Privacy Policy

Musclory ("we", "the app") respects your privacy. This policy explains what we collect, why, and your choices. By using Musclory you agree to this policy.

1. Information we collect

• Account: email and display name you provide at sign-up (or via Google/Apple sign-in).
• Fitness data: workouts, sets, weights, body measurements, nutrition and water logs, goals, the data you enter to use the app.
• Social content: posts, comments, photos and messages you choose to share.
• Device tokens: a push-notification token so we can deliver notifications.
• Diagnostics: anonymous crash/error information to keep the app stable.
• Health & fitness data from Health Connect (Android) or Apple Health (iOS), only if you connect it: steps, active energy burned, total energy burned and body weight are read, and completed workouts may be written back. The connection is off by default and requires your explicit permission.

2. How we use it

To provide and improve the app: save your training and nutrition, power your stats and AI coaching, deliver notifications and social features you opt into, and fix crashes. We do not sell your personal data.

2a. Health & fitness data

Health Connect / Apple Health data is used for one purpose only: to show your own activity inside the app, your step count and calories burned alongside the workouts and meals you log, so your daily energy balance is accurate. Workouts you complete in Musclory may be written back so your health app stays in sync.

• It is never sold, rented or shared with any third party, and never used for advertising.
• It is not used for any purpose other than the features described above, and never transferred for research, analytics or profiling.
• It is stored only in your own account on our backend, protected by the same row-level security as the rest of your data.
• You can revoke access at any time in Health Connect / Apple Health, or from Settings → Integrations in Musclory. Revoking stops all reading and writing immediately.
• Deleting your account deletes this data along with everything else.

3. Storage & security

Your data is stored on our backend provider (Supabase) with row-level security so each account can only access its own data. Payments made by crypto are processed on public blockchains and on your own wallet, we never receive or store card details or wallet keys.

Deleted and edited messages. When you delete a message for everyone, it stops being visible in the conversation straight away and the other person sees only that a message was deleted. You can also edit a message you sent for up to 20 minutes; the conversation then shows the new text marked as edited. In both cases a copy of what the message said before is kept for 30 days, readable by our moderation team alone, so that abuse and harassment reports can actually be investigated after the evidence has been changed or removed. After 30 days it is erased automatically by the same nightly job that erases deleted accounts. Nobody outside moderation can read it, including the person who sent it and the person who received it.

4. Sharing

Content you post to the community is visible to other users by design. We share data with service providers only as needed to run the app (hosting, push delivery). We may disclose data if required by law.

5. Your rights

You can edit your profile, delete your posts, and delete your account (Settings → Account → Delete account), which removes your personal data. You can disable notifications from your device settings.

6. Children

Musclory is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect their data.

7. Contact

Questions? Reach us on WhatsApp.