Privacy Policy

Hey, I'm Bene, the developer of Gritlog. It's my belief that your strength training data belongs to you. That's a principle I've built the app around. Your training logs and HealthKit data remain on your device or personal iCloud if enabled. Limited purchase, technical, attribution, and app-use metadata is processed by Apple and RevenueCat as described below.

1. Data Controller & Contact

I am responsible for your data protection under the GDPR. For any privacy-related inquiries, please reach out to: Benedikt König Schedestr. 18 20251 Hamburg, Germany Email: privacy@gritlog.com

2. The "Local First" Architecture

Gritlog operates differently than many fitness apps. I do not operate servers to store your training logs or health data.

Health & Fitness Data

With your permission, Gritlog reads and writes Apple HealthKit data (workouts, energy burned, heart rate, and body mass). I cannot access or see this data, and Gritlog does not send it to RevenueCat.

Training Logs

Your exercise history and settings are stored locally on your iPhone. If you use iCloud, Apple syncs this data across your devices through your private iCloud account.

Payments

Gritlog is free to use with optional Gritlog Pro subscriptions and a lifetime purchase. Apple handles all transactions. RevenueCat manages Pro access and receives purchase, technical, attribution, and limited app-use metadata as described below. I never see your credit card details or billing information.

3. We Do Not Sell Your Data

Privacy is a universal right, not a regional one. I do not sell personal data to third parties, period. This applies to all users worldwide, regardless of whether you are protected by the CCPA (California), GDPR (Europe), or any other regulation. Your HealthKit data and training logs are never used for advertising or shared with data brokers. Limited Apple Search Ads attribution data may be used to measure campaign performance.

4. Third-Party Services

I only use essential services to ensure the app runs smoothly:

Apple HealthKit

To provide you with your fitness insights.

RevenueCat

To validate purchases, manage Pro access, and measure paywall performance. RevenueCat processes purchase history, a random App User ID, technical and Apple Search Ads attribution information, and limited product-usage data such as onboarding progress, paywall interactions, and workout-count milestones. RevenueCat does not receive HealthKit data or the contents of your workouts and training plans. RevenueCat is based in the USA, with Standard Contractual Clauses used for restricted transfers where applicable.

Support

If you email me for help, I will only use your contact details to resolve your specific request. Once your issue is sorted, I delete our correspondence.

5. Your Rights & Control

You have full control over your information at all times:

Manage Data

You can view, edit, or delete your fitness data directly within the Apple Health app.

Right to be Forgotten

To delete your local Gritlog data, delete the app and manage any synchronized data in your iCloud settings. For deletion requests relating to RevenueCat metadata, email privacy@gritlog.com. Apple retains App Store purchase records under its own policies and legal obligations.

Permissions

You can revoke Gritlog's access to HealthKit at any time via the "Privacy" section of your iPhone Settings.

6. Legal Basis (GDPR)

For users in the European Economic Area, I process data based on:

Consent (Art. 6(1)(a))

For HealthKit integration.

Contract (Art. 6(1)(b))

To provide and restore optional Gritlog Pro features following your purchase.

Legitimate Interest (Art. 6(1)(f))

For responding to support inquiries and measuring onboarding, paywall, and Apple Search Ads performance using limited app-use metadata.

7. Security

Gritlog relies on the industry-leading security of the iOS platform. Your data is protected by your device passcode/FaceID and Apple's encrypted iCloud infrastructure.

8. Children's Privacy

Gritlog is designed for adults who take their training seriously. The app is not intended for children under 13. If you believe a child has provided personal information in connection with Gritlog, contact privacy@gritlog.com.

9. Changes to this Policy

If I update the app in a way that changes how data is handled, I will update this policy and notify you within the app.