Privacy Policy

1. Who we are

Unrack (the "App") is operated by FlareWare Solutions, a general partnership registered in Saskatchewan, Canada ("FlareWare", "we", "us", "our").

Mailing address: 118 Rosewood Gate N, Saskatoon, Saskatchewan, Canada S7V 0K9
Privacy contact: support@getunrack.com
Website: https://getunrack.com

FlareWare is the organisation responsible for your personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply, other privacy laws described in Section 13. For the purposes of the EU and UK General Data Protection Regulation, FlareWare is the "controller" of your personal data.

This policy explains what we collect when you use the App, why, who we share it with, how long we keep it, and the choices you have. It applies to the Unrack mobile app on iOS and Android, our website at getunrack.com, and emails we send you. It does not apply to third-party services you choose to connect to (such as Instagram), which have their own privacy policies.

2. Summary

• Unrack is a lifting tracker built around video. The clips you film, the workouts you log, and any body measurements you record are stored in your account so you can review and compare them.
• We use your information to run the App, keep it working, secure it, bill for subscriptions, send you notifications and emails you can turn off, and understand how the App is used in aggregate.
• We do not sell your personal information. We do not use your videos, photos or training data to train artificial intelligence models, and we will not do so without asking you first.
• Your content is private to you. Nobody else can see your clips, workouts or measurements unless you deliberately share them out of the App.
• You can export your data and delete your account from within the App at any time. Deletion is permanent and removes your videos, photos and training history.
• Your data is stored on Google Cloud infrastructure in the United States.

The rest of this policy gives the detail.

3. Information we collect

3.1 Information you give us

Account information.

• Email address (if you sign in with Google or with email and password, or if you choose to share it when signing in with Apple; Apple may instead give us a private relay address).
• First and last name, if provided by your sign-in provider or entered by you.
• Profile picture, if you add one.
• Year of birth, which we ask for once to confirm you meet our minimum age. We ask for the year only, not your full date of birth.
• Password, if you use email sign-in. Your password is handled by Firebase Authentication and is never visible to us.

Training data.

• Workouts, exercises, sets, weights, reps, RPE, rest times, workout tags, templates, programs, notes and personal records you log or import.
• Workout history you import from a CSV file exported from another app (such as Strong or Hevy). We read only the columns needed to reconstruct your workouts.

Video clips and thumbnails.

• Videos you film in the App or import from your device's camera roll, and the poster-frame thumbnails generated from them. Clips may be transcoded or compressed by us to control file size.
• Metadata attached to each clip: which exercise and set it belongs to, duration, resolution, frame rate, encoding pipeline, when it was created, any title or notes you add, and, if you trace the bar path, a short summary of each rep (described in section 5).

Body and measurement data.

• Bodyweight readings, in the unit you choose.
• Body measurements you choose to record: body fat percentage and tape measurements (neck, shoulders, chest, arms, forearms, waist, hips, thighs, calves).
• Progress photos you attach to a measurement check-in.

All body and measurement data is optional. The App works without it. See Section 4.4 on why we treat this category with extra care.

Preferences and settings.

• Unit preferences, home screen layout, pinned movements, notification and email preferences, time zone, appearance settings.

Communications.

• Anything you send us by email, including feedback, support requests, and age-verification queries.

Launch email list. If you join our launch list on getunrack.com, we collect your email address and which form on the page you used. We keep it with our email provider (Plunk) to tell you when Unrack launches and to send you news about Unrack, and every one of those emails has an unsubscribe link. Joining the list does not create an Unrack account or reserve a founding-member place.

3.2 Information collected automatically

Device and app information. Device model, operating system and version, app version, language, time zone, and unique app-instance identifiers assigned by Firebase.

Usage analytics. Through Google Analytics for Firebase we record events about how the App is used: which onboarding steps were viewed, when a workout or clip was logged, when the comparison view or paywall was opened, when a share was made, how long the App takes to start, and similar product events. We attach your account identifier to these events so we can see how features are used across sessions. Analytics events describe what you did in the App, not the content of your workouts or videos.

Crash and performance data. Through Firebase Crashlytics and Firebase Performance Monitoring we receive crash reports, stack traces, non-fatal error reports, device state at the time of a crash, and performance traces such as network request timing and screen rendering. These may include your account identifier.

Push notification tokens. If you allow notifications, we store the device tokens issued by Apple Push Notification service and Firebase Cloud Messaging so we can deliver notifications to your devices.

Email engagement. Our email provider records whether emails we send are delivered, opened, bounce, or are marked as spam, and whether you unsubscribe.

Subscription status. Whether you hold an active Unrack Pro subscription, which product and store it was purchased through, and its renewal or expiry date. This is provided to us by RevenueCat based on the receipt from Apple or Google. We never receive your payment card number or billing address.

