Privacy Policy
This policy explains what Repwave collects, why, who it is shared with and the choices you have. Repwave is run by Ayesha Awais ("we"). Questions: info@swiftstudioz.com.
The short version: we use your data to run the app for you. We don't sell it, we don't show ads, and we never use health data for advertising. Without an account, your data stays on your phone.
Without an account
You can use Repwave without signing up. Your plan, logs and settings are then saved only on your phone, and we don't receive them. Barcode lookups, food search and crash reports still reach the services described below.
What we collect with an account
- Account: your email address and a password, which we store only as a one-way hash. If you sign in with Apple or Google we receive an account identifier and the email address they share (Apple may give a private relay address).
- Profile and plan: your goal, experience, equipment, training schedule, sex, birth year, height, weight, units and time zone, used to set your calorie, macro and training targets.
- What you log: food, water, workouts, sets, routines, weigh-ins, notes and settings, so they sync between your devices.
- Apple Health and Health Connect, only if you allow it: we read steps, active calories and weight, and write the workouts and weigh-ins you log. You can change this at any time in the Health app or Health Connect.
- Coach messages: what you ask the AI coach and its replies.
- Subscription status: whether you have Premium and when it renews or ends. Payment is handled by Apple or Google; we never see your card details.
- Diagnostics: crash reports (device model, system version, app version and what went wrong) and, unless you turn it off, anonymous usage events such as "workout finished" with counts only. These never include health values, food names, messages or your email.
If you contact us
When you use the contact form on our website or email us, we receive your name, email address and message. We use them only to answer you, keep them while the conversation is useful, and delete them on request.
The camera
The camera is used to scan barcodes and to check your exercise form. All of this is processed on your phone. No photos or video are recorded, saved or uploaded.
How we use it
- To run the app: your targets, plan, logs, streaks, records and sync.
- To answer the AI coach and build AI workouts, when you use them.
- To send password-reset emails and to answer messages you send us.
- To manage your subscription.
- To find and fix crashes and to understand which features are used.
We don't sell your data, use it for advertising, or track you across other companies' apps and websites.
Who we share it with
Only with the services that run parts of the app for us, and only what each one needs:
- Google (the Gemini API), for the AI coach and AI workouts. Only after you agree in the app. When you send a message or create an AI workout, your message and a summary of your data (profile, targets, today's food and water, steps, recent workouts and weight trend) are sent to Google to write the reply. Under Google's terms for the paid Gemini API, this data isn't used to improve Google's products.
- RevenueCat, Apple and Google, to process and check subscriptions.
- Resend, our email provider, to deliver password-reset emails and contact-form messages.
- Sentry, for crash reports, and PostHog, for anonymous usage events (you can turn these off in the app).
- Open Food Facts receives the barcode number when you scan a product, and the USDA FoodData Central database receives food search words from our server. Neither receives anything that identifies you.
We may also disclose data if the law requires it, or to protect people's safety.
Apple Health and Health Connect data
Health data is used only to provide the app's fitness features to you. It is never used for advertising or marketing, never sold, and never shared with anyone except as described above with your consent (the AI coach). The use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.
Where it's stored and how it's protected
Account data is stored on servers we operate in Pakistan, on encrypted disks, and is sent only over encrypted connections (HTTPS). Backups are encrypted. The services listed above may process data in other countries under their own safeguards.
How long we keep it
We keep your data while you have an account. When you delete your account, everything linked to it is deleted from our database straight away. Encrypted backups are kept for up to 6 months and then removed. Crash reports and usage events are kept by Sentry and PostHog for their standard periods.
Your choices and rights
- Export: Profile → Privacy and data → Export my data.
- Delete: Profile → Privacy and data → Delete account, or on the web at /delete-account.
- Turn off usage analytics, AI features or health access at any time.
- Depending on where you live, you may also have the right to access, correct or restrict your data, or to object to how it's used. Email info@swiftstudioz.com and we'll respond within 30 days. You can also complain to your local data protection authority.
Children
Repwave is not meant for anyone under 16, and we don't knowingly collect data from them. If you think a child has given us data, email info@swiftstudioz.com and we'll delete it.
Changes
If we change this policy we'll update the date above, and tell you in the app if the change is significant.
Contact
Ayesha Awais, info@swiftstudioz.com.