LEGAL
The short version: your training and food data is written to your phone first, it is not sold, there are no ads and no tracking software, and you can have all of it deleted by asking.
Only what the app needs in order to work. There is no analytics product behind this, no advertising identifier, and no third-party tracking software in the app.
We do not collect your contacts, your location, your photo library, your health records from other apps, or your browsing behaviour. We do not use advertising identifiers. We do not embed analytics or attribution software. We do not sell data to anyone, and there is no arrangement under which a third party receives your data in exchange for anything.
Every write goes to your phone first, into a local database, and is shown to you immediately. That is a design decision about how the app has to work in a gym with no signal, and it has a privacy consequence: the app remains fully usable if it never reaches our server at all.
When there is a network, your data syncs to our server so you can move to a new phone and so features that need a server, such as the coach, have something to read. The server runs in a European data centre. Backups are encrypted and retained for thirty days.
A small number of processors, each doing one job:
That is the full list. No one else receives your data, and none of these are permitted to use it for their own purposes.
Your logs stay for as long as your account exists, because a training history that gets trimmed is not a training history. Food photos are discarded after recognition. Technical logs are kept for thirty days. Backups roll off after thirty days. When you delete your account, everything goes on the schedule described on the data deletion page.
You can ask for a copy of everything we hold about you, ask for a correction, ask for deletion, or object to a particular processing activity. Depending on where you live, some or all of these are legal rights; we apply them to everybody regardless. Write to support@barbellbowl.com and you get an answer within thirty days, usually much sooner.
Barbell Bowl is not for people under sixteen. We do not knowingly create accounts for them. If you believe a child has an account, tell us and it will be removed.
Traffic is encrypted in transit. The database is not reachable from the public internet. Access to production is limited and logged. No system is perfect, and if there is ever a breach that affects you, we will tell you what happened and what was exposed rather than issue a statement about taking security seriously.
If this policy changes in a way that affects what we collect or who sees it, the date at the top changes and you are told in the app before the change takes effect. We do not make material changes quietly.
Write to support@barbellbowl.com. A person reads it. For anything about your data specifically, put "data request" in the subject line and it gets handled first.