Founding tester status. If you joined during our beta, a founder number and the entitlement it earns.

Server-side counters. Aggregate figures maintained on your profile, such as number of workouts logged, lifetime volume lifted, and last workout date, used for milestones and notifications.

3.3 Information from third parties

• Google and Apple sign-in: your name, email address (or Apple relay address), and a provider identifier.
• Apple App Store and Google Play, via RevenueCat: purchase and renewal events for your subscription.
• Our email provider (Plunk): delivery, bounce, complaint and unsubscribe events.

3.4 Information we do not collect

• We do not collect your precise location. We infer nothing from your IP address beyond what Google's infrastructure logs for security purposes.
• We do not read your device contacts, calendar, or health platforms (Apple HealthKit, Google Health Connect).
• We do not access your camera roll unless you choose to import a clip or photo, and we do not store any camera-roll content you did not select.
• We do not collect government identifiers, financial account details, or precise date of birth.

4. How we use your information

4.1 Purposes

We use your information to:

1. Provide the App: create and secure your account, store and play back your clips, log workouts, compute personal records and volume, and show you your history.
2. Sync across your devices: your account is stored in the cloud so you can sign in on a new phone and pick up where you left off.
3. Bill subscriptions: confirm your Unrack Pro entitlement, enforce the free tier clip limit, and honour founding tester promotions.
4. Send you notifications you have turned on: rest timers, scheduled workout reminders, progress milestones, consistency nudges, and app announcements. Rest timers and reminders run on your device; others are sent from our servers.
5. Send you emails: account and security emails (which you cannot opt out of while you have an account), and product emails such as a welcome series, tips, monthly recaps, milestone celebrations, and news, each of which you can turn off (see Section 8.3).
6. Warn you before dormancy deletion (see Section 7.2).
7. Improve and debug the App: fix crashes, measure performance, and understand which features are used so we can decide what to build.
8. Prevent abuse and protect security: detect misuse of the service, enforce our Terms of Service, and protect our systems and other users.
9. Comply with law and respond to lawful requests from authorities.
10. Communicate with you about support, feedback, and changes to the App or these terms.

4.2 What we do not do

• We do not sell or rent your personal information.
• We do not share your personal information with advertisers or ad networks, and the App contains no third-party advertising.
• We do not use your videos, photos, measurements or training data to train machine learning or AI models, whether ours or anyone else's. If we ever want to do this, we will ask for your separate, explicit opt-in consent first, and declining will not affect your use of the App.
• We do not use automated decision-making that produces legal or similarly significant effects about you.
• We do not make your content visible to other users. Unrack currently has no social, feed, follower or coach features. If we add such features in the future, sharing will be opt-in, and this policy will be updated before launch.

4.3 Legal bases (EU/UK users)

If you are in the European Economic Area, Switzerland or the United Kingdom, we process your personal data on the following bases:

4.4 Sensitive and health-related information

Bodyweight, body fat percentage, tape measurements and progress photos may be considered health or biometric-adjacent information under some privacy laws. We treat this category as sensitive:

• It is always optional and never required to use the App.
• It is stored in the same access-controlled environment as the rest of your data and is never shared with third parties except the infrastructure providers listed in Section 6.
• It is not used for analytics, marketing, or profiling. Analytics events record that a check-in happened, not the values you entered.
• You can delete any individual entry or photo at any time from within the App.

Progress photos may reveal your body, tattoos, or surroundings. Please consider what is visible before you add one.

5. Videos and other people

Your clips are yours and are private to your account. However, footage filmed in a gym will often include other people in the background, and a spotter or training partner may be in frame.

• You are responsible for making sure you have the right to film where you film and that anyone identifiable in your clips is comfortable with it.
• We store the clip as you upload it; we do not perform facial recognition or identify people in your videos.
• Bar-path tracing follows a barbell plate using software that runs on your device. The clip is not sent to us or to anyone else to be analysed. The path itself, the bar's position frame by frame, is kept on your device only: it is not uploaded to your account or synced, and it is deleted when you delete or trim the clip or uninstall the App (your device may also clear it to free up space; it can be traced again).
• When a trace finishes, a short summary of each rep is saved with the clip in your account so it can appear in your strength trends: its range of motion, bar speed, how long the lowering and lifting took, how far the bar moved sideways, and the plate size and frame rate the figures were read at. It is deleted when you delete or trim the clip or remove the trace, and it is included in your data export.
• We record that a trace ran, as a usage analytics event with the number of reps, the clip's length and how long tracking took, and that you shared a bar path card, with its number of reps. These events do not include the path or the rep summary. The tracker follows a barbell plate; it does not detect, track or identify people.
• If someone believes they appear in a clip stored in Unrack and wants it removed, they may contact us at the privacy address above. We will make reasonable enquiries and may ask you to remove or trim the clip, or remove it ourselves where required by law.

