Privacy policy

Last updated: August 6, 2026

This Privacy Policy explains how Strength Side LLC ("Strength Side," "we," "us," or "our") collects, uses, discloses, and protects personal information when you interact with our Services. "Services" means our websites (including StrengthSide.com), online store, mobile applications (including the Strength Side app and REPS), digital fitness programs, memberships, on-demand content, videos, classes, merchandise, customer support, marketing communications, and related products and services.

Strength Side LLC is the business responsible for the personal information described in this Privacy Policy unless another notice says otherwise. This Privacy Policy is a notice of our practices; it is not a request for consent where consent is required by law. By using the Services, you acknowledge that you have read this Privacy Policy.

1. Key privacy commitments

We do not sell personal information for money.
We do not sell or license workout or fitness information.
We do not use or disclose workout or fitness information for third-party advertising, targeted advertising, advertising measurement, or data-broker activity.
At launch, REPS does not connect to Apple Health or HealthKit and does not request access to health or fitness information stored on your device.
We use personal information only for the purposes described in this Policy, and we require service providers that handle app user data to provide the same or an equivalent level of protection.
We minimize access to personal information and retain it only as reasonably necessary for the purposes described below, subject to legal obligations.

Important website distinction. Our website may use cookies, pixels, and similar technologies for analytics and advertising. Disclosing website identifiers or browsing activity to advertising partners may be considered a "sale," "sharing," or targeted advertising under some privacy laws even though we do not receive money for it. You may opt out as described in Section 8. We do not include REPS workout or fitness data in those advertising activities.

2. Personal information we collect

The information we collect depends on which Services you use and the choices you make.

Information you provide

Contact information, such as your name, email address, telephone number, billing address, shipping address, and other delivery details.
Account information, such as your email or username, encrypted or hashed authentication credentials, account ID, preferences, settings, and subscription or access status.
Store and transaction information, such as products viewed or placed in a cart, purchases, subscriptions, renewals, trials, cancellations, returns, exchanges, refunds, transaction identifiers, and billing country or region.
Communications and user content, such as customer-support messages, survey responses, reviews, testimonials you submit for publication, and other information you choose to provide.
REPS workout and fitness information, such as exercise selections and levels, regressions or progressions selected, rep and set logs, workout completion, program progress, streaks, completion history, and preferences.
Profile photos, such as an image you choose to add to your account.

Information collected automatically

Device and network information, such as device and browser type, operating system, app version, language, IP address, general region derived from IP address, and device or account identifiers.
Website and app usage information, such as pages or screens viewed, features used, taps, clicks, video interactions, referring URLs, session activity, and the date and time of interactions.
Diagnostics and security information, such as crash data, performance data, error logs, authentication events, and records used to detect fraud, abuse, or security incidents.
Cookie and advertising information on our website, as described in Section 8.
Push-notification tokens if you enable app notifications. A notification token identifies an app installation for message delivery; it is not the content of your notifications.

Payment information

Payment-card details are processed by the payment provider presented at checkout, which may include Shopify, Shopify Payments, PayPal, Apple, or another disclosed provider. We generally do not receive or store your full payment-card number. We may receive limited transaction information, such as the product purchased, payment status, subscription status, renewal or cancellation status, transaction ID, and billing country or region.

Device permissions and optional integrations

At launch, REPS requests permission only to send push notifications. If you choose to add a profile photo, the app receives the image you select. It does not request access to Apple Health or HealthKit, Motion and Fitness, location, advertising identifiers, contacts, microphone, Bluetooth, calendars, or files. You can decline or later disable notifications in your device settings without losing core app functionality.

If a future version adds another protected device permission or integration, we will provide the required notice, request permission before access, and update this Policy and our App Store disclosures before collecting the additional information.

Information from other sources

Commerce and payment providers, including Shopify and the payment provider used for your transaction.
App stores and platforms, such as Apple, which may provide download, purchase, subscription, or device-related information subject to their own privacy notices.
Authentication, hosting, analytics, diagnostics, email, notification, video-delivery, and customer-support providers acting for us.
Advertising and marketing partners in connection with our website, where permitted by law and subject to your choices.
Other people or services when you direct them to provide information to us, or when permitted by law.

