Privacy Policy

GRYND LLC, a Georgia limited liability company (“GRYND”, “we”, “us”, “our”), operates the Repva mobile application (“the App”, “the Service”) and is the controller of the personal information described here. We respect your privacy and are committed to protecting the personal information you share with us. This policy explains what we collect, how we use it, where it is stored, and the choices you have.

By using the Repva mobile application (“Repva”, “the App”, “the Service”), you agree to the practices described here. If you do not agree, please discontinue use of the Service.

1. Information We Collect

Account

Repva uses passwordless sign-in. To create or access your account you provide an email address, and we email you a one-time code to verify it. We store your email address. There is no password to manage. Because your email is the key to your account, keeping access to that inbox matters — if you lose access to it you may be unable to sign in, and for security reasons we cannot transfer or restore accounts.

Profile

During onboarding you provide your date of birth, and may add optional details including your bodyweight and your preferred units. You may add an optional name later in Settings. Some of these (such as date of birth and weight) are health-related. We use your date of birth solely to confirm you meet our minimum age of 13 — it is required to create an account and cannot be changed afterward. Bodyweight is kept with your body measurements and the workouts you log. Aside from date of birth, these fields are optional, and you can change or clear most of them later in Settings.

You may add an optional profile photo. It is stored privately and shown only to you. You can replace or remove the photo in Settings.

Workout data

Repva is a workout-tracking app. You enter training data — exercises, sets, reps, weights, durations, rest times, and notes — and create routines. The App derives your personal records, totals and charts from it on your device. Our servers store the workouts, measurements and settings you enter and compute nothing from them. This is your data; you can edit or delete it in the App.

Health data (workouts and activity)

Each kind of Apple Health data has its own switch in Settings → Apple Health, and Repva reads or writes only what you turn on. With Import cardio workouts, Repva reads cardio workouts that start on or after your signup day (plus, if you choose it once, the 30 days before), including their type, source, start and end time, duration, active energy, distance and heart rate. With Steps, we read steps, walking/running distance and flights climbed for activity charts, and daily step totals. With Weight, we read your weigh-ins into your body measurements. With Save my workouts to Health, we write the start and end of each workout you finish in Repva to Apple Health. We do not read sleep, nutrition, routes or locations. You can grant or revoke permission in your device’s system settings; the rest of the App works without it.

Steps and activity chart details stay on your device. Imported workout facts and source information and your inclusion choices are also stored with our backend provider so your records can be restored; nothing is computed from them there. You can exclude an imported workout from your totals without deleting its source record. Revoking permission stops future reads and does not erase previously imported records. Explicit workout deletions reported by Apple Health remove their imported workout when Repva next reads those changes.

We NEVER use health or fitness data obtained through Apple HealthKit for advertising, marketing, or any use-based data mining, and we NEVER sell it or share it with third parties for those purposes. We use it only to provide the features described above.

Crash and error reporting

We use Sentry to capture crashes and errors so we can fix bugs and improve stability. Reports contain app and release metadata, error types and codes, code locations, and selected diagnostic counts or flags. Native crash reports also include operating-system and crash information needed to identify the failing code. Upload filters drop free-form messages, account identifiers, request bodies and headers, workout content, health data and stack-variable values. Screenshots, view hierarchies and automatic performance traces are disabled.

2. How We Use Your Data

We use your data to: create and secure your account; provide and personalize the Service; sync your data across devices and restore it after reinstalls; communicate with you (including sending sign-in codes and responding to support requests); understand and improve the App; and comply with legal obligations and enforce our Terms.

Legal bases (EEA/UK). Where the GDPR applies, we process your data on these bases: to perform our contract with you (operating your account and the Service); with your consent (for example, health data access, which you can revoke at any time); for our legitimate interests (securing, understanding, and improving the Service, where not overridden by your rights); and to comply with legal obligations.

3. How Your Data Is Stored and Who Processes It

We use the following service providers (“processors”) to operate the Service, under contracts that limit their use of your data to providing services to us:

• Supabase — backend host: authentication, and storage of the workouts, measurements and settings you enter, including optional profile photos. It stores them and computes nothing from them.
• Resend — delivery of transactional emails, such as your one-time sign-in codes (processes your email address).
• Sentry — crash and error reporting (designed to exclude personal information).
• Apple — app distribution and, with your permission, the Apple Health platform.

