Privacy Policy
Last updated: September 8, 2026
Overview
Rebar ("we", "us") is a strength-training app that helps you log workouts, follow coached programs, and share progress with other lifters. This policy explains what we collect, why, and the choices you have. It applies to the Rebar mobile apps, the web app at getrebar.app, and our Apple Watch app.
What we collect
- Account info — email address, display name, username, profile photo, and optional profile details you choose to add (gender, experience level, training goal, bio).
- Training data — the workouts you log: exercises, sets, reps, weights, RPE, rest times, personal records, templates, and programs, plus derived metrics such as your Strength Score, muscle-coverage stats, and streaks.
- Body metrics — optional bodyweight, height, and weigh-in history you enter.
- Health data (optional) — if you use the Apple Watch app and grant HealthKit permission, we read heart rate and workout session data to display during your workout and save your session to Apple Health. HealthKit data is never used for advertising or shared with third parties for marketing.
- Content you share — your profile details and photo, and the workouts or records you choose to make visible on your profile or send to a challenge.
- Social graph — who you follow, your followers, and the challenges you take part in.
- Imported screenshots (optional) — if you use AI import, the workout screenshots or text you submit are processed by our AI provider solely to extract your workout history, then discarded from the AI provider after processing.
- Device & usage data — push notification tokens, device type, crash reports, and which screens are used, so we can fix bugs and improve the app.
What we don't collect
- We never see or store your payment card details. Subscriptions are processed entirely by Apple's App Store or Google Play.
- We do not sell your personal data to anyone.
- We do not show third-party ads or share data with ad networks.
- We do not request or collect your location. Rebar has no location permission, in the foreground or the background.
- We do not collect video. There is no video upload in the app.
How we use your data
- To provide the app: sync your training data across devices, power your coaching suggestions, and render your stats.
- To run the features you opt into: your public profile, the lifters you follow, your friends board, and challenges.
- To send push notifications you have enabled (follows, PRs, challenge results, reminders). You can turn these off any time in Settings.
- To maintain safety: enforcing community guidelines and responding to reports of abuse.
- To improve the app through aggregate usage patterns and crash diagnostics.
Who can see what
Your workouts and body metrics are private by default. You control what becomes visible to others:
- You can make your entire account private so only approved followers see your profile.
- You can opt out of leaderboards in Settings, which also removes your score from your public profile.
- Share cards are generated on your device and go nowhere until you choose to share one.
Service providers
We use a small number of infrastructure providers to run Rebar. Each receives only what is needed to perform its function:
- Google Firebase — authentication (including Sign in with Apple / Google), database, file storage, push notifications, and crash reporting.
- RevenueCat — subscription status management (receives an anonymous app user ID and purchase receipts, never your card details).
- Anthropic — AI parsing of workout screenshots you submit through the import feature.
Data retention & deletion
We keep your data for as long as your account exists. You can delete your account at any time in Settings → Delete Account, which permanently removes your profile, training data, and media from our systems. You can also request deletion or a copy of your data by emailing support@getrebar.app.
Children
Rebar is not directed at children under 13 (or the minimum age required in your country), and we do not knowingly collect data from them. If you believe a child is using Rebar, contact us and we will delete the account.
Security
Data is encrypted in transit, access to production systems is restricted, and per-user security rules enforce that only you (and the audiences you choose) can read your content. No system is perfectly secure, but we treat your training history and body data with the same care we'd want for our own.
Changes & contact
If we make material changes to this policy we will update the date above and notify you in the app. Questions? Email support@getrebar.app.