When you share a workout card, sticker or video out of the App (to Instagram, the system share sheet, or your camera roll), that content leaves Unrack and is governed by wherever you send it. We do not post on your behalf; every share requires a deliberate action from you.

6. Who we share information with

We share personal information only with the service providers we need to operate the App, and only for the purposes above. Each of these providers is contractually bound to protect your information and is not permitted to use it for their own purposes.

We do not share personal information with any other third party except:

• With your direction: when you export your data, share content, or ask us to send information somewhere.
• For legal reasons: to comply with a law, regulation, subpoena or court order; to enforce our Terms; or to protect the rights, property or safety of FlareWare, our users or the public.
• In a business transfer: if FlareWare or the Unrack product is sold, merged, incorporated or transferred to a new entity, your information may be transferred as part of that transaction. We will notify you by email and/or in-app notice before your information becomes subject to a different privacy policy.
• Professional advisers: lawyers, accountants and insurers, under confidentiality obligations, where needed.

7. How long we keep your information

7.1 While your account is active

We keep your account, training data, clips, photos and settings for as long as your account exists, so that your history is available to you.

7.2 Dormant accounts

If you do not open the App for approximately twelve (12) consecutive months, we may delete your video clips and progress photos to control storage costs. Before doing so we will:

1. Send a warning by email and by push notification (where enabled), at least 30 days in advance, prompting you to export or sign in.
2. Keep your workout history, clip metadata, measurements and account intact. Only the video and photo files are removed. This rule applies equally to free and previously subscribed accounts.

Once removed under this rule, videos and photos cannot be recovered.

7.3 When you delete your account

When you delete your account from Settings, our server permanently deletes:

• all videos, thumbnails and progress photos in your storage area,
• all workouts, sets, measurements, templates and other Firestore data under your account,
• your profile document and authentication record,
• your contact record with our email provider,
• your push notification tokens.

Deletion runs as a single server-side operation and is confirmed before we report success. It cannot be undone.

Some information persists for a limited period after deletion:

• Backups: encrypted infrastructure backups may retain copies for up to 30 days before they cycle out.
• Analytics and crash data: Google Analytics for Firebase retains event data for up to 14 months and Crashlytics for 90 days by default; this data is keyed to an anonymous app instance and to an account identifier that no longer maps to a person once your account is deleted.
• Subscription records: RevenueCat and the app stores retain purchase records as required for tax, accounting and fraud prevention. Deleting your Unrack account does not cancel an active subscription; see Section 8.5.
• Legal holds: we may retain information longer if required by law or to resolve a dispute.

7.4 Under-age sign-ups

If you enter a birth year that does not meet our minimum age during sign-up, any account created in that session is deleted immediately and nothing is retained except an anonymous analytics event noting that the age gate was not passed.

7.5 Launch email list

If you join our launch list, we keep your email address with Plunk until you ask us to remove it. Unsubscribing stops the emails, and we keep the address marked as unsubscribed so that you are not emailed again; to have it deleted entirely, email support@getunrack.com. If you later create an account with the same address, it becomes your account's contact record with our email provider and is deleted with your account as described in Section 7.3.

7.6 Support emails

Emails you send us are kept for as long as needed to resolve your query and for a reasonable period afterwards for record-keeping, generally no more than 2 years.

8. Your choices and rights

8.1 Access, export and portability

You can view all of your data in the App. From Settings → Export, you can generate a complete copy of your account — profile, every workout, measurements and clip metadata — as CSV and JSON files. Videos and photos can be saved to your device individually. Our CSV export can be re-imported into Unrack and is designed to be readable by other tools.

8.2 Correction and deletion

You can edit or delete any workout, set, clip, measurement or photo from within the App. You can delete your entire account from Settings → Account → Delete account. We may ask you to sign in again first to confirm it is really you.

8.3 Notifications and emails

• Push notifications: manage each category in Settings → Notifications, or turn them off entirely in your device settings.
• Product emails (recaps, milestones, tips, news): manage each category in Settings → Email, or use the unsubscribe link in any email. Unsubscribing via the link turns off all product emails.
• Account and security emails (such as email verification, password resets, deletion confirmations and dormancy warnings) are necessary to operate your account and cannot be turned off while you hold an account.

8.4 Analytics

You cannot turn off analytics and crash reporting from within the App today, because we rely on them to keep the App working. Analytics events describe feature usage and do not contain your workout or video content. If you do not want this data collected, you may delete your account. We may add an in-app analytics toggle in future.

8.5 Subscriptions

Subscriptions are managed by Apple or Google, not by us. To cancel, use your App Store or Google Play subscription settings. Deleting your Unrack account does not cancel a subscription; please cancel first.