3. How we use personal information

Provide and administer the Services, accounts, purchases, subscriptions, memberships, deliveries, content access, and customer support.
Provide REPS workouts, remember exercise levels and preferences, save logs, calculate progress and streaks, and personalize the training experience.
Process and verify transactions, subscription access, renewals, cancellations, refunds, and entitlements.
Send transactional communications, service notices, security messages, and workout reminders you enable.
Send marketing communications when permitted; you can unsubscribe at any time.
Understand how our website, products, content, and app features are used; troubleshoot; test; develop; and improve the Services.
Protect accounts and the Services; detect and prevent fraud, abuse, security incidents, and violations of our Terms.
Comply with legal, accounting, tax, reporting, and regulatory obligations; establish or defend legal claims; and respond to lawful requests.
Create aggregated or de-identified information that does not reasonably identify you. We will not attempt to reidentify information that we maintain as de-identified, except to test whether our de-identification processes comply with law.

4. Legal bases for users in the EEA, UK, and Switzerland

Where applicable, we process personal information under one or more of the following legal bases: performance of a contract (to provide purchases, accounts, app features, and subscriptions); legitimate interests (to secure, maintain, understand, and improve the Services, prevent fraud, and communicate about our business, balanced against your rights); consent (for non-essential cookies, optional device permissions, direct marketing where required, and other optional processing); and compliance with legal obligations. If information processed through REPS is treated as special-category health data in your jurisdiction, we will rely on explicit consent or another condition permitted by law. You may withdraw consent at any time, without affecting earlier lawful processing.

5. How we disclose personal information

We may disclose personal information in the following circumstances:

Service providers and processors. We use vendors for hosting, database storage, authentication, content and video delivery, analytics, diagnostics, payment and subscription administration, order fulfillment, customer support, email, notifications, security, and fraud prevention. They may process information only to perform services for us or as otherwise permitted by law. We require providers that receive app user data to protect it to the same or an equivalent standard described in this Policy and required by Apple's rules.
Shopify. Shopify hosts our online store and processes information about your access to and use of our store. See Section 7.
Apple and other app platforms. They may process information relating to app downloads, purchases, subscriptions, device services, or app distribution under their own privacy notices.
Advertising and marketing partners. On our website only, we may disclose identifiers and website activity for analytics, marketing, or targeted advertising where permitted. We do not disclose REPS workout or fitness data for those purposes.
Professional advisers. We may disclose information to lawyers, accountants, auditors, insurers, and similar advisers subject to appropriate confidentiality obligations.
Legal, safety, and enforcement. We may disclose information when reasonably necessary to comply with law or valid legal process; investigate or enforce our Terms; detect fraud, abuse, or security issues; or protect the rights, property, and safety of Strength Side, our users, or others.
Business transactions. Information may be transferred in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, subject to appropriate safeguards.
At your direction or with your permission. We may disclose information when you ask us to or affirmatively authorize it.

At launch, providers supporting REPS include Clerk for authentication and accounts; Neon for the database; Vercel for the API and admin site; Vercel Blob for image storage; Cloudflare Stream for exercise-video delivery; Sentry for crash reporting and diagnostics; Expo/EAS for app builds and updates; Google Cloud for Google sign-in; Apple for Sign in with Apple and App Store distribution; and Shopify for purchases, subscriptions, and access status. Strength Side also uses Klaviyo for opt-in marketing email. Meta Pixel is used on the website only and is subject to the website choices in Section 8. Other infrastructure providers, such as domain and source-code services, may process limited technical information needed to operate and secure the Services.

6. What we do not do with fitness information

We do not sell workout or fitness information.
We do not disclose workout or fitness information to advertisers or data brokers.
We do not use workout or fitness information for third-party advertising, targeted advertising, advertising measurement, or unrelated profiling.
REPS does not access Apple Health, HealthKit, Motion and Fitness, or similar protected frameworks at launch.
We are not a healthcare provider, health plan, or healthcare clearinghouse, and the Services are not offered as a HIPAA-covered medical service. Do not submit medical records, emergency information, or information that the Services do not request.

