Privacy Policy

Last updated: 8 July 2026

Muscle Memory (the "app") is developed and operated by Juandre Nimb, based in Cape Town, South Africa. This policy explains what data the app collects, why, and what your rights are. Plain language, no dark patterns.

What we collect

Account information (only when you sign in)

• Name and email address — from Google Sign-In, used to create and identify your account so your workouts sync across devices.
• A unique user identifier — generated by our backend (Supabase) to associate your data with your account.

You can use the entire app offline without signing in. Sign-in is only required if you want cloud sync.

Workout data

• Sessions you log: date, muscle groups trained, exercises with sets, reps, weights, and optional notes.
• Custom exercises you define and the muscle groups you tag them with.
• Program enrollment and progression history if you use a training program.

This data is stored locally on your device and, if you're signed in, also synced to our backend.

Subscription information

• Whether you have an active Muscle Memory Pro subscription and its renewal status — obtained from Google Play Billing via our subscription processor, RevenueCat.

We do not receive your payment card details. All payments are handled directly by Google Play.

Preferences (device-local only)

• Theme choice (light/dark), unit choice (kg/lb), and debug toggles.

What we do NOT collect

• Location data
• Contacts, photos, files, calendar, or messages
• Microphone or camera input
• Health or biometric data (heart rate, steps, sleep, etc.)
• Advertising identifiers
• Cross-app browsing history

The app contains no advertising SDKs, no third-party analytics trackers, and no cross-site tracking.

How we use your data

Your workout data is used exclusively to power the app's features — showing your history, calculating personal bests and progression, syncing between your devices. Your email is used to identify your account and, if we ever need to contact you about your subscription or a critical issue, to reach you.

We do not use your data for advertising, we do not sell it, and we do not share it with third parties beyond the processors listed below.

Who processes your data on our behalf

• Supabase (supabase.com) — hosts our database and handles authentication. Your workout data and email are stored on Supabase infrastructure. Supabase is a data processor, not an independent controller. See Supabase's privacy policy.
• Google Play Billing — processes your subscription payments and manages billing.
• RevenueCat (revenuecat.com) — receives subscription status events from Google Play to determine whether your Pro entitlement is active. RevenueCat does not receive your workout data. See RevenueCat's privacy policy.

Where your data is stored

Supabase hosts customer data in AWS data centres. Data may be stored and processed outside South Africa. All data in transit is encrypted with TLS (HTTPS). Passwords are never stored because sign-in is handled by Google — we only ever receive an identity token.

How long we keep your data

Your account and workout data are kept for as long as your account exists. If you delete your account (see below), all associated cloud data is removed immediately and irrevocably.

Your rights

• Access. Everything the app knows about you is visible inside the app itself — history, stats, custom exercises.
• Export. Muscle Memory Pro lets you export all your workout data as CSV or JSON from Settings.
• Delete. Open Settings → Danger zone → Delete account. This immediately removes all cloud-side data. Local data can be cleared by uninstalling the app.
• Complaint. If you're in South Africa, you may lodge a complaint with the Information Regulator (inforegulator.org.za). If you're in the EU/UK, contact your local data protection authority.

Children's privacy

Muscle Memory is rated for users 18 and over and is not designed for children. We do not knowingly collect data from anyone under 18. If you believe a child has provided us with data, please contact us and we will delete it.

Changes to this policy

We may update this policy occasionally. Material changes will be reflected in the "Last updated" date at the top and, where required by law, communicated in-app or via email.

Contact

Questions, deletion requests, or complaints:

Email: NimbJuandre@gmail.com
Developer: Juandre Nimb, Cape Town, South Africa

This policy is written to comply with the South African Protection of Personal Information Act (POPIA), the EU General Data Protection Regulation (GDPR), and Google Play's data safety requirements.