Reps
Español
Privacy Policy
Last updated: 23 September 2026
Reps is a social network for people who train. This page explains, in plain language, what we collect, why, who else sees it, and how you get rid of it.
1. Who we are
Reps ("Reps", "we", "us") is developed and operated by Julián Hardie and Evan Lynch, who are jointly the data controllers for the information described here.
You can reach us at [email protected] with any question about this policy or about your data.
2. You must be 16 or older
Reps is not for children. You need to be at least 16 years old to create an account. We do not knowingly collect data from anyone younger, and if we learn that an account belongs to someone under 16 we delete the account and its content.
If you are a parent or guardian and believe your child has an account, write to [email protected] and we will remove it.
3. What we collect
Account information
- Your email address and a password, stored only as a cryptographic hash and never in readable form. If you sign in with Google, we receive your email address and basic profile information from Google instead.
- Your username, display name, biography, profile picture and profile banner.
Body and training data
This is the sensitive part, so we are explicit about it. If you choose to enter them, Reps stores:
- Your age, height and body weight.
- Body measurements you log — waist, arms, chest or any other site you record — with their date.
- Progress photos, which may show your body.
- Your training record: personal records, lifts, workout sessions, routines, exercises, runs and rides, streaks, goals and achievements.
In the European Union some of this qualifies as health data, a special category under the GDPR. We process it only because you explicitly chose to enter it, for the sole purpose of showing it back to you and to whoever you decided to share it with. We never use it for advertising and we never sell it. You can delete any entry at any time, and deleting it removes it from our database.
Body weight and measurements are kept separate from the rest of your progress inside the app, and they are private by default. A waist measurement is not an accomplishment to publish; it is a private number you track for yourself. Nothing about your body is posted anywhere unless you deliberately choose to post it.
Content you create
- Posts (text, photos and videos), stories, captions, comments, reactions, likes and shares.
- Drafts you have not published yet, so you can come back to them.
- Saved posts and the folders you organise them into.
- Custom stickers you create.
Messages
Direct messages and group chats, including their media, reactions and delivery state. Messages are not end-to-end encrypted: they are encrypted in transit and at rest, but they can be read by our systems when required to run the service, to respond to a report of abuse, or when the law requires it. Please do not use Reps to send information you need to keep absolutely confidential.
Some media can be sent as view once or with an expiry. That media is deleted from our servers when it expires, but we cannot prevent the recipient from taking a screenshot.
Your social activity
Who you follow and who follows you, follow requests, accounts you block or mute, posts you hide, and profile views — who looked at your profile, a feature you can turn off in settings.
Location — the Crossings feature
Crossings is optional and off until you turn it on. It lets Reps notice when you and another user trained near each other. Because location is the most sensitive thing an app can ask for, this is exactly how it works:
- While the feature is on, your device sends its position about once a minute.
- We keep one single row per user: where you are right now. Every new position overwrites the previous one. We do not keep a location history or any trail of your movements.
- No user can ever read another user's location. That is not merely a promise our app keeps — it is enforced by the database itself: no access rule grants anyone another person's row, and the comparison between two positions happens inside a privileged server function where the caller cannot see the values.
- A crossing is only recorded when two people are within 120 metres of each other for at least 60 seconds. Walking past someone does not count.
- When a crossing is recorded, the point stored is the midpoint between the two people — which is neither person's actual position — frozen at that moment. It is never updated, so a pin on the map can never follow anybody.
- Turning the feature off immediately erases your stored position, and you stop matching with anyone.
On iOS and Android you can also revoke the location permission from your system settings at any time, which stops all of the above.
Device information and notifications
If you allow notifications, we store a push token for your device along with your notification preferences. We also collect basic technical data — device model, operating system version and app version — to diagnose crashes and problems.
Subscriptions
If you subscribe to Reps Pro, payment is handled by the Apple App Store or Google Play. We never see or store your card details. Through RevenueCat we only receive the status of your subscription: whether it is active, which plan it is, and when it renews or expires.