7. Our relationship with Shopify

Our online store is powered by Shopify. Shopify collects and processes information about access to and use of the store to provide and improve Shopify's commerce services. Information submitted through the store may be transmitted to Shopify and to providers located outside your country. We may also use Shopify features that use information from your interactions with our store and, where applicable, other merchants to support fraud prevention, analytics, personalization, and advertising. In those circumstances, Shopify may be independently responsible for certain processing. Review Shopify's Consumer Privacy Policy at https://www.shopify.com/legal/privacy/consumers and its Privacy Portal at https://privacy.shopify.com/.

8. Cookies, website advertising, and opt-outs

Our website uses cookies, pixels, local storage, and similar technologies to operate the site, remember preferences, measure use, secure transactions, and support analytics and advertising. The website uses Meta Pixel for advertising and retargeting. Where required, Meta Pixel and other non-essential technologies remain blocked unless you accept them. You can decline them, reopen Cookie Preferences to change your choice, and use your browser settings. Blocking some cookies may affect site functionality.

Depending on where you live, you may opt out of disclosures used for targeted advertising or considered a "sale" or "sharing." We also honor Global Privacy Control signals where legally required and technically supported. Global Privacy Control applies to the browser or device sending the signal and may not apply across devices unless we can associate it with your account.

You may also use our Your Privacy Choices page at https://strengthside.com/pages/data-sharing-opt-out.

9. REPS app features and choices

Workout and progress data

REPS uses your workout entries and app interactions to deliver training, save your history, calculate progress and streaks, remember preferences, and improve the app. Workout information associated with your account is generally linked to you because it must sync with your account and remain available across sessions or devices. Strength Side staff do not routinely review individual workout histories; limited access may occur when necessary to resolve a support or security issue.

Sign-in methods

At launch, REPS supports email and password, Sign in with Google, and Sign in with Apple. The selected authentication provider processes the identifiers and authentication information needed to sign you in under its own privacy terms and our service-provider arrangements.

Analytics and diagnostics

We may use app analytics and diagnostic tools to understand feature use, troubleshoot crashes, protect the Service, and improve performance. REPS analytics are not used for advertising or marketing attribution. Depending on configuration, this information may be linked to an account or device. We do not treat app analytics as anonymous unless the identifiers are removed before collection and we do not attempt to relink the data.

Push notifications

If you enable notifications, we may send workout reminders, account notices, service messages, app updates, and occasional promotional offers. You can disable notifications in device settings. Notifications are not required for core app functionality.

Account deletion

All REPS users may initiate deletion of their full account and associated personal information through the account-deletion control in the app settings. We may require reauthentication or a reasonable confirmation step. Deletion removes the account and workout history that we are not legally required to retain; it is not merely deactivation. We will explain any processing time and confirm completion. You may also contact us for assistance using the details in Section 20.

Account deletion is separate from subscription cancellation

Deleting the app does not delete your account or cancel a subscription. Deleting your account also may not automatically cancel billing through Shopify. Before completing deletion, follow the website subscription-management or cancellation instructions shown for your purchase. REPS does not offer an Apple in-app-purchase subscription at launch unless Strength Side changes the purchase model before submission.

10. Consumer health data

Workout logs and related progress information may be considered "consumer health data" under certain U.S. state laws. Our separate Consumer Health Data Privacy Notice describes the categories, sources, purposes, disclosures, and rights that apply to this data. It forms part of this Privacy Policy and will be available at https://strengthside.com/pages/consumer-health-data-privacy-notice.

11. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy. Our general retention schedule is:

Account and REPS workout data: for as long as your account remains open. When you complete in-app account deletion, the account and workout history are permanently deleted from active systems, subject to limited legal records and temporary backup copies. For applicable Washington requests, deletion from archived or backup systems will be completed no later than six months unless an exception permits retention.
Orders, payments, refunds, tax, and accounting records: generally 7 years from the transaction or longer if required by law.
Customer-support communications: generally 3 years after the request is closed, unless needed longer for a dispute, safety, fraud, or legal matter.
App analytics, diagnostics, security logs, and notification tokens: only for as long as reasonably necessary to operate, secure, troubleshoot, and improve REPS, based on the applicable provider settings. We delete, aggregate, or de-identify this information when it is no longer needed, except when limited retention is required for an active security or legal matter.
Marketing records: until you unsubscribe or the information is no longer needed. We may keep a minimal suppression record so we can honor an opt-out.
Cookie and website advertising data: for the period stated in our cookie controls or the applicable provider's setting, and no longer than reasonably necessary for the disclosed purpose.

We may retain limited information longer when reasonably necessary to comply with law; establish, exercise, or defend legal claims; complete a transaction; prevent fraud or abuse; protect security; or enforce agreements. When feasible, we restrict or de-identify information kept for those purposes.

12. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These measures may include access controls, encryption in transit, vendor review, logging, backups, and procedures for responding to incidents. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Keep your credentials confidential and contact us if you suspect unauthorized account access. We will provide notices of a personal-data breach when required by law.

13. Your privacy rights and choices

Depending on where you live and subject to legal exceptions, you may have the right to:

confirm whether we process your personal information and access or obtain a copy of it;
correct inaccurate personal information;
delete personal information;
receive portable data in a usable format;
withdraw consent and stop future processing based on that consent;
object to or restrict certain processing;
opt out of targeted advertising, sale, or sharing as those terms are defined by applicable law;
limit certain uses of sensitive personal information where applicable;
appeal our refusal to act on a request; and
not receive discriminatory treatment for exercising a privacy right.

You may submit a request through an available in-product privacy control or by emailing yo@strengthside.com with "Privacy Request" in the subject line. We may verify your identity and, where permitted, ask for information reasonably necessary to process the request. Authorized agents may submit requests where allowed, subject to proof of authority and identity verification. We will respond within the period required by applicable law.

We send promotional messages by email only, through Klaviyo, and only to people who actively opt in. You may unsubscribe using the link in every marketing email. You may still receive non-promotional communications about your account, purchases, safety, or material Service changes.

14. Additional U.S. state disclosures

In the preceding 12 months, we may have collected the following categories of personal information: identifiers and contact details; customer records; commercial and transaction information; internet or electronic network activity; approximate location derived from IP address; audio, electronic, or visual information you choose to provide; account credentials; fitness or consumer health data; user content; and inferences such as preferences or progress derived from Service activity. We collect these categories from the sources in Section 2, use them for the purposes in Section 3, and disclose them to the categories of recipients in Section 5.

We do not sell personal information for money. Website advertising technologies may involve disclosure that some laws define as sale, sharing, or targeted advertising. You may opt out as described in Section 8. We do not sell or use REPS workout or fitness data for targeted advertising and do not knowingly sell or share personal information of users under 16 for targeted advertising.

We use sensitive personal information, including account credentials and fitness information, only as reasonably necessary to provide requested Services, secure accounts, comply with law, or for another purpose permitted by law. We do not use fitness information to infer unrelated characteristics about you.

15. International privacy rights

If you are in the EEA, United Kingdom, or Switzerland, you may have rights to access, correct, erase, restrict, or object to processing; receive portable data; and withdraw consent. You may lodge a complaint with your local data protection authority, although we encourage you to contact us first. If we rely on legitimate interests, you may request information about the balancing assessment. If required, we will identify any appointed EU or UK representative in this section.

16. International data transfers

Strength Side operates from the United States, and personal information may be processed in the United States or other countries where our providers operate. Those countries may have different data-protection laws. Where required for transfers from the EEA, UK, or Switzerland, we use recognized safeguards such as adequacy decisions, the European Commission's Standard Contractual Clauses, the UK Addendum or International Data Transfer Agreement, or another lawful mechanism.

17. Children's privacy

REPS is intended only for adults age 18 or older, and users under 18 may not create or use a REPS account. We do not knowingly collect personal information through REPS from anyone under 18. If we learn that a person under 18 created an account or provided personal information through REPS, we will take reasonable steps to delete it. A parent or guardian may contact us using Section 20.

18. Third-party websites and services

The Services may link to websites, social networks, app stores, payment providers, or other services we do not control. Their privacy practices are governed by their own notices. A link does not mean we endorse or control the third party, and we are not responsible for its privacy or security practices.

19. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in the Services, technology, law, or our practices. We will post the revised Policy, update the "Last updated" date, and provide any additional notice or obtain consent when required by law. Material changes affecting previously collected consumer health data will be handled as described in the Consumer Health Data Privacy Notice.

20. Contact us

Questions, requests, or complaints may be directed to:

Strength Side LLC - Privacy Request 2028 E Ben White Blvd #240-7117, Austin, TX 78741, United States Email: yo@strengthside.com Website: https://strengthside.com