Privacy Policy

What the app stores

The app may store the following information locally on your device:

• Your chosen display name, goals, purpose statement, experience level, equipment, and training preferences.
• Your workout schedule, reminder settings, coaching preferences, and accessibility choices.
• Generated or saved workout plans, active workout state, completion history, streaks, badges, program progress, workout check-offs, effort ratings, and private reflections.
• Technical alarm identifiers and troubleshooting status needed to schedule or cancel reminders safely.

This information is not tied to a Faithful Reps account because the app does not provide accounts. Your full workout history, Scripture choices, prayers, purposes, obstacles, and private reflections are not sent to your partner or the sharing service. Personal purposes and reflections are not placed in spoken or lock-screen reminders.

Camera and movement tracking

Camera tracking is optional. When you choose it, live frames are analyzed on your device to estimate body position and count air squats or push-ups. Exercise-camera frames are not saved, uploaded, retained, or shared, and movement tracking never uses the microphone. Manual confirmation remains available. Optional partner photos and videos use a separate capture or library-selection flow.

Notifications, alarms, and coach audio

With your permission, the app asks iOS to schedule workout notifications and optional accountability alarms. Coach voice clips are prerecorded files bundled with the app, and compatible local speech features may prepare audio on the device. Faithful Reps does not record your voice for reminders. Notification, camera, microphone, and alarm permissions can be changed in iPhone Settings.

Optional Start Together check-ins

Start Together lets you explicitly agree to one workout time with one friend. Cloudflare processes and stores the agreed start time, random invitation and participant identifiers, hashes of private participant credentials, and each person's Ready, First set logged, and Finished check-ins. Ready is manual; first-set and finish check-ins follow your own workout log. Keep the app open to sync. Your workout plan, location, faith choices, and health or safety reasons stay private.

Keep invitation links and codes between you and the friend you invite. Anyone holding an unused invitation can preview its time and whether it has been accepted; one person can join before that time. Check-ins are visible only to the two accepted participants. Your phone keeps private sharing credentials to authorize access. There is no account or credential-recovery service. The app also creates a private installation identifier for sharing safety. The service stores its hash, links it to sharing participants, and uses it to enforce blocks and developer restrictions across new invitations. It does not require your name or contacts.

Opening an invitation does not change your schedule. Choosing Accept This Time & Join moves one workout and its reminders to the agreed time. Your recurring schedule, workout, movement proof, and Health & Safety Exit remain independent. You can always continue your workout when your friend or the service is unavailable.

Optional partner photos and videos

After finishing your own workout, you may take a photo or record a video up to 15 seconds with camera permission, or choose a photo or video up to 15 seconds from your library. You can add an optional caption. Each post requires a preview and fresh agreement to upload it. Taking, recording, or selecting media alone never uploads it; your photo library is not uploaded. Only the media and caption you choose to share are sent to private Cloudflare storage for your accepted partner. They never appear in invitation previews. A report you explicitly submit may send a separate copy of the reported caption and optional media to Faithful Reps for safety review, as described below.

Recording video sound is optional and requires separate microphone permission. You can record without sound, take a photo instead, or choose library media without camera access. Any sound in a video you explicitly share is included. Photos are re-encoded and known video metadata, including location, is removed locally before upload.

Captures are not automatically saved to Photos. Unsubmitted drafts use temporary app cache files removed during normal cleanup; an interruption or abrupt app termination can leave files for the operating system to clear. A partner may save or capture shared content outside the app, and Faithful Reps cannot remove those copies.

Reporting content and blocking a partner

You can report a partner or block them from Start Together. A report requires your explicit agreement. It sends your selected reason, any explanation you enter, the current partner caption and post information, report and participant identifiers, and timestamps to Faithful Reps for review. If you separately choose to include the partner's media, a copy is retained as report evidence. Exercise-camera frames, your workout plan, Scripture, prayers, and private reflections are not included.

Reports and any evidence are stored privately through Cloudflare and may be reviewed by the Faithful Reps developer for safety, abuse handling, and service restrictions. They are not public and are not shown to your workout partner. This is separate from ordinary two-person sharing.

Blocking prevents sharing in either direction between the same installation identities, including through new invitations. Block records contain hashed installation identifiers and remain until removed by the developer. Blocking is not an account-wide guarantee: reinstalling, resetting, or using another installation can change an identity. Contact Support for questions about restrictions or removal.

Personal backups

The app keeps a local recovery copy of your progress. You can also create a backup code and choose where to copy or share it. This includes your private profile and reflections; keep it somewhere you trust. Exported backups exclude camera images, payment details, live alert identifiers, partner credentials, and shared media. Copies you export remain wherever you saved them after app data is deleted.

