Reracked

Privacy Policy

Last updated: 16 July 2026

This Privacy Policy explains what information the Reracked Android app (“the App”, “we”, “us”) collects, how it is used, and the choices you have. Reracked is an offline-first strength-training log: your data lives on your device and is synced to our backend so it survives across devices and reinstalls.

1. Information we collect

Account information

Username and email address — used to create and sign in to your account.
Password — stored only as a salted, one-way hash. We never store or can read your plaintext password.

Workout data you create

Workouts, exercises, sets (reps, weight, RPE), routines, notes, dates, and session durations that you log in the App.

Diagnostics & analytics (optional)

We use Google Firebase Analytics and Crashlytics to understand feature usage and to receive anonymized crash reports so we can fix bugs. This may include a device-generated installation identifier, device model, OS version, and crash stack traces. It does not include your workout contents.
This collection is opt-out: you can turn it off at any time in Settings → “Share analytics & crash reports”.

2. What we do NOT collect

We do not collect your precise location, contacts, photos, or health/fitness sensor data.
We do not sell your personal information, and we do not use it for advertising.

3. How your information is used

To authenticate you and keep your account secure.
To store and sync your workout history across your devices.
To diagnose crashes and improve the App (only if diagnostics are enabled).

4. Where your data is stored

Your workout data is stored locally on your device and on our backend server (hosted on Railway, backed by a PostgreSQL database). Data in transit is protected with HTTPS/TLS. Your authentication token is stored in encrypted storage on your device.

5. Data sharing

We share data only with the service providers that make the App work:

Railway — application and database hosting.
Google Firebase (Analytics & Crashlytics) — usage analytics and crash reporting, when enabled.

We do not share your personal information with any other third parties except where required by law.

6. Data retention

We keep your account and workout data for as long as your account exists. When you delete your account, the data is removed as described below.

7. Deleting your account and data

You can permanently delete your account and all associated data at any time, directly in the App: Settings → Security → Delete Account. This permanently and irreversibly purges your account and every workout, routine, exercise, and set from our servers. Analytics and crash-report data collected by Firebase is anonymized and is retained under Google’s retention policies.

If you cannot access the App, you may also request deletion by emailing us (see Contact). Full instructions: Delete Your Account.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. You can access and edit your workout data in the App, and delete everything using account deletion. For any other request, contact us below.

9. Children’s privacy

The App is not directed to children under 13, and we do not knowingly collect personal information from them.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page.

11. Contact

Questions about this policy or your data? Email support@reracked.app.