Workouter Privacy Policy

Information We Collect

• Account Information. When you create an account, we collect information such as your email address and password (or, if you sign in through a third-party provider, the basic profile information that provider shares with us).
• Workout Data.The core function of Workouter is letting you build workouts. This includes the exercises, intervals, durations, targets, and workout structure you create, along with any names or notes you give your workouts. This data is provided directly by you — Workouter does not access your device's GPS location and does not collect biometric or health readings (such as heart rate) directly. Workout-type settings, such as whether a swim is logged as pool or open water, describe the workout itself rather than your physical location or health status. By default, workouts you save are visible to other signed-in Workouter users in our public workout library alongside your handle (see How We Share Information below), and you can mark a workout private at any time to keep it visible only to you.
• Technical and Usage Data.We automatically collect certain information when you use the Service, including IP address, browser and device type, pages visited, and general usage patterns. We use this to keep the Service running reliably and to understand how it's used.
• Analytics.We use Google Analytics to understand aggregate usage of the Service, such as which pages are visited, how often, and how users navigate the Service. Google Analytics uses cookies and similar technologies to do this, and Google's handling of this data is governed by Google's own privacy policy.
• Advertising.To measure how our Facebook, Instagram, and TikTok ads perform, we use server-side conversion reporting — Meta's Conversions API and TikTok's Events API. When you subscribe, we send the relevant platform a record of that event from our own servers — matched using an ad click identifier (captured from the ad link you clicked) and a hashed, non-reversible version of your email address — so it can attribute the subscription to the right ad campaign. This is a server-to-server connection; we do not load Meta's or TikTok's tracking scripts in your browser. These platforms may combine this information with other information they already have about you, including from a Facebook, Instagram, or TikTok account, in accordance with their own privacy policies.
• Payment and Subscription Information. If you subscribe to a paid plan, your payment is processed by Stripe, Inc. We do not collect or store your full card number — Stripe handles that directly and is responsible for its own PCI-compliant security. We do receive and store limited billing-related information from Stripe, such as your subscription plan, billing status, and a Stripe customer identifier, so we can manage your subscription.
• Information We Do Not Collect. We do not collect precise device location, and we do not directly collect biometric or health readings (such as heart rate).

How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service, including generating Apple Watch–compatible workout files from the workouts you create
• Create and manage your account
• Process payments and manage your subscription through Stripe
• Save your workouts so you can return to them
• Enable future features, such as sharing a workout with other users, where you choose to do so
• Monitor, debug, and improve the Service
• Measure and deliver advertising, including through Google and Meta/Facebook advertising tools
• Communicate with you about your account or changes to the Service
• Comply with legal obligations

How We Share Information

We may share information with:

• Service providers who help us operate Workouter, such as our hosting provider and database provider, under obligations to protect your data
• Payment processor.Stripe, Inc. processes your payment information on our behalf, subject to Stripe's own privacy policy
• Advertising and analytics partners.We use Google Analytics, which shares usage information (such as pages visited) with Google LLC, and server-side conversion reporting (Meta's Conversions API and TikTok's Events API), which shares subscription events — matched via a hashed email address and ad click identifier, not a browser tracking script — with Meta Platforms, Inc. and TikTok so we can measure and optimize ad performance
• Other users. Workouts you create are included by default in a public workout library, visible to other signed-in Workouter users alongside your handle. The library is only visible to other signed-in users of the Service, not to the general public or search engines. You can mark a workout private at any time to remove it from the library.
• Legal or safety reasons, if required by law, or to protect the rights, safety, or property of Workouter, our users, or others
• In connection with a business transfer, such as a merger or acquisition, subject to standard confidentiality protections

We do not sell personal information in exchange for money. However, our use of advertising tools like the Meta Pixel may be considered a "sale" or "share" of personal information for cross-context behavioral advertising under laws like the California Consumer Privacy Act (CCPA). See Your Rights below for how to opt out.

Data Storage and Security

Workout and account data is stored in a PostgreSQL database. We use reasonable administrative and technical safeguards to protect your information, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain your account and workout data for as long as your account is active, or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where we are required to retain it by law. Deleting a workout, or marking it private, removes it from the public workout library, though it may briefly persist in backups for a limited time.

Cookies and Similar Technologies

We use cookies or similar technologies for:

• Essential functions, such as keeping you signed in and processing payments
• Analytics, through Google Analytics, to understand usage of the Service (see Information We Collect above)
• Advertising attribution, to remember which ad (if any) brought you to the Service, so a resulting subscription can be matched and reported to our advertising partners (see Information We Collect above)

Where required by law (for example, for users in the EU/UK), we will ask for your consent before setting analytics or advertising cookies, and you can withdraw that consent at any time through your browser settings. If you are in California or another state with a similar law, you can opt out of this use through the mechanism described in Your Rights below.

Your Rights

If you are in the European Economic Area or United Kingdom (GDPR):

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to certain processing
• Request a copy of your data in a portable format
• Withdraw consent at any time, where processing is based on consent

Our legal bases for processing your data include performing our contract with you (providing the Service), your consent (for example, for analytics and advertising cookies), and our legitimate interests in operating and improving the Service.

If you are a California resident (CCPA/CPRA):

You have the right to:

• Know what personal information we collect and how it's used
• Request deletion of your personal information
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information — you can do this by contacting us at developers@workouter.co. We honor opt-out preference signals such as Global Privacy Control (GPC) where required by law
• Not be discriminated against for exercising these rights

To exercise any of these rights, contact us at developers@workouter.co.

Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it.

International Data Transfers

Workouter is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the effective date above or through other reasonable means. We encourage you to review this policy periodically.

Contact Us

Questions or concerns about this Privacy Policy? Contact us at:

Workouter Co

developers@workouter.co