Smashin' Reps

Privacy Policy

Effective date: October 9, 2026. Smashin' Reps is operated by Smashin Reps, 14 North Wesley Ridge, Adairsville, Georgia 30103 ("we", "us"). Contact: support@smashinreps.com.

Smashin' Reps is a fitness and nutrition app with an AI coach. This policy explains what we collect, why, who helps us process it, and what control you have. We do not sell your personal information.

1. What we collect

Account and profile. Your name, email address, password (stored hashed by our authentication provider), the gym code you joined with, and your profile settings. An account can hold more than one profile, and each profile can be protected with a PIN.

Intake and goals. Age, height, current and goal weight, training experience, goals, equipment, schedule, preferences, and any injuries or limitations you tell us about.

Training data. Workouts, sets, weights, reps, effort ratings, session feedback, and exercise history.

Nutrition data. Foods you log, calories and macros, nutrition targets, water, and barcodes you scan.

Body and recovery data. Weight, body-fat and muscle measurements, sleep, energy, soreness, stress, pain, steps, and check-in notes.

Progress photos. Front, side, back and goal photos you choose to upload. They are stored privately and are never visible to a gym owner or trainer.

Coach conversations. The messages you send to the AI coach, the coach's replies, and the facts about you that you confirm for the coach to remember.

Payments. If you buy a membership on our website, Stripe processes your payment. We receive your email, plan, and subscription status. We never see or store your full card number.

Device and usage information. Basic technical data such as app version, device type, and error information, and your device's notification token if you allow notifications. The Android app can use your camera (progress photos and barcode scanning) and notifications, only when you allow it.

2. How we use it

We do not use your data for advertising, and we do not sell it.

3. Who processes your data

We use these service providers, and they receive only what each feature needs:

Provider What for What it receives
Supabase Database, sign-in, private photo storage, and server functions, hosted in the United States Everything you store in the app
OpenAI The AI coach, weekly programs and reviews, food lookups, and physique analysis Your training, nutrition, recovery, intake, and coach messages when you use those features; progress photos only when you run a physique analysis
Stripe Subscription payments and the billing portal Your email, payment details, and plan
Open Food Facts and USDA FoodData Central Looking up foods and barcodes The food search text or barcode, with no account details
Web hosting and content delivery Serving the app and exercise images from services such as GitHub and jsDelivr Your device's IP address and standard request data

We may also disclose information if the law requires it, to protect people's safety or our rights, or in a sale or transfer of the business.

4. AI processing

The coach and program builder send relevant parts of your data to OpenAI to generate answers and plans. We use OpenAI's API, and we do not allow OpenAI to use your data to train its models. AI output can be wrong; see our Health and Safety Disclaimer.

Physique analysis is optional. It sends the photos you pick, as short-lived private links, to OpenAI to describe visible changes. Do not use it if you are not comfortable with that.

5. Gyms and trainers

If you join through a gym or trainer, the gym owner and its trainers can see a snapshot of your stats, workouts, nutrition and adherence, along with the injuries and limitations you listed in your intake, so they can coach you safely. They may also receive alerts about achievements, trends, or possible injuries. You control this: the “Share with your gym” switch in Settings is on by default, and when you turn it off your gym can see that you are a member but none of your training data. They can never see your progress photos, coach chats or private notes. Your gym's own policies govern how they use what they see. Your gym's own policies govern how they use what they see.

6. How long we keep it

We keep your data while your account is active. When you delete your account (Settings, Delete Account), we delete your profile data, workouts, nutrition, measurements, progress photos, and coach history. We may keep limited records we are legally required to keep, such as payment and tax records, and backups, which are overwritten on their normal rotating schedule.

Anonymous statistics. We calculate combined statistics across many members, such as the average number of workouts completed per week. We only keep a figure when it is built from at least 10 people, and we never store a user or profile ID with it. These figures cannot reasonably be linked to you, so they stay after you delete your account. We commit to keep them in that anonymous form and not to try to re-identify anyone from them, and we will require anyone we share them with to make the same commitment.

7. Your choices and rights

Depending on where you live, you may have additional rights, such as access, correction, deletion, and the right to know what we collect. We will not discriminate against you for using them.

8. Security

Data is encrypted in transit, photos are stored in a private bucket, and access is controlled per account. No system is perfectly secure; protect your password and PIN.

9. Children

Smashin' Reps is for people 18 and older. We do not knowingly collect information from children. If you believe a child has given us information, email us and we will delete it.

10. Changes and contact

We will post changes here and update the date above. For important changes we will notify you in the app or by email. Questions: support@smashinreps.com.