Usage analytics
We use PostHog to understand how the app is used in aggregate: which screens get opened, which features are used, where people get stuck and which errors occur. This helps us decide what to fix and what to build. It is not used for advertising, and we do not sell it.
Safety and moderation
Reports you send about a post, a message or a user, and the outcome of the review. Content may be scanned automatically for material that breaks our rules, such as nudity or violence, before it is published.
4. Why we use your data, and on what legal basis
| What for | Legal basis (GDPR) |
|---|---|
| Running your account and the core features of the app | Performance of our contract with you |
| Body weight, measurements and progress photos | Your explicit consent — you choose to enter them |
| Location for Crossings | Your consent — the feature is opt-in and revocable at any time |
| Push notifications | Your consent, given through the system permission |
| Keeping the platform safe: moderation, reports, abuse prevention | Our legitimate interest, and our legal obligations |
| Product analytics and crash diagnosis | Our legitimate interest in improving the app |
| Managing subscriptions | Performance of our contract with you |
| Responding to lawful requests from authorities | Legal obligation |
We do not sell your personal information, and we do not share it with advertisers.
5. Who else processes your data
We rely on a small number of providers. They act on our instructions and may not use your data for their own purposes:
| Provider | What they do |
|---|---|
| Supabase | Database, authentication and file storage for photos and videos |
| Stream | Chat infrastructure and automated content moderation |
| Expo | Delivery of push notifications |
| RevenueCat | Subscription status management |
| PostHog | Product analytics |
| Apple and Google | App distribution and payment processing |
| Giphy | GIF search, when you open the GIF picker |
| Cloudflare | Domain, DNS and hosting of this website |
We also disclose data when the law requires it, when it is necessary to protect someone's safety, or as part of a merger or acquisition — in which case we would tell you beforehand.
6. Where your data is stored
Our servers and those of our providers are located in the United States. If you use Reps from the European Union, your data is transferred outside the EU. Those transfers are covered by the Standard Contractual Clauses approved by the European Commission, which our providers incorporate into their terms.
7. How long we keep it
- While your account is open: your profile, content and training data stay until you delete them.
- Stories: expire automatically 24 hours after being posted. You may keep a private copy in your archive.
- Ephemeral media in messages: deleted from our servers when it expires.
- Location: your current position is overwritten with every update and erased when you turn the feature off. A crossing keeps only the frozen midpoint.
- Deleted content: removed from the app immediately and purged from backups within 30 days.
- Reports and moderation records: kept for up to 12 months after the case is closed, so that repeated behaviour can be identified.
- Deleted account: see the next section.
8. Deleting your account
You can delete your account from the app, under Settings, or from this page without installing anything.
Deleting your account permanently removes your profile, posts, stories, photos, videos, messages, training data, body measurements and location. It cannot be undone. Copies may survive for up to 30 days in encrypted backups, and messages you sent may remain visible in the other person's conversation, since they are that person's data too.
9. Your rights
Wherever you live, you can ask us to:
- Access the data we hold about you, and get a copy of it.
- Correct anything inaccurate.
- Delete your data.
- Export it in a portable format.
- Object to or restrict certain processing.
- Withdraw your consent at any time — for example by turning Crossings off — without affecting what was done before.
Write to [email protected] and we will reply within 30 days. We may ask you to confirm your identity first, so that nobody else can request your data.
European Union: you also have the right to lodge a complaint with your national data protection authority.
California: you have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA.
10. Security
Data travels encrypted over TLS and is stored encrypted at rest. Passwords are stored only as hashes. Access rules at database level determine what each account may read, so one user cannot read another user's private data even if the app asked for it. Even so, no system is perfectly secure. If a breach affects your data, we will notify you and the relevant authority as the law requires.
11. Changes to this policy
If we change something material, we will announce it in the app before it takes effect and update the date at the top of this page. Continuing to use Reps afterwards means you accept the new version.
12. Contact
Questions, requests or complaints: [email protected].