1. Information We Collect

Account information: When you sign up, we collect your name and email address. If you sign in with Google, we also receive your profile picture URL from Google.

Fitness data: Workout sessions (name, notes, start/end time), individual sets (exercise, reps, weight, distance, duration, rest time, notes), and personal records.

Profile preferences: Your optional bodyweight, your preferred weight unit (lbs or kg), and your preferred distance unit (miles or km).

Custom exercises: Any exercises you create in the exercise library.

Technical information: When you sign up or request a password reset, we briefly read your IP address to enforce rate limits and prevent abuse. These IP addresses are held in server memory only, are never written to our database, and disappear on their own within minutes. Our hosting provider also keeps its own standard server logs — see Section 4.

2. How We Use Your Information

Your data is used solely to provide, operate, and improve RightTrack — to display your workout history, power your analytics, deliver account emails, and keep the service secure. That is the full extent of it.

We will never sell, rent, license, or share your personal data with advertisers, data brokers, or any third party for commercial or marketing purposes. We do not run Google Analytics, ad tracking pixels, or any behavioral tracking tools, and we do not build advertising profiles or track you across other websites. Your fitness data belongs to you.

3. Cookies and Data Stored on Your Device

Cookies: We use a single essential cookie — your sign-in session token, set when you log in — to keep you signed in and to protect against cross-site request forgery. We do not use advertising, marketing, or third-party tracking cookies, which is why you will never see a cookie consent banner here. Signing out clears the session cookie.

Local storage on your device: RightTrack is offline-first. To let you log workouts without a connection, your browser keeps a copy of your workouts, sets, exercise library, personal records, and preferences in local storage (IndexedDB), along with a queue of any changes waiting to sync. The app also caches pages so it can load offline. This data lives on your device, not on an additional server.

On shared devices: That local copy stays in the browser after you close the app so your unsynced work is never lost. It is erased automatically when a different account signs in on the same browser, and you can remove it yourself at any time by clearing site data in your browser settings. If you use a shared or public device, we recommend signing out and clearing site data when you finish.

4. Data Storage and Third-Party Services

Your data is stored and processed using the following sub-processors:

These providers process data on our behalf and are not permitted to use it for their own purposes. They may store data on servers in the United States.

5. Who Can Access Your Data

Your workout data is visible only to you when you are signed in. It is never shown to other users, and there are no public profiles or social features.

RightTrack has an administrator account used to operate the service and handle abuse. An administrator can see a list of accounts — name, email address, sign-in method, number of workouts logged, email verification status, and join date — and can suspend or delete an account. Administrators do not use this access to read the contents of your workouts, and we access account data only when necessary to run the service, respond to your request, or comply with the law.

6. Data Retention and Deletion

We keep your data for as long as your account is active, because the service exists to show you your own history over time.

You can ask us to delete your account at any time by emailing the address in Section 10. We will permanently delete your account and all associated data — workouts, sets, personal records, custom exercises, and preferences — within 30 days of your request, and usually much sooner. Deletion is permanent and cannot be undone.

Deleting your account removes your data from our database. Any copy still held in your own browser is cleared when you clear that browser's site data.

7. Your Rights and Choices

Whatever jurisdiction you live in, we will honor the following on request, free of charge:

• Access: ask what personal data we hold about you.
• Copy / portability: request a machine-readable copy of your account and fitness data.
• Correction: fix anything inaccurate. Your name, bodyweight, units, workouts, and sets are all editable directly in the app.
• Deletion: have your account and data permanently erased, as described in Section 6.
• Objection: tell us to stop processing your data, which in practice means closing your account.

To exercise any of these, email us at the address in Section 10. We will respond within 30 days. We will never charge you, degrade your service, or deny you features for exercising these rights. If you are in a jurisdiction with a data protection authority and you believe we have mishandled your data, you also have the right to lodge a complaint with that authority — though we would appreciate the chance to put it right first.

8. Security

Passwords are hashed with bcrypt and never stored in plaintext — we cannot see or recover your password. All data is transmitted over HTTPS. Sign-up and password reset requests are rate limited to deter automated abuse. We do not store payment information of any kind.

No online service can promise perfect security. If we ever discover a breach affecting your personal data, we will notify affected users by email without undue delay, along with any regulator we are required to inform.

9. Children's Privacy

RightTrack is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will change the effective date at the top of this page. If a change materially affects how we handle your personal data, we will also notify you by email or an in-app notice before it takes effect. Continued use of RightTrack after changes take effect constitutes acceptance of the updated policy.

11. Contact

If you have any questions about this policy, want to exercise any of the rights in Section 7, or would like to request deletion of your data, please contact:

Email is the fastest way to reach us. If you need a postal address for a formal or legal request, ask and we will provide one.