Privacy Policy — RepSnack
Last updated: 20 September 2026
RepSnack is a strength training and nutrition tracking app. This policy explains what it collects, why, and what you can do about it. It is written to be read, not to be survived.
Who is responsible
RepSnack is developed and operated by Turhan Göksu, acting as an individual and as the data controller for the purposes of the GDPR.
Contact: repsnack.app@gmail.com
What RepSnack collects
When you create an account
- Your email address
- Your password, which is hashed and stored by our authentication provider. It is never visible to us in readable form.
What you record in the app
- Workout sessions: date, duration, and the sets you log with their weight, repetitions, RPE and set type
- Routines you create, and the exercises in them
- Body measurements and weight history, if you choose to enter them
- Nutrition entries: the food you describe, and the calories and macronutrients calculated from it
That is the whole list. RepSnack asks for nothing about you beyond what you type into it.
What RepSnack does not do
- No advertising and no ad networks.
- No analytics or tracking services. The app records usage events for product decisions, but they stay on your device and are never transmitted.
- No third-party artificial intelligence services. Nutrition macros are calculated on your device from a nutrition table bundled with the app. Nothing you type about food leaves your phone except as part of your own account data.
- No camera or photo access. The app does not request it.
- No selling or sharing of your data. Not to advertisers, data brokers, or anyone else.
- No location, contacts, or device identifiers.
Why we process it, and on what legal basis
Your training and nutrition records are processed to provide the app itself: storing your history, syncing it between your devices, and showing you progress over time. The legal basis is performance of a contract — you asked us to keep this data, and the app is useless without it.
Your email address is processed on the same basis, to identify your account and let you sign in and recover access.
Health-adjacent data such as body weight and measurements is entered entirely at your discretion. You can use RepSnack fully without it.
Guest mode
You can use RepSnack without an account. In guest mode everything stays on your phone and nothing is sent to any server. If you later create an account, your local data is migrated into it and synced from that point on.
Who else touches your data
One processor: Supabase, which provides the database, authentication and hosting. Your records are stored there so they survive a lost phone and reach your other devices. Supabase acts on our instructions and does not use your data for its own purposes.
Data may be stored on servers outside your country, including outside the European Economic Area. Transfers rely on the Standard Contractual Clauses approved by the European Commission.
How long we keep it
As long as your account exists. Your training history is the point of the app, so nothing is deleted on a schedule.
When you delete your account, everything goes with it: profile, sessions, sets, routines, measurements and nutrition logs are removed immediately and permanently, in the same operation. There is no grace period and no archived copy, so please export anything you want to keep first.
Deleting your account
Settings → Account Settings → Delete Account. You will be asked to retype your email address, because the action cannot be undone.
You do not need to contact us, explain yourself, or wait.
Your rights
Under the GDPR you may:
- Access the data we hold about you
- Correct anything inaccurate
- Erase your data — the in-app deletion does this immediately
- Export your data in a portable format
- Restrict or object to how we process it
- Withdraw consent where processing relies on it
Write to repsnack.app@gmail.com and we will respond within 30 days. If you are unhappy with the response, you may complain to your national data protection authority. In Turkey this is the Kişisel Verileri Koruma Kurumu (KVKK).
Children
RepSnack is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has created an account, write to us and it will be removed.
Security
Traffic between the app and our servers is encrypted in transit. Access to your records is enforced at the database level by row-level security, so one account cannot read another's data. Passwords are hashed and never stored in readable form.
No system is perfectly secure, and we will not pretend otherwise. If a breach ever affects your data, we will notify you and the relevant authority as the law requires.
Changes to this policy
If this policy changes materially, the app will tell you before the change takes effect. The date at the top always reflects the current version.