments for subscriptions bought through their stores. We never see your card details.

Some of these providers may process data outside your country. Where data leaves the European Economic Area, it is protected by the European Commission's standard contractual clauses or an equivalent safeguard.

How long we keep it

We keep your account and training data until you delete your account. Deleting it (in the app under Settings, or on varyd.app under Profile; see how to delete your account) permanently removes your profile, results, lifts, workouts and program straight away. Copies in our database provider's backups disappear as those backups expire. Crash reports and usage data are kept for up to 12 months.

Your rights

You can ask for a copy of your data, correct it, delete it, move it to another service, or object to or limit how we use it. Most of this you can do yourself in the app; for anything else, email support@varyd.app. We reply within one month. If you're in the EU or UK, you can also complain to your data protection authority (in Sweden, Integritetsskyddsmyndigheten, IMY).

Children

Varyd is not for anyone under 16. If you believe a younger person has an account, email us and we'll delete it.

Security

Data is encrypted in transit, access to it is limited by account, and results that affect rankings are checked on our servers. No service is perfectly secure; if a breach affects you, we'll tell you as the law requires.

Changes

If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect. See also our terms of use.