Privacy Policy

Effective date: October 27, 2026

This policy explains how Ishikawa Hideki ("we") handles information in the RepLog app ("the app"; とれろぐ in Japanese).

1. Summary

• You can use the app without creating an account.
• Everything you record is stored on your device. On iPhone, a backup is also saved to your own iCloud (section 7). We have no servers and cannot see your records.
• The app shows ads. To show them, Google AdMob, Google's ad service, receives information such as details about your device (section 4). Your workout records, health data and settings are never passed on for advertising.
• The app sends us only crash reports (section 2) and usage data (section 3), both of which you can turn off in Settings. For ads, we receive only aggregate figures, such as the number of impressions. What you send us through the contact form is handled as described in section 10.

2. Crash reports

When the app crashes or hits an unexpected error, it sends the following to Firebase Crashlytics, a service of Google LLC, so that we can fix the problem.

• What is sent: details of the error (its type and message, and where in the code it happened); the device model, OS version and device state at the time of the error, such as free memory; the app version; and identifiers created when the app is installed (the Crashlytics installation ID and the Firebase installation ID).
• What is never sent: anything that identifies you, such as your name or email address; your workout records (exercises, weights, reps, notes and so on); your body weight, body fat or height. For database errors, only the error code is sent, never the content of your records.
• Purpose: to find and fix bugs, and nothing else.
• Retention: Firebase Crashlytics deletes this information after 90 days.
• How to opt out: turn off "Send crash reports" in the app's Settings (it is on by default).
• Where it goes: Google processes this information on our behalf and may store it on servers in the United States or other countries. See Google's Privacy Policy and Firebase's Privacy and Security page. Where the GDPR applies, we process crash reports on the basis of our legitimate interest in keeping the app working; you can object at any time by turning crash reports off.

3. Usage data

To improve the app, it sends information about which screens are opened and which features are used to Google Analytics for Firebase, a service of Google LLC.

• What is sent: the type of screen you open; the features you use (logging a set, using a routine and opening body status); when you open the app and how long you use it; ad requests, views and taps (recorded by the ad SDK); information about your device and the app (such as the device model, OS version, language and app version); an identifier created when the app is installed (the app instance ID); and your general region, estimated from your IP address (the IP address itself is not stored).
• What is never sent: your workout records (exercises, weights, reps, notes and so on); your body weight, body fat or height; anything that identifies you, such as your name or email address; advertising identifiers (the IDFA on iPhone or the advertising ID on Android).
• Purpose: to measure how the app is used so that we can improve it. It is never used for advertising.
• Retention: Google Analytics deletes user-level data 14 months after your last use of the app (aggregate figures are kept).
• How to opt out: turn off "Send usage data" in the app's Settings (it is on by default).
• Where it goes: Google processes this information on our behalf and may store it on servers in the United States or other countries. See Google's Privacy Policy and How Google uses information from sites or apps that use our services.

4. Ads

The app shows ads from Google AdMob, an ad service of Google LLC, at the bottom of the screen (above the tab bar). To show ads, Google's code built into the app (the SDK) sends the following information to Google. To decide whether the consent form (see "Your choices" below) must be shown, Google's User Messaging Platform, another SDK built into the app, also sends information such as your IP address to Google.

• What is sent: information about your device and the app (such as the device model, OS version and language); advertising identifiers (on iPhone, the IDFA only if you allow tracking; on Android, the advertising ID) and identifiers scoped to the app or the developer; your IP address, which may be used to estimate your general location; ad views and taps, and other interactions such as launching the app; and information about how the app and the SDK perform (such as launch time and errors).
• What is never sent: your workout records; your body weight, body fat or height; the app's settings.
• Purpose: to show ads, measure how they perform, prevent fraud and improve Google's ad services, and, where you have allowed it, to show ads tailored to you (personalized ads).
• Who receives it: Google, which may process it on servers in the United States or other countries. See Google's Privacy Policy and How Google uses information from sites or apps that use our services.
• We receive only aggregate figures, such as impressions and earnings, and never information about individual users.

Your choices

• iPhone: the app asks for permission to track the first time you use it. If you don't allow it, the IDFA is not used and you are not tracked (your information is not combined with information from other companies' apps and websites for advertising). You can change this later in Settings > Privacy & Security > Tracking.
• Android: you can delete or reset your advertising ID under "Ads" in your device settings (in Privacy or Google settings; the location varies by device).
• EEA, UK and Switzerland: the first time you use the app, it shows a consent form (Google's User Messaging Platform), and your information is handled according to your choices. You can change them at any time in the app under Settings > More > Ad privacy settings.
• Brazil (version 1.0.1 and later): if the app determines from your device's language and region settings that the device is in Brazil, it does not ask for permission to track and does not show personalized ads.

