Privacy Policy

• Summary
• What we collect
• How we use it
• Legal bases
• Health data
• Sharing
• Storage & security
• Retention & deletion
• Your rights
• Contact

The short version

Lode is a workout tracker. We collect the account details you give us and the training data you log, so we can sync it across your devices and show you your progress. We don’t sell your data, we don’t use it for advertising, and health data (like body weight or heart rate) is used only to power features you’ve turned on. Lode is offline-first: your data lives on your device and syncs to our servers only so you can back it up and access it elsewhere. You can export or delete your data at any time.

Who we are

This policy applies to the Lode mobile app, the Lode Wear OS companion, and the Lode web portal at app.lode.fit (together, “Lode” or “the Service”). In this policy “we”, “us” and “our” refer to the operator of Lode. For any privacy question, contact us at privacy@lode.fit.

What we collect

Account & profile

When you create an account we collect your email address and an authentication credential (a password, or a token from Google if you use “Continue with Google”). During onboarding and in Settings you may optionally provide a username, display name, country and a profile photo. This lets us identify your account and personalise the app.

You may also optionally give your sex, date of birth and height. These are used for one thing: estimating how many calories a cardio session burned, which depends on all three as well as your body weight. Leave them blank and we fall back to a rougher estimate based on weight alone — nothing else in the app changes. Unlike your username and display name, these three are never visible to other users; they are held in a separate store that only your own account can read.

Training data

The core of the Service: your workouts (exercises, sets, weights, reps, times, distances, RPE, notes and timestamps), routines and folders, and any custom exercises you create.

Body measurements & photos

If you use these features, we store the body measurements you log (e.g. body weight, body-fat percentage) and any progress photos you capture or import. Progress photos are stored in private storage that only your account can access.

Health & wearable data

If you connect a Wear OS watch or Android Health Connect, we process heart rate, calorie estimates, and body/cardio measurements to display live workout metrics and to sync measurements you choose to share. See “Health data” below.

Social activity

If you use the social features, we store who you follow, your follow requests, and the likes and comments you make. Workouts you post are visible according to the visibility you choose for each (Private, Followers, or Public).

Technical & crash data

To operate and secure the Service we process basic technical information such as your device type and OS version, app version, and log/diagnostic data associated with sync and errors.

If the app crashes or an operation like sync fails, an error report is sent to our crash-reporting provider (Sentry — see “Who we share data with”). A report contains your device make and model, OS version, app version, the error details and a short trail of technical events leading up to it. It may incidentally include your account’s internal identifier (a random ID, not your email) when a failed request contained it. Crash reports are used only to find and fix bugs — never for advertising or profiling — and are deleted automatically after a limited retention period.

How we use your data

• To provide the Service — storing, syncing and displaying your workouts, routines, measurements and photos across your devices.
• To calculate the stats and progress you asked for — volume, estimated 1RM, personal records, momentum, trends and the training heatmap.
• To power features you enable — live watch metrics, Health Connect sync, rest-timer and reminder notifications, and social interactions.
• To authenticate you and keep your account secure.
• To fix bugs, prevent abuse, and improve the Service.

We do not sell your personal data, and we do not use it for third-party advertising or profiling.

Legal bases (UK/EU GDPR)

Where UK/EU data protection law applies, we rely on:

• Contract — to provide the Service you signed up for (your account and training data).
• Consent — for optional integrations such as Health Connect and other health data, which you can withdraw at any time.
• Legitimate interests — to secure the Service, prevent abuse, and improve the product, balanced against your rights.

Health & Health Connect data

Health and fitness information — including heart rate, body weight, body-fat percentage and cardio metrics — can be sensitive. We treat it with extra care:

• We access Health Connect data only after you grant permission, and only the data types needed for the features you use.
• Health Connect data is used solely to display and sync your fitness metrics within Lode. It is never used for advertising and is never sold or shared with third parties for their own purposes.
• You can revoke Health Connect access at any time in Health Connect or your device settings; revoking stops further access immediately.
• Deleting the relevant data in Lode removes it from our servers on the next sync.

Who we share data with

We share data only with service providers who process it on our behalf, and only as needed to run Lode:

• Supabase — our backend and hosting provider (authentication, database, and private file storage). Supabase processes your data under our instructions to store and sync it.
• Google — only if you choose “Continue with Google”, to verify your identity. We receive your email and basic profile from Google; we do not post to your Google account.
• Sentry (Functional Software, Inc.) — crash and error reporting, so we can find and fix bugs. Sentry receives the technical error reports described under “Technical & crash data”; our Sentry data is hosted in the EU (Frankfurt). Sentry does not receive your workouts, measurements or photos.

The only data visible to other Lode users is what you deliberately make social — your public profile and any workouts you post as Followers-only or Public. Private workouts and all body measurements and photos are never shown to other users. We may disclose data if required by law.

Storage & security

Lode is offline-first: your data is stored on your device and synced to our servers so you can back it up and use it on other devices. Data in transit is encrypted (HTTPS), access to your rows is restricted to your account by row-level security, and progress photos are held in private storage reachable only with your authenticated, time-limited links. Your data is stored with our infrastructure provider, Supabase, and may be processed in the regions where Supabase operates on our behalf. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your information.

Data retention & deletion

We keep your data for as long as your account is active. You’re in control:

• Reset data — Settings → Reset data lets you delete specific data (workouts, routines, measurements, photos, custom exercises, profile picture) locally and in the cloud.
• Delete your account — contact privacy@lode.fit and we will delete your account and associated personal data, except anything we must retain for legal reasons.
• Sign out — signing out clears Lode’s data from that device.

Your rights

Depending on where you live, you may have the right to access, correct, export, delete, or restrict processing of your personal data, and to withdraw consent. You can exercise most of these in-app (Settings), or contact us and we’ll help. If you’re in the UK/EU and unhappy with our response, you can complain to your local data protection authority (in the UK, the ICO).

Children

Lode is not intended for children under 16 (or the minimum age of digital consent where you live). We do not knowingly collect data from children below that age.

Changes to this policy

We may update this policy as the Service evolves. We’ll change the “last updated” date above and, for material changes, provide a more prominent notice.

Contact

Questions or requests about your privacy? Email privacy@lode.fit.