Privacy & Data Policy

Last updated: 4 November 2026

1. What we collect

To create an account we collect your email address and a password. We automatically assign you an anonymous username — we never ask for your real name. Everything else is data you choose to enter yourself: weight, body measurements, training cycles, compound/dose logs, injection logs, symptom logs, and bloodwork results.

We also automatically record some technical information: your IP address and browser user-agent at registration (see "Consent records" below), and standard session data needed to keep you logged in.

2. What's encrypted, and what isn't

We want to be straightforward about this rather than vague:

• Your password is hashed, not encrypted — we use the industry-standard bcrypt algorithm, which is one-way. We never store or can retrieve your actual password, only a hash of it that's used to verify a login attempt.
• All traffic between your browser and our servers is sent over HTTPS (TLS), so it's encrypted in transit.
• Your logged weight, body measurements, cycle and template names, compound names, doses, bloodwork values, and symptom diary entries are encrypted at rest in our database using AES-256 — if our database were ever stolen on its own, these fields would not be readable without our application's separate encryption key.
• Dates, your account email and username, and fixed category/status fields (such as a cycle's type or a protocol item's frequency) are not individually encrypted — encrypting these would break the scheduling, calendar, and reminder features that need to query and sort by them, and none of them reveal anything sensitive on their own without the encrypted content next to them. These are protected by server access controls and standard hosting security rather than per-field encryption.
• Encryption at rest protects against someone stealing a copy of the database on its own. It does not protect against someone who also gains access to the running application server itself (and its encryption key), since the app always needs to be able to decrypt your data to show it to you.
• The Windows and Android apps can be locked with a 6-digit PIN (and fingerprint or face on Android). The PIN is stored only as a salted hash on your device, and after five wrong attempts the app can sign out and wipe its local data. Wiping the app never deletes anything on your account here.
• Your calendar feed link and shared dashboard link use long, random, hard-to-guess tokens rather than encryption — anyone who has the link can view what it points to, so treat those links like a password and only share them with people you trust. You can regenerate or revoke either at any time from your profile.

3. Consent records

When you register, we keep a permanent record that you accepted our Terms & Conditions, and a separate record of whether you opted in to marketing contact — including the date, time, your IP address, your username, and your email address at that moment. This exists purely as evidence that consent was properly given, as required under GDPR, and is kept for as long as your account exists plus a reasonable period afterwards to meet our legal obligations.

4. Why we process your data

We process your account details to provide the service you asked for (your consent at registration, and the ongoing contract of providing your account). We process the "logging and reminders" features on the same basis. Marketing emails are only sent if you separately opt in, and you can withdraw that consent at any time.

5. Who can see your data

Nobody but you, unless you choose to share it. If you turn on dashboard sharing, anyone with that specific link can view a read-only summary — you control whether it's on, and can revoke it instantly. We do not sell your data, and we do not share it with advertisers.

6. Payments

If you buy a paid plan, card payments are handled by Stripe, a third-party payment provider. You enter your card details on Stripe's own secure page — we never see, receive or store your card number. Stripe may collect the details it needs to take payment, such as your card details, billing name and address and email, and processes them under its own privacy policy.

We send Stripe only an order reference, the plan name and the amount. We keep a record of each order — the plan, the amount paid, the date and its status — so we can give you your plan and deal with any payment queries. The amount and payment reference are encrypted at rest. Your logged health and training data is never sent to Stripe.

If you join through another member's referral link, we note which member sent you so they can be rewarded once you have paid. They are never told who you are. A member's referral reward is plan time; approved affiliates are paid commission, and the payout details they give us are encrypted at rest.

7. Your rights (GDPR)

• Access & portability — export everything you've logged at any time from the export page (CSV files or a full data export).
• Rectification — edit or delete any individual log entry directly in the app.
• Erasure — permanently delete your account and all associated data from your profile page at any time.
• Withdraw consent — stop marketing contact at any time by emailing us (below); this never affects your ability to use the service.

8. No medical advice

As set out in our Terms & Conditions, this service is a logging facility only and does not provide medical advice, diagnosis, or treatment recommendations. We don't analyse your health data for clinical purposes — it is stored and displayed exactly as you enter it.

9. Contact

Questions about your data, or to exercise any of the rights above, can be sent to privacy@bodybuildingtracker.com.