Memberships and purchases

Membership purchases are processed by Apple. Faithful Reps does not receive or store your full payment-card information. The app uses RevenueCat to confirm whether an Apple subscription or introductory trial provides an active membership entitlement.

For this purpose, RevenueCat may process an automatically generated app-user identifier, Apple product identifiers, purchase and subscription status, transaction dates, storefront or country information, and limited technical information needed to operate and troubleshoot the purchase service. This information is used for app functionality and subscription management—not advertising or cross-app tracking.

Memberships are associated with your Apple Account. You can restore purchases in the app and manage or cancel a subscription through Apple's subscription settings.

Apple Ads attribution

On iPhone, after RevenueCat starts, Faithful Reps asks Apple's AdServices for a privacy-preserving attribution token. RevenueCat receives that token and asks Apple whether the install came from an Apple Ads campaign and, when Apple makes them available, the campaign, ad group, keyword, and click- or view-through attribution type.

This Apple-provided attribution data is used only to measure our Apple Ads and subscription performance. Standard Apple Ads attribution does not use the advertising identifier and is not used to identify you, follow your activity across other companies' apps or websites, or personalize ads.

Data collection and sharing

Faithful Reps displays no advertising and has no third-party advertising SDK, cross-app tracking SDK, developer-operated behavioral analytics service. It does not sell personal information. Optional partner sharing uses the separate Cloudflare service described above; it does not upload your full workout history or add analytics or advertising events. Purchase information and the limited Apple Ads attribution data described above are processed only by Apple and RevenueCat for those stated purposes. App Store and TestFlight services may also process installation, purchase, crash, diagnostic, or feedback information under Apple's own terms and privacy policy.

Network providers, including Cloudflare, may process IP addresses and connection information to deliver and secure sharing requests. The sharing service does not log request bodies or credentials.

The app is built with React Native, Expo, and MediaPipe components. Their runtime functionality is packaged into the app; movement analysis remains on-device.

Retention and deletion

Ordinary shared records and participant media access expire 24 hours after the agreed workout time. You can delete your own post sooner, and either participant can end sharing for both people. Ending sharing stops it on your phone immediately and requests removal for both people. If offline, the app retains the credentials needed to retry; the other person's access ends when that request reaches the service or the agreement expires.

When sharing ends at the service, participant access is revoked and credentials and captions are removed. An expiry marker and pending cleanup records prevent delayed requests from restoring sharing. Private media deletion is attempted promptly and retried if unavailable, with a storage lifecycle rule as an orphan cleanup backstop. Provider cleanup and recovery backups can outlast the application access cutoff. Cloudflare infrastructure and recovery backups may retain data under its applicable retention policies.

Submitted safety reports and any separately consented evidence have a different retention period: deletion is scheduled 30 days after receipt. Cleanup and provider backups can take longer. A 31-day storage lifecycle provides an orphan-evidence cleanup backstop. Ending a shared start, deleting its original post, or deleting local app data does not erase a report already submitted for review. Provider cleanup and backups can outlast these access cutoffs. Hashed block and service-restriction records have no automatic expiry and remain until removed by the developer.

Local workout information remains on your device until you use Delete All Local Data & Scheduled Alerts in Safety & Accessibility or remove the app. The reset action cancels app-owned scheduled reminders and alarms before deleting local app state. Restoring a backup or deleting app data also completes removal of any active shared start first. Removing the app alone does not send a request to end sharing. Deleting local data or the app does not cancel an App Store subscription. Apple and RevenueCat may retain purchase, entitlement, and Apple Ads attribution records as needed to provide their services, measure campaign and subscription performance, restore access, prevent trial abuse, comply with law, and maintain financial records.

Your choices

• Camera tracking, spoken coaching, and accountability alarms are off until you choose them.
• You can deny or revoke camera, microphone, notification, and alarm permissions through iPhone Settings.
• You can use manual exercise confirmation instead of camera tracking.
• You can use the permanent Health & Safety Exit whenever continuing is unsafe.
• Partner check-ins and each photo or video upload are optional. You can delete your own shared post or end a shared start. You can also report or block a partner. Including media in a safety report requires a separate choice.
• You can restore purchases in the app and manage or cancel a membership through Apple.

Health and children

Faithful Reps is a fitness-accountability tool, not a medical device and not a substitute for professional medical advice. Stop if you experience pain, dizziness, shortness of breath, or unusual discomfort. The app is not directed to children under 13.

Questions and policy changes

Use the instructions on the Support page for privacy or support questions. TestFlight testers may also use Send Beta Feedback. This policy will be updated when the app's data practices materially change.