Stolen Reps

Privacy Policy

Last updated: July 17, 2026

The short version: Stolen Reps keeps your workout data on your phone. There are no accounts and no ads. The app does collect a small set of anonymous usage statistics (like "a workout was generated") so we can tell which features are working. These are never linked to you, and you can turn them off in Settings.

Who we are

Stolen Reps ("the app") is an offline workout app for iOS. This policy explains what the app does and doesn't do with your information.

Your workout data stays on your phone

The app has no user accounts, no login, and no server that receives your workout data. Everything you enter, including your athlete profile (such as training experience, optional age range and sex, home equipment, and any injury notes), the workouts you generate or build, and your workout history and logged sets, is stored only in local storage on your device. We cannot see any of it, and none of it is ever transmitted.

Anonymous usage statistics

To understand whether the app is actually useful, it records a small set of anonymous usage events: workout generated, session started, session completed, plan created, and plan week completed, plus standard app-open and app-install events. The only details attached are the training style and session length (for example "strength, 30 minutes") and the app version.

Website analytics

This website (www.stolenreps.app), separately from the app, also uses PostHog to understand which pages get visited and whether the "Join the free beta" button gets clicked. This helps us see whether the site is actually working, not just whether it exists.

Apple Health

Saving your workouts to Apple Health is off unless you turn it on in Settings, and iOS will also ask for its own permission before anything is written. You can revoke that permission at any time in Settings › Health › Data Access & Devices.

When it is on, we write only: the workout type, its start time and duration, and an estimated active-energy (calorie) figure. That estimate is calculated on your phone from the training style, how long you trained, and the bodyweight you entered — it is not measured by any sensor, and we say so in the app. We do not read any data out of Apple Health.

Health data written by the app stays on your device and in your own Apple Health store, which is controlled by you and covered by Apple's privacy protections. It is never sent to us or to any third party, is never included in the anonymous usage statistics described above, and is never used for advertising, marketing, or any use-based data mining. If you later share Health data with another app (for example Garmin or Whoop), that sharing happens through Apple Health under your control, not through us.

Tracking & advertising

The app contains no advertising and no cross-app tracking. We do not use the Advertising Identifier (IDFA), we do not track you across other apps or websites, and we do not sell or rent any data. The anonymous usage statistics above are the only analytics in the app.

Network use

The app is designed to work fully offline. It reaches the internet only to load optional exercise-demonstration images from a public, open-source exercise database hosted on GitHub (these requests fetch a static image by name and include none of your personal or workout data), and to deliver the anonymous usage events described above. If you are offline, or if you turn usage sharing off, the app keeps working.

How your data is shared

We do not sell, rent, or share your personal data; your workout data never reaches us in the first place. The one third party involved is PostHog, which processes the anonymous usage events described above on our behalf and receives nothing else.

Deleting your data

All of your workout data lives on your device, so you can remove it at any time by deleting the app from your iPhone, which permanently erases everything the app stored. Turning off "Share anonymous usage stats" in Settings stops any future usage events. Because past events are anonymous, they cannot be traced back to you, which also means we have no way to look up or delete any specific person's events (there is nothing that identifies you in them).

Children's privacy

Stolen Reps is intended for adults. It is not directed to children under 13, and since it requires no account and collects no personal information, it does not knowingly gather any information from children.

Changes to this policy

If a future version of the app adds a feature that changes how data is handled (for example, optional cloud sync or an optional AI feature that would send data to an external provider), we will update this policy and clearly disclose it before that feature sends your data anywhere. This update, which added the anonymous usage statistics described above along with an in-app switch to turn them off, is that promise being kept.

Contact

Questions about this policy? Email stolenreps@gmail.com.