Ads are shown whatever you choose.

5. Information stored on your device

• Your workout records (dates, exercises, weights, reps, time, distance, calories, notes and so on), your exercises, categories and routines, and your settings are stored on your device.
• They are used only within the app and are never sent to us.
• They are deleted when you delete the app or use "Initialize data" in Settings.

6. Health data (Apple Health and Health Connect)

Only with your permission, the app reads and writes the following data in Apple Health on iPhone or Health Connect on Android.

• Body weight (read and write): shown as a trend chart and a list. Weight you log in the app is saved there.
• Body fat percentage (read and write): shown as a trend chart and a list, and combined with weight to calculate fat mass and lean mass. Body fat you log in the app is saved there.
• Height (read only): used to calculate your BMI.

• On Android, the app also asks for permission to read data recorded before you granted access (older than 30 days), so that it can show a full year of trends.
• Health data is used only on your device and is never sent to our servers or anywhere else off your device. It is never used for advertising, marketing or any other purpose.
• Health data is not stored in the app's database and is not included in backups (files or iCloud; section 7).
• You can change the permissions at any time in Settings > Apps > Health > Data Access & Devices > RepLog on iPhone (on iOS 17 or earlier, start from Settings > Health), or in Health Connect > App permissions > RepLog on Android. Data recorded by the app can be deleted in Apple Health or Health Connect.

7. Backups and sharing

• On iPhone, the app automatically saves a backup of your records to its folder in your iCloud Drive (for example, when you leave the app). It is stored in your own iCloud, and we cannot see it. You can turn this off with "Back up to iCloud automatically" in Settings (it is on by default). To bring your records back, for example after reinstalling the app, use "Restore from iCloud".
• On Android, if device backups (Google backup) are turned on, your operating system includes the app's records and settings in them.
• "Export backup" in Settings saves your records to a file. You choose where to save it (your device, iCloud Drive, Google Drive and so on). The file is not encrypted, so keep it somewhere safe.
• When you share a day's workout as an image or text, it is passed to the app you choose.
• If iCloud Backup (the backup of your whole iPhone) is turned on, your operating system includes the app's data in it.
• iCloud and Google backups are handled under Apple's or Google's terms.

8. Device features

• Notifications: the app notifies you when the rest timer ends and, if you turn on the workout reminder, on the days and at the time you choose. Both are scheduled on your device; no server is involved.
• Lock Screen timer: the remaining rest time, the exercise, and the weight and reps of your next set are shown on the Lock Screen (as a Live Activity on iPhone and a notification on Android). This happens only on your device; no server is involved. You can turn it off with "Show rest timer on Lock Screen" in Settings.
• Ratings: the app may show the App Store or Google Play rating prompt. Ratings are handled by Apple or Google, and we receive no information that identifies you.

9. Security

• The operating system stores the app's data separately from other apps, which cannot read it.
• Crash reports, usage data and the information sent for ads are sent over an encrypted connection (HTTPS).

10. Contact

We accept questions and requests through our contact form, which you can also open from "Feature requests & support" in the app's Settings. The form uses Google Forms, a service of Google LLC.

• We use what you write in the form (including any email address you give us so that we can reply) only to reply to you and to investigate problems. We do not share it with anyone else unless required by law.
• You can also use the form to ask us to access, correct or delete what you have sent us.
• If you are in the EEA, the UK or Switzerland, you also have the right to lodge a complaint with your data protection authority.
• If you are in Brazil, you have the rights set out in Article 18 of Brazil's General Data Protection Law (LGPD, Lei 13.709/2018): to confirm whether we process your data, to access it and to correct it; to have unnecessary or excessive data, or data processed in breach of the LGPD, anonymized, blocked or deleted; to data portability; to have data processed with your consent deleted; to know with whom we have shared your data; to be told that you can refuse consent and what happens if you do; to withdraw your consent; and to object to processing that is not based on consent. You can make these requests through the form. You can also file a petition with Brazil's data protection authority, the ANPD.

11. Changes to this policy

If we change this policy, we will post the update on this page with its date.

Last updated: November 6, 2026