Privacy Policy

Last updated: August 17, 2026

UA Strength is a strength training tracker built for students in the Five College consortium. We take your privacy seriously. This policy describes what data we collect, how we use it, and the choices you have.

Data We Collect

• Account information: Your email address and a hashed password (Argon2id). We use your email to verify your account and send password reset codes.
• Workout data: The workouts, exercises, sets, reps, weights, rest times, and velocity measurements you log. This data is synced to our server so you can access it across devices and on this website.
• Nutrition data: Food and supplement entries you log, including name, timestamp, and macro/dose values.
• Apple Health workout summaries: If you import them in the app, workout type, duration, calories burned, and distance from Apple Health. We only read workout summaries — never heart rate, steps, sleep, or other Health data.
• Usage metadata: Timestamps and sync version numbers associated with your records for conflict resolution and ordering.

We do not collect location data, contacts, photos, browsing history, or any Apple Health data beyond the workout summaries described above. We do not use third-party analytics or advertising SDKs.

How We Use Your Data

• To provide your workout history, charts, and cross-device sync.
• To authenticate you and secure your account.
• To send email verification and password reset codes.

We do not sell, rent, or share your data with third parties.

Data Storage and Security

Your data is stored in a PostgreSQL database on a secured server. Passwords are hashed with Argon2id. Authentication tokens are signed with JWT and stored in your device keychain (iOS) or httpOnly cookies (web). All API traffic uses HTTPS/TLS. Biometrics you enter for BMR calculation on this website (weight, height, age, sex) are stored only in your browser's local storage and are never sent to our server.

Data Retention and Deletion

Your data is retained as long as your account is active. You can delete your account and all associated data at any time from the app (Account → Delete Account) or by contacting us. Deletion is permanent and cannot be undone — all workouts, exercises, sets, reps, nutrition entries, imported Health workouts, and authentication tokens are removed from the server.

Your Rights

You have the right to access, export, correct, or delete your personal data. To exercise any of these rights, contact us at the email below.

Children's Privacy

UA Strength is intended for college students and is not directed at children under 13. We do not knowingly collect data from children under 13.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact

For privacy questions or data requests, contact: support@ultimate-analysis.com