Privacy policy

1. Scope

This policy applies to the Logbook mobile application, truegain.app, and related services operated under the Truegain name (“Logbook,” “we,” “us,” or “our”).

2. Information we collect

Information you provide

• Account data: email address, username, display name, password in hashed form, unit preference, and authentication tokens. An account is optional unless you use cloud features.
• Training and wellness data: workouts, exercises, sets, weights, repetitions, rest times, notes, templates, programs, plans, training phases, and any body measurements or profile details you choose to enter.
• Gym and equipment data: gym names, addresses, coordinates you enter, equipment, attachments, grips, brands, and notes. Public gym and equipment contributions may be visible to other users; private gyms remain scoped to your account.
• Imports and scans: workout-export files or samples you submit for import, and equipment photos you choose to analyze. The app requests camera or photo-library access only when you use the scan feature.
• Communications: the contents of messages you send us and your contact details.

Information collected automatically

• Device and network data: IP address, device and operating-system information, app version, language, time zone, request timestamps, and diagnostic or security logs generated when you connect to our services.
• Purchase data: subscription or entitlement status, product identifiers, transaction metadata, and a RevenueCat user identifier. We do not receive your complete payment-card details; app-store providers process payments.
• Advertising and consent data: consent choices, advertising identifiers where permitted, ad unit and placement identifiers, and ad load, impression, display, and click/open events. Depending on your consent, settings, and region, Google may also process device, interaction, and approximate-location information to provide, measure, personalize, and prevent fraud in ads.

3. Local-first storage and cloud sync

Your workout history is written to your device first and core logging works without an account. Local data remains on your device unless you enable a feature that sends it elsewhere, such as cloud sync, import, a shared catalog contribution, a purchase, support contact, or an equipment scan.

If you create an eligible cloud account, the app sends supported account and training records to our servers so they can be backed up and synchronized across devices. Signing out does not erase the local copy. Deleting the app may remove local data that has not been synced or exported.

4. How we use information

• Provide workout logging, history, plans, reminders, imports, sync, backup, and shared gym or equipment features.
• Authenticate accounts, maintain subscriptions, restore purchases, and provide customer support.
• Display and measure ads, remember consent choices, and report ad performance alongside subscription performance.
• Secure, debug, maintain, and improve the services; enforce limits; prevent abuse and fraud; and comply with law.

Workout and program reminders are scheduled locally through your device’s notification system after you grant permission. Logbook does not need your precise live location to record workouts; location fields are used only when you or an authorized catalog contributor supplies them for a gym.

5. Advertising and tracking

The free version may use Google Mobile Ads (AdMob). Where required, we ask for advertising consent and Apple tracking permission before requesting ads. Your choice does not block workout logging. Ads may be contextual or, if you permit it, personalized. You can change relevant choices in your device privacy settings and may purchase an ad-free entitlement.

We record ad lifecycle events—including load, failure, impression/display, and click/open events—with placement, ad-unit, and impression identifiers. These events may be sent to RevenueCat so ad and subscription performance can be measured together. Logbook does not currently operate separate first-party behavioral analytics on the marketing site, and the site does not currently set an analytics cookie. If that changes, this policy will be updated and consent will be requested where required.

6. When information is shared

• Google/AdMob and its partners provide, measure, personalize where allowed, and protect advertising.
• RevenueCat manages purchase entitlements and receives purchase identifiers and the ad events described above.
• Apple App Store or Google Play processes purchases and may provide transaction and subscription status.
• Anthropic processes equipment photos submitted for name-plate analysis and limited file information—such as headers, a sample, and filename—submitted for automatic import-column mapping. These features are optional; manual entry and mapping remain available.
• Infrastructure providers host our API and database and process information on our behalf.
• Legal and safety recipients may receive information when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or complete a merger, financing, acquisition, or sale of assets.

We do not sell your workout history or contact information for money. Advertising disclosures may be treated as a “sale,” “sharing,” or targeted advertising under some privacy laws; applicable choices are described below.

7. Retention and security

We retain account and synced content while your account is active and as reasonably needed to provide the service, meet legal obligations, resolve disputes, prevent fraud, and maintain backups. Authentication tokens expire or are revoked. Temporary AI usage counters are short-lived operational records; submitted scans and import samples are sent for processing rather than added to your workout history unless you confirm the resulting data.

We use reasonable administrative, technical, and organizational safeguards, including hashed passwords and encrypted network transport in production. No storage or transmission method is completely secure.

8. Your choices and rights

• Use core logging without an account, decline optional fields, and export your history from the app.
• Control camera, photo, notification, and tracking permissions in device settings.
• Use the consent controls presented for ads, limit ad tracking through device settings, or purchase ad removal.
• Correct or delete records in the app, and delete your cloud account through the in-app account controls. Account deletion removes server-side account data associated through our database relationships; local data can be managed separately on your device.
• Depending on where you live, request access, correction, deletion, portability, restriction, or objection, and appeal a request decision. You may also opt out of covered targeted advertising, sale, or sharing.

To exercise a privacy right, email privacy@truegain.app. We may need to verify your identity. Authorized agents may submit requests where permitted by law. You may also complain to your local data-protection authority.

9. Children and international processing

Logbook is not directed to children under 13, and we do not knowingly collect personal information from them. If local law requires a higher age for consent, you must meet that age or use the service with valid parental authorization.

We and our providers may process information in countries other than yours. Where required, we use recognized safeguards for international transfers.

10. Changes and contact

We may update this policy as the product or law changes. We will post the revised policy here, change the effective date, and provide additional notice when required.

Questions or requests can be sent to privacy@truegain.app. General support is available at hello@truegain.app.