Legal

Privacy policy

Who we are

Barbells (barbells.app) is a workout tracking service ("Barbells", "we", "us"). Barbells is a trading name of Mark Stewart Development Limited, a company registered in England and Wales (company number 17110255), with its registered office at 167-169 Great Portland Street, London, England, W1W 5PF . Mark Stewart Development Limited is the data controller for the personal data described in this policy. You can reach us at support@send.barbells.app.

What we collect

• Account details. Your email address. If you sign in with Google, the email address and account identifier Google shares with us. If you register a passkey, its public key. Never the private part, which stays on your device.
• Training data. The templates, workouts, exercises, sets, weights, and equipment settings you enter while using the app.
• Billing data. Payments are handled by Stripe. We store your subscription status and a Stripe customer reference. We never see or store your card details.
• Technical data. IP addresses and request logs, processed to keep the service secure, rate-limit abuse, and debug problems.

Usage analytics

We use PostHog, an analytics service running in its EU region, to collect statistics about how Barbells is used: pages viewed and product events such as starting or finishing a workout. To do this, PostHog stores a small random identifier in your browser (in localStorage and a cookie). We use these statistics solely to understand and improve Barbells: never for advertising, and we do not share them with anyone else.

You can switch analytics off at any time, free of charge. If you have an account, use the "Usage analytics" toggle under Settings → Privacy. Or use the switch below, which takes effect in this browser immediately:

Why we can process your data

• Contract, to provide the service you signed up for: your account, your training log, and your subscription.
• Legitimate interests, to keep the service secure, prevent abuse, and collect the usage statistics described above.
• Legal obligation, to keep billing records we are required to keep for tax and accounting.

Who we share data with

We use a small number of service providers to run Barbells, each processing only what is needed to provide their service to us: Cloudflare (hosting and content delivery), Neon (database hosting), Stripe (payments), Resend (transactional email, such as login codes), and PostHog (analytics, EU region). We never sell your data and never share it for advertising.

International transfers

We choose UK or EU hosting where our providers offer it. Where a provider processes data outside the UK, the transfer is protected by UK-approved safeguards such as the International Data Transfer Agreement or Addendum.

How long we keep data

We keep your account and training data while your account is open. If you ask us to delete your account, we delete your account and training data within one month, keeping only the billing records we are legally required to retain.

Your rights

You have the right to access, correct, export, restrict, object to the processing of, and delete your personal data. To exercise any of these, including asking for a copy of your training data or deleting your account, email support@send.barbells.app from the address on your account. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes to this policy

If we change this policy, we will update this page and the date at the top. If a change meaningfully affects how we use your data, we will tell you in the app or by email first.