Privacy Policy

This Privacy Policy explains what Unrack collects, why, who it is shared with, and what you can do about it. It covers the Unrack mobile app and this website (together, the "Service"), which are operated by FLAREWARE SOLUTIONS, a partnership registered in Saskatchewan, Canada ("we," "us").

The short version

• Your workouts and your lifting videos are stored in your account so they are available on any device you sign in to.
• We do not sell your personal information, and we do not use your videos to advertise to you or to train machine-learning models.
• You can export everything and you can delete everything, both from inside the app, without asking us.

Information we collect

Account information

When you create an account we collect your email address and, if you provide them, your first and last name and a profile picture. You can sign in with an email address and password, with Google, or with Apple. If you use Sign in with Apple and choose to hide your email, we receive only Apple's private relay address and never your real one.

Body and training data

The Service is a training log, so most of what it holds is data you deliberately enter:

• Workouts and sets — exercises, weight, reps, RPE, tempo, duration, rest, notes, dates, and the templates and tags you organise them with.
• Custom exercises and variations you create.
• Personal records detected from your working sets, and any historic records you enter yourself.
• Bodyweight — your current bodyweight and unit, plus a dated history if you log it over time. This is health-related information. It is collected because bodyweight, weighted and assisted movements cannot be scored as a load without it, and it is used for nothing else.

Video you record or import

Clips you film in the app, or import from your photo library, are uploaded to storage that is private to your account, together with a thumbnail and the metadata that binds a clip to the set it belongs to. Only you can read them. We do not review them except where you specifically ask us to in support, and we do not use them to train models.

Notifications and device tokens

If you allow notifications we store push tokens for your devices and which notification categories you have switched off, along with a record of notifications we have queued or sent. Rest timers are scheduled on your device rather than by us.

Time zone

We store your IANA time zone (for example America/Edmonton), refreshed when you sign in and when you reopen the app. Scheduled notifications are written as absolute times, so anything meant to arrive on a Sunday evening has to know your offset before it is queued.

Usage counters

We keep a small number of derived figures on your profile — when you last logged a workout, how many you have logged, and your lifetime training volume. These exist so that deciding whether to send you a reminder is a single query rather than a scan of every workout you have ever recorded.

Device and diagnostic information

We collect device model and operating system version, app version, crash reports, and performance traces. Crash reports may include a stack trace and the state of the app at the moment it failed.

Analytics

We use Firebase Analytics to understand which features are used. We associate analytics with your account identifier and record a coarse bucket describing how much training history you have. On Android, the Google Advertising Identifier may be available to Analytics through the underlying SDK. We do not use it to build advertising profiles and we do not run ads in the app.

Permissions the app asks for

• Camera and microphone — to film sets. Audio is captured because it is part of the video you record.
• Photo library (read) — only so you can import lifting videos you already filmed.
• Photo library (add) — only when you choose to save a clip back to your device.
• Notifications and exact alarms — so a rest timer fires with your screen off and reminders arrive when intended.

You can refuse or withdraw any of these in your device settings. Refusing camera access disables filming; the rest of the log continues to work.

How we use information

• To provide the Service and sync your account across your devices.
• To detect personal records and calculate progress and estimates.
• To send notifications you have not switched off.
• To diagnose crashes, fix defects, and monitor performance.
• To respond to you when you contact support.
• To protect against abuse, fraud, and security incidents.
• To comply with legal obligations.

Legal bases (EEA and UK)

• Performance of a contract — operating your account and storing the data you log.
• Consent — notifications, camera, microphone and photo access, and analytics where local law requires consent. You can withdraw consent at any time.
• Legitimate interests — keeping the Service secure and working, and understanding aggregate feature use.
• Legal obligation — where we must retain or disclose information by law.

Where bodyweight or similar entries constitute health data under applicable law, we rely on your explicit consent, given by choosing to enter it. You are not required to record it.

Who we share information with

We do not sell your personal information, and we have not in the preceding twelve months. We share it only with:

• Google LLC (Firebase) — our infrastructure provider. Authentication, database, file storage, server functions, push messaging, analytics, crash reporting, performance monitoring, and remote configuration all run on Firebase.
• Plunk (useplunk.com) — our email delivery provider. When you create an account we share your email address and, if you provided one, your first name, so we can send account email such as a welcome message. Every non-essential email includes an unsubscribe link, and unsubscribing there is honoured immediately. Your contact record with Plunk is removed when your account is deleted.
• Apple Inc. — where you use Sign in with Apple, and for purchases made through the App Store.
• Authorities or advisers — where we are legally required to disclose, or need to establish or defend legal claims.
• A successor — if the Service is acquired or merged, under terms no less protective than this policy.

Where your information is held

The Service runs on Google Cloud infrastructure and your information, including video, may be stored and processed in the United States and other countries where Google operates. Where information leaves the EEA or the UK, transfers rely on the European Commission's Standard Contractual Clauses as incorporated into Google's terms.

How long we keep it

Your account data is kept until you delete it or your account. Deleting a workout, clip or record removes it from the Service. Crash and analytics records are retained on our providers' standard schedules, which are shorter than the life of an account. Backups and logs may retain copies for a limited period after deletion before being overwritten.

Deleting your account

You can delete your account from Settings in the app. For your protection, you may be asked to sign in again first. Deletion removes, in order: every file you have stored with us, including all video; every record under your account, including workouts, templates, clip metadata, personal records, bodyweight history and notifications; your contact record with our email provider; and finally the authentication record itself. It is not reversible and we cannot restore an account afterwards.

If you cannot access the app, email support@getunrack.com from the address on the account and we will action it for you.

Exporting your data

You can export your account from the app at any time, without contacting us. The export produces a complete JSON file containing every field of every record as it is stored, and a CSV with one row per set for spreadsheets. Clips are exported separately by saving them from your Lift Roll to your device, because video files are too large to bundle.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information, to restrict or object to processing, and to withdraw consent. The export and delete features above satisfy most of these immediately. For anything else, email us and we will respond within the period required by applicable law.

Canada. We are a Canadian organisation and handle personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA). You may ask what we hold about you, challenge its accuracy, and withdraw consent subject to legal and contractual limits. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada.

EEA and UK. You may also complain to your local supervisory authority.

California. You have the right to know, delete, and correct your personal information, to opt out of sale or sharing (we do neither), to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights.

Security

Accounts are protected by authentication, and storage rules restrict every file and record to the account that owns it. Data is encrypted in transit and at rest by our infrastructure provider. No service can promise perfect security, and you are responsible for keeping your sign-in credentials to yourself.

Children

The Service is not directed to children. You must be at least 13 years old to create an account, and the app asks for your year of birth before it collects anything else. We do not knowingly collect information from anyone younger.

Some countries set a higher age at which a person can consent to their own data being processed. Where you are under that age but at least 13, a parent or guardian must agree to these terms on your behalf. If you believe a child has created an account, contact us and we will delete it.

While Unrack is in beta

Unrack is pre-release software. We are still settling how workouts, sets and clips are stored, and correcting that shape can mean resetting data. Treat anything you log during the beta as replaceable and keep your own copy of anything you would hate to lose. See the Terms of Service for the full position.

Changes to this policy

We will update this page when our practices change and revise the date at the top. If a change materially affects your rights, we will tell you in the app or by email rather than relying on you noticing.

Contact us

Questions, requests, or complaints: email support@getunrack.com.FLAREWARE SOLUTIONS is the controller of your personal information, at 118 Rosewood Gate N, Saskatoon, Saskatchewan, Canada, S7V 0K9.