8.6 Additional rights

Depending on where you live, you may have the right to:

• ask what personal information we hold about you and receive a copy;
• ask us to correct inaccurate information;
• ask us to delete your information;
• ask us to restrict or object to certain processing;
• withdraw consent where processing is based on consent;
• receive your data in a portable format;
• not be discriminated against for exercising your rights; and
• complain to a privacy regulator.

Most of these can be exercised directly in the App. For anything else, including if you are on our launch list without an account, email support@getunrack.com. We will respond within 30 days (or sooner where the law requires), may ask you to verify your identity, and will tell you if we cannot honour a request and why.

Canada: you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d'accès à l'information.
EU/UK: you may complain to your local data protection authority or, in the UK, the Information Commissioner's Office.

9. Children

Unrack is not intended for anyone under 13 years of age, and we do not knowingly collect personal information from them. We ask for your year of birth once at sign-up, and accounts belonging to anyone under 13 are refused and deleted.

If you are between 13 and the age of majority where you live, you must have your parent's or guardian's permission to use the App. Some jurisdictions set a higher age for consent to data processing (for example, 14 in Quebec and up to 16 in parts of the EU). If we learn that we have collected personal information from a child without the consent the law requires, we will delete it. Parents or guardians may contact us at the privacy address above.

10. Security

We take reasonable technical and organisational measures to protect your information, including:

• All data is encrypted in transit (TLS) and at rest on Google Cloud.
• Access to your data is enforced by server-side security rules that allow only your authenticated account to read or write it. Our own staff access production data only when needed to support you or investigate a problem.
• Secrets and API keys are held in a managed secrets store, not in the App.
• Account deletion and other destructive operations require a recent sign-in.
• Uploads are restricted by type and size.

No system is perfectly secure. If we become aware of a breach affecting your personal information that creates a real risk of significant harm, we will notify you and the relevant regulators as required by law.

Your part: keep your sign-in credentials private, use a strong password if you sign in with email, and let us know at once if you suspect unauthorised access.

11. International transfers

FlareWare is located in Canada. Your information is stored and processed on Google Cloud servers in the United States, and by the other providers in the locations listed in Section 6. When you use the App, you consent to your information being transferred to and processed in those countries, which may have different privacy laws from your own.

For EU/UK users, transfers outside the EEA/UK are made under the European Commission's Standard Contractual Clauses (or the UK addendum) or another lawful transfer mechanism provided by the relevant provider. Canada is recognised by the EU as providing adequate protection for commercial data.

12. Third-party links and integrations

The App may link to our website, the app stores, and other sites. When you share content to Instagram or another app, that content is subject to that platform's terms and privacy policy. We are not responsible for the privacy practices of third parties.

13. Region-specific disclosures

13.1 Canada

We comply with PIPEDA and, to the extent it applies, Quebec's Act respecting the protection of personal information in the private sector. Our privacy officer can be reached at the privacy address above. Personal information may be stored or processed outside Canada, as described in Section 11, and may be subject to the laws and lawful access of those jurisdictions. We only collect what is reasonably necessary for the purposes described in this policy.

13.2 European Economic Area, Switzerland and United Kingdom

See Section 4.3 (legal bases), Section 8.6 (rights) and Section 11 (transfers). We have not appointed a representative in the EU or UK; if our processing reaches the thresholds requiring one, we will update this policy. If you believe our processing of your data infringes data protection law, you have the right to lodge a complaint with a supervisory authority.

13.3 United States

Nevada: we do not sell personal information as defined under Nevada law.
California and other states with consumer privacy laws: we do not sell or share personal information for cross-context behavioural advertising, and we do not use or disclose sensitive personal information for purposes other than providing the service you request. You have the rights described in Section 8.6. We do not currently meet the revenue or volume thresholds at which the California Consumer Privacy Act applies, but we honour the requests described above regardless. Categories of personal information collected in the past 12 months are those described in Section 3; sources and purposes are described in Sections 3 and 4; categories of recipients are those in Section 6.

13.4 Australia

To the extent the Privacy Act 1988 applies to us, we handle personal information in accordance with the Australian Privacy Principles. Your information may be disclosed to overseas recipients in the United States and the European Union as described in Section 6.

14. Changes to this policy

We may update this policy as the App evolves — for example, if we add a web app, coach features, social sharing between users, or a new storage provider. When we make material changes, we will notify you in the App and/or by email before they take effect, and we will not use your existing data for a materially different purpose without your consent. The "last updated" date at the top tells you when the policy last changed. Earlier versions are available on request.

15. Contact us

FlareWare Solutions
118 Rosewood Gate N
Saskatoon, Saskatchewan, Canada S7V 0K9

Privacy questions, requests and general support: support@getunrack.com