Repva also keeps a copy of your data on your device for offline use. Data is transmitted over encrypted connections and may be processed and stored on servers in the United States or other countries; by using the Service you consent to this transfer. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4. Your Choices and Rights

You can:

• Access and edit your profile and training data directly in the App.
• Export your account data as JSON, your training log as CSV, or a recovery file from Settings → Data Export. Recovery files include saved local changes and custom exercise photos, contain no sign-in credentials, and can be imported only into the same account. They do not transfer an in-progress workout.
• Grant or revoke Apple Health access in your device settings, turn each kind of Health data and each workout source on or off in Settings → Apple Health, and manage imported workout inclusion from Settings → Apple Health → Health workouts.
• Sign out to lock the account’s retained data on this device, or explicitly remove its local data. Removing local data does not delete the server account; changes that have not uploaded are lost if you remove their only local copy.
• Delete your account and its associated data at any time in the App (Settings → account deletion), or by contacting support@repva.fit.
• Request a copy of the personal data we hold, ask us to correct it, or ask us to delete it, by contacting support@repva.fit or using Send Feedback in the App.

Depending on where you live (for example, the EU/UK under the GDPR, or California under the CCPA/CPRA), you may have additional rights to access, correct, delete, or port your data and to object to or restrict certain processing, as well as the right not to be discriminated against for exercising them. We honor these requests as required by law. We do not sell or share your personal information for cross-context behavioral advertising.

5. Data Retention

We keep your data while your account is active. Correcting or deleting a workout changes only that workout. Minimal operation receipts and deletion identifiers remain with the account to prevent duplicate saves and the reappearance of deleted records.

Signing out locks the account’s local copy; it does not erase it. You can remove that copy separately. When you delete your account, we remove its personal data and retry any pending external cleanup, except where we must retain limited information to meet legal obligations. Files you export or share remain wherever you save or send them. Crash records may persist for a limited period, including in aggregated or de-identified form.

6. Security

We protect your data with encryption in transit, access controls, and reputable infrastructure providers, and we limit who can access it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to keep your information protected.

7. Children

Repva is not directed to children under 13, and you must be at least 13 (or the minimum age of digital consent in your country) to use it. We ask for your date of birth during sign-up and do not create accounts for anyone under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us at support@repva.fit and we will delete it.

8. Additional Disclosures for U.S. State Residents

California (CCPA/CPRA). In the past 12 months we have collected these categories of personal information: identifiers (such as your email address, account identifier); customer records and characteristics (such as optional date of birth and bodyweight); health and fitness information (such as bodyweight, and, with your permission, cardio workouts, including their heart rate); internet or app activity (such as product events and crash reports). Some of this is “sensitive personal information” (health-related data); we use it only to provide the Service and do not use or disclose it for purposes that would trigger a right to limit its use. We do NOT sell or share your personal information as those terms are defined by the CCPA/CPRA, and have not done so in the past 12 months. California residents have the right to know, access, correct, delete, and port their personal information, and not to be discriminated against for exercising these rights. To exercise them, delete your account in the App or contact us at support@repva.fit. Under California’s “Shine the Light” law (Civil Code §1798.83), we do not share personal information with third parties for their own direct marketing.

Nevada. Nevada residents have the right to opt out of the sale of certain covered personal information. We do not sell your covered information; for questions, contact support@repva.fit.

Other U.S. states. Residents of some states (such as Virginia, Colorado, Connecticut, and Utah) may have rights to access, correct, delete, and port their data and to opt out of targeted advertising or the sale of personal data. We do not engage in targeted advertising or the sale of personal data. To exercise any available right, contact support@repva.fit.

9. Changes to This Policy

We may update this policy from time to time. We will revise the “Last updated” date, and for material changes we will make reasonable efforts to notify you in the App. Continued use after an update means you accept the revised policy.

10. Contact

GRYND LLC — for privacy questions or requests, contact us at support@repva.fit or via Send Feedback in the App.