RepRocket Privacy Policy

This Privacy Policy is specific to the RepRocket mobile app (Gym Log & AI Tracker) for iOS and Android, published by Fintaxtech Ltd. It is written to reflect exactly what the app does. For our general company privacy policy covering the fintaxtech.co.uk website, see here.

1. Introduction

Fintaxtech Ltd ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains what information RepRocket collects, how it is used, and the choices you have.

We are a company registered in Scotland with company number SC807896. Our registered office is in Dundee, Scotland, United Kingdom.

2. Information We Collect

2.1 Your Workout Data — Stored on Your Device Only

RepRocket has no user accounts and no backend server. Everything you enter — your workout plans, exercise library, logged sets and sessions, and profile details such as name, weight, height, and unit preferences — is stored locally on your device only. We never receive, see, or store this data on our own systems. Uninstalling the app permanently deletes it.

2.2 Analytics Data

We use Firebase Analytics (provided by Google) to understand how the app is used and to improve it. This includes:

• App usage events: anonymous events such as a workout being started or finished, a plan being created, or a setting being changed. These events record what happened, not who you are — they never include your name, email, or the content of your workout data.
• Automatic screen views: which screens of the app are opened.
• Basic technical information: device model, operating system version, app version, and a general, coarse geographic region derived from IP address. This is collected automatically by the Firebase SDK.
• A random installation identifier generated by Firebase to group events from the same install of the app — not linked to your name or any account, because none exists.

2.3 Crash and Diagnostic Data

We use Firebase Crashlytics (Google) to detect and fix bugs. If the app crashes or encounters an error, Crashlytics automatically collects a crash report: the stack trace, device model, operating system version, and app version at the time of the crash. This helps us identify and fix problems; it is not used to identify you personally.

2.4 Remote Configuration

We use Firebase Remote Config (Google) to control feature availability without requiring an app update. This service may receive basic app and device information to determine which configuration to serve, in the same way any Firebase service does.

2.5 What We Do Not Collect

• No accounts, names, or email addresses are collected by us — RepRocket has no sign-in.
• No health platform data. RepRocket does not connect to Apple Health, Health Connect, or any other health platform. All fitness data stays in the app's own local storage.
• No location tracking. The app does not request or use GPS or precise location.
• No advertising identifiers. RepRocket does not use advertising SDKs; on Android the advertising ID permission is explicitly excluded from the app.
• No payment card details. If in-app subscriptions become available, purchases are processed entirely by the Apple App Store or Google Play — see Section 6.

3. How We Use Information

We use the analytics and crash data described above only to:

• Understand which features are used and how, to guide what we build next
• Identify, diagnose, and fix bugs and crashes
• Decide which app features to enable via remote configuration
• Comply with legal obligations where applicable

We do not use this information for advertising, and we do not build advertising profiles.

4. Legal Basis for Processing

Under the UK GDPR and EU GDPR, we rely on the following legal grounds:

• Legitimate Interests: to understand app usage and fix defects, in a way that does not override your privacy rights, since the data involved is not linked to your identity
• Legal Obligation: to comply with applicable laws where relevant

5. Information Sharing and Disclosure

The only third party that processes data on our behalf is Google, through its Firebase platform (Analytics, Crashlytics, and Remote Config). Google processes this data as our data processor, under its own Firebase privacy and security documentation. We do not sell, rent, or share your information with advertisers or any other third party. We may disclose information if required by law or to protect our legal rights.

6. In-App Purchases and Subscriptions

If RepRocket offers a paid subscription or in-app purchase, that purchase is handled entirely by the Apple App Store or Google Play Billing. We never receive or store your payment card details. Apple's and Google's own privacy policies govern the payment information you provide to them. You manage, view, and cancel any subscription through your Apple ID or Google Play account settings, not within RepRocket or through us directly.

7. Data Retention

• Your workout data: stays on your device for as long as the app is installed, and is deleted immediately when you uninstall it.
• Analytics and crash data: retained by Firebase according to Google's standard retention periods (currently up to 14 months for Analytics event data), after which it is automatically deleted.

8. Your Rights and Data Deletion

Because RepRocket has no accounts, most information about you cannot be tied back to a specific identity, and much of what exists is already on your own device under your control:

• To delete your workout data, use any in-app data management option available, or simply uninstall the app.
• To request deletion of analytics or crash data associated with your device, contact us at ask@fintaxtech.co.uk and we will action this with Google to the extent technically possible.

Under GDPR you also have the right to access, rectify, restrict, or object to processing, and to lodge a complaint with a supervisory authority — see Section 11.

9. International Data Transfers

Firebase's infrastructure may process data outside the UK and European Economic Area. Google provides appropriate safeguards for such transfers, including Standard Contractual Clauses, as described in its Firebase privacy documentation.

10. Children's Privacy

RepRocket is not directed to children under 16 years of age, and we do not knowingly collect personal information from children under 16. Since the app collects no names, emails, or account information from anyone, this risk is limited by design.

11. Your Rights and Supervisory Authority

Under GDPR, you have the right to access, correct, restrict, or object to how your information is processed, and the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your information appropriately:

12. Changes to This Privacy Policy

We may update this Privacy Policy as the app changes — for example, if a feature that collects new data types is added. We will update the "Last updated" date above, and material changes will be reflected in the app's store listing update notes.

13. Contact Information

If you have any questions about this Privacy Policy or RepRocket's data practices, please contact us: