Privacy Policy

Effective: September 16, 2026 · Workout X-Ray LLC

1. Who we are

Workout X-Ray LLC, a Florida company, runs the Workout X-Ray app. Contact us at support@workoutxray.com.

2. What we collect, and where it goes

Information	Where it's kept	Who else handles it
Your answers: first name, sex, year of birth, height, weight, goals, equipment and training days	On your phone. Sent to our server to build your scan and plan, then not kept there.	Our hosting and network providers deliver it.
The workout you paste or type	Same as above	Same as above
Photos of your workout notes	Sent through our server to be read. We don't store photos.	Anthropic reads the text. It doesn't use them to train models, and deletes them within 30 days, except where it must keep them longer to enforce its usage policies.
Your plan, logged sets and weights, journal notes and moods	On your phone	No one, unless you back up.
Your email address and plan backup (only if you choose "Back up my plan")	Stored on our backup database so you can restore your plan. The backup includes everything in the rows above.	Supabase (backup storage, United States) · Resend (sends your sign-in links)
Payment and billing details (only if you buy a paid plan): card details, billing address, email and country	Held by Paddle, not by us. We never see or store your card details. Paddle tells us your email, which plan you bought and whether your subscription is active, so we can unlock your plan.	Paddle (our reseller and Merchant of Record) processes your payment and sales tax under its own privacy policy.
A record that you agreed	On your phone, and on our server: which versions of these documents you agreed to, when, and that you confirmed you're 18+ and completed the pre-training check. It's linked to a random ID for your device, and to your email only if you back up.	Stored with our backup provider (Supabase).
Basic technical information	Our server records which part of the app was requested, when, and whether it worked. It doesn't record what you typed.	Our hosting and network providers (such as Cloudflare) see your IP address to deliver the app and block attacks.

We don't ask which health condition applies to you in our pre-training check. We only record that you completed it.

During the free beta there are no payments, so the Paddle row above doesn't apply yet. We don't currently use analytics or error tracking. If we add either, we'll update this policy before we switch it on.

3. How we use your information

To score your workout and build, show and adjust your plan.
To back up and restore your plan, if you choose to.
If you buy a plan: to give you access to what you paid for, and to handle cancellations and refunds with Paddle.
To reply when you contact us.
To keep the Service secure and working.

We don't sell your information, use it for advertising, or share it with anyone except the service providers named here, who may only use it to provide their service to us.

4. Health information

Some of what you enter, such as your body measurements, training and journal notes, counts as "consumer health data" under laws in Washington, Nevada and some other states. Our separate Consumer Health Data Notice explains how we handle it, and we ask for your consent before building your scan.

5. How long we keep it

On your phone: until you clear your browser data or remove the app.
Plan backups: until you ask us to delete them.
Records that you agreed: for as long as we might need to show you agreed.
Photos: not kept by us. Anthropic deletes them within 30 days.
Purchase records (your email, plan and subscription status): for as long as you're a customer, and afterwards for as long as tax and accounting rules require.
Server records: a short period, for security and fixing problems.

6. Your choices and rights

You don't have to back up. Without a backup, nothing about your plan leaves your phone except when it's being scored or built.
You can clear the app's data from your phone at any time.
Email support@workoutxray.com to ask for a copy of your backup, to correct it, or to delete it. We'll confirm the request comes from your email address, and respond within 45 days.

If you're in the EU or UK, you also have rights under data protection law, including access, correction, deletion, restriction and objection, and you can complain to your local data protection authority. We process your information to provide the Service you asked for, and on the basis of your consent for health information.

7. Children

Workout X-Ray is only for people aged 18 and over. If we learn we hold information from someone under 18, we'll delete it.

8. Security

Information sent between your phone and our server is encrypted in transit. Backups are only available through a sign-in link sent to your email. No system is perfectly secure, so please keep your email account secure.

9. Where your information is processed

We and our service providers process information in the United States.

10. Changes

We'll post any changes here with a new effective date, and tell you in the app about important ones.