PRIVACY
WITHOUT GAMES.

THE SHORT VERSION

• We do not sell personal information or health data.
• We do not use health data for advertising, marketing profiles, or data mining.
• Health connections are optional. Missing information stays missing and does not block the core app.
• Your raw health readings remain private unless you separately choose to share something.
• You can export your data, disconnect a provider, or permanently delete your account.

The public website uses Cloudflare's aggregate traffic and performance measurement. It uses no advertising tracker and does not track individuals across unrelated websites.

DATA WE PROCESS

Account and profile

Email address, authentication records, display name or handle, age bracket, height, bodyweight class, units, training background, goals, equipment, and choices about public visibility.

Training and score

Plans, exercises, sets, repetitions, weight, how a set felt, workout completion, estimated lift ranges, score inputs, score results, evidence coverage, and ranking history.

Optional health information

With permission, the app may read supported information from Apple Health or Health Connect, including aerobic fitness, bodyweight, sleep duration, resting heart rate, heart-rate variability, and optional body-composition measurements. Availability depends on the device and source app. The app requests only data types used by a visible feature.

Community information

Content you post, including workout videos and images, published workout snapshots, published creator-program versions, direct program deliveries, recommendation feedback, circles you join, reports or blocks you submit, moderation decisions, and the profile fields you choose to make public. Workout videos are processed into streaming formats and kept private until community review is complete. An opted-in ranking can show your handle, class, The Strong Score, chosen focus and exact weights, evidence coverage, freshness, formula version, and verification level. It does not show raw health readings.

Purchases, device, and reliability

Subscription entitlement and store transaction identifiers, push-notification tokens and preferences, app version, device platform, security events, and limited diagnostics needed to protect and operate the service. We do not receive your full payment-card number from Apple or Google.

WHY WE USE IT

We process data to provide and secure accounts, save workouts, calculate transparent scores, personalize weight and rep suggestions, deliver optional coaching, sync requested health information, operate community features, honor subscriptions, send requested notifications, prevent abuse, troubleshoot failures, and meet legal obligations.

When required, processing is based on performing the service you request, your consent for optional health permissions and public sharing, our legitimate interest in operating a safe service, or compliance with law. You can withdraw an optional permission without losing unrelated core features.

WHO HELPS OPERATE THE SERVICE

Configured production services may include Supabase for authentication and application data, Cloudflare for delivery, server functions, private workout-video upload, transcoding, storage, and signed streaming, Firebase for app integrity and push delivery, RevenueCat for subscription entitlements, and Apple or Google for store purchases and platform health permissions. OpenAI checks community post and reply text, attached photos, and sampled video frames for prohibited content. A separate OpenAI vision check evaluates sampled frames for fitness relevance and sexual content. Normal workout attire and nonsexual exposed skin are allowed. Frame sampling does not examine every moment or the audio, so videos also require a full human review before public sharing. These providers process only the information needed for their role under their terms and safeguards. We may also disclose information when required by law or necessary to protect users, rights, and service security.

Before using external AI, we ask for separate, explicit permission for Strong Coach and Workout Roulette. You can decline or turn sharing off in Profile > AI sharing. Permissions apply to the signed-in account on that device. Declining preserves the manual planner and local Roulette matching. Optional Strong Coach uses Cloudflare Workers AI to organize workout proposals from your goal, preferences, constraint notes, account context, current program, recent exercise and cardio history, readiness, and availability of optional health evidence. Cloudflare Workers AI also interprets constraint notes and plan revision text. After you allow Roulette AI sharing, Cloudflare Workers AI interprets the workout description you submit, while OpenRouter routes workout-matching inputs to TypeSafe's Jev model to compare already-valid workouts. Local history-aware matching is available by default without this sharing. Interpretation sends the description you enter. Matching sends your selected training focus, aggregate movement-pattern counts from recent completed training, and the proposed workouts' public exercise identifiers, movement patterns, and matching penalties. Roulette interpretation and matching do not attach account identifiers, raw health readings, recorded weights, or your full workout history. For Jev matching we request zero data retention and disable provider data collection. Cloudflare AI Gateway logging is disabled. Avoid including personal or health information in descriptions or revision text. Application rules validate supported changes and workout choices; AI does not calculate your Strong Score, suggested loads, or subscription access. Roulette remains usable when this assistance is unavailable.

We do not permit a processor to use health information for its own advertising.

STORAGE, TRANSFERS, AND RETENTION

Information may be processed in the United States and in other locations where a service provider operates. We use access controls, encryption in transit, private media records, short-lived signed playback links, provider safeguards, and separation of server credentials from the app. No system can promise absolute security.

We keep account data while the account is active and as needed to provide the service. Deleting a post or account revokes its application access promptly and queues attached media for provider deletion. Provider processing, protected backups, moderation appeals, security, fraud, financial, dispute, or legal obligations may require limited additional retention. Public posts may need a short processing period to disappear from caches. De-identified information that can no longer reasonably identify a person may be retained.

YOUR CHOICES AND RIGHTS

You can review and change profile visibility, revoke Apple Health or Health Connect access in system settings, disconnect supported providers, change notification permissions, export account data, correct profile information, and delete the account.

We offer access, correction, deletion, portability, and opt-out choices to all members. Depending on where you live, you may also have rights to know categories and recipients, limit certain sensitive-data uses, object to or restrict processing, appeal a decision, and receive equal service when exercising a right. We do not sell or share personal information for cross-context behavioral advertising.

Use the account deletion path or the official address on the Support page. We may verify a request to protect the account.

AGE AND HEALTH LIMITS

TheStrongApp is for people age 16 or older. Members who are 16 or 17 must have permission from a parent or legal guardian. We do not knowingly collect account data from anyone under 16. A parent or guardian who believes a younger person created an account should contact support.

TheStrongApp is a fitness and training tool, not a medical device or healthcare provider. It does not diagnose, treat, cure, or prevent any medical condition or predict an individual's lifespan. Do not use it as a substitute for professional medical advice. The Terms explain the training-safety responsibilities and risks that apply when using recommendations or member content.

CHANGES AND CONTACT

Material changes will be posted here with a revised effective date and, when appropriate, communicated in the app. The operator is NocturnalSun LLC, California, United States. Use the official address on the Support page for privacy questions.