Your training stays on your phone.

1. What is stored on your device

By default everything you create lives only on your phone, in the app’s own storage, and is not transmitted to us or to anyone else:

• Workout history. Logged sets, weights, reps, dates, durations and workout names.
• Routines and folders. Your saved templates and how you have organised them.
• Custom exercises and exercise notes. Movements you create yourself, and whatever you write against a movement, such as a cue or a setup detail.
• Injuries. The body areas and severity you flag so the app can suggest safer alternatives. This is health information, and it is treated as such.
• Body weight. The weigh-ins you log, and body-weight samples read from Apple Health if you connect it.
• Progress photos. Stored in Solyd’s private storage on the device, outside your photo library. They are never uploaded, never part of cloud sync, and never included in an export. You can require Face ID, Touch ID or your passcode to open them.
• Profile. An optional display name, username, training goal and avatar colour.
• Preferences and the workout in progress, so a session survives closing the app.

You can delete any single item, or wipe all of it at once with Profile, Delete all data.

2. Cloud backup and sync, only if you sign in

Signing in is optional and exists so your training can follow you to a second device. If, and only if, you create an account, these are synced to our backend:

• Workout history and routines.
• Settings: preferences, favourites, exercise notes, injuries, folders, custom exercises, body measurements, and your profile.

Not synced, even when signed in: the workout currently in progress, and your progress photos. Signing in, signing out, and syncing a second device never move them.

Every synced row is scoped to your account by row-level security, so no other Solyd user can reach it. Deleting something removes it from the cloud on the next sync, and Delete all data clears both copies.

3. Account and identity, only if you sign in

You can create an account with a magic email link, Sign in with Apple, or Sign in with Google. Your email address, or the identity token and name from Apple or Google, is sent to our backend to create and authenticate the account. Your session is then kept on your device so you stay signed in.

Guest mode requires no account and no personal information at all.

4. Apple Health, iPhone only and optional

If you turn it on and grant permission, Solyd uses Apple Health for two things:

• Body weight, read and written, so the weight you log in Solyd and the weight in Health stay in step.
• Recovery and live vitals, read only: sleep analysis, heart-rate variability, resting heart rate, heart rate and active energy.

Those five are read when a screen needs them, used there, and never stored by the app. They are never sent to our servers or to anyone else.

You control the permission in the app and in iOS Settings. Decline it and the app says so instead of estimating.

5. The exercise library, and searches that find nothing

The app ships with the exercise library built in, and refreshes it from our backend so it stays current. That reference data is public and identical for everyone, and no personal information is sent with the request. It happens on launch, including in guest mode, so as with any app that touches the network your device’s IP address is visible to our backend as ordinary request metadata.

Searches that find nothing. If you are signed in and a search of the library returns no results, the app sends us the words you typed, so we can add the movements people are actually looking for. That is the whole of it: the text, and whether you were searching the library or building a routine. It is not linked to your account, the stored record carries no user id, and if you are not signed in nothing is sent at all. This is the only telemetry in Solyd.

6. Who we share data with

• Supabase, our database and authentication host, processes the synced data in sections 2 and 3 and serves the exercise library, on our behalf, as our processor. Hosted in Sydney, Australia.
• Apple and Google act as identity providers, only if you choose their sign-in and only at the moment you sign in.

That is the complete list. We do not share your data with advertisers, data brokers or analytics companies, and we do not sell it.

7. What we do not collect

There are no third-party analytics, advertising, crash-reporting or tracking SDKs in the app. It does not collect your location, advertising identifiers or device IDs, your contacts, your microphone or your browsing history. There is no advertising in Solyd, and nothing you do in it is measured or reported back to us: no screen views, no session lengths, no feature counts, no crash reports. The single exception is the failed-search log described above.

Photos and camera. Solyd can take progress photos and set a profile picture, so it does use the camera and photo library, with your permission and only at the moment you choose to. Nothing captured is transmitted to us. The only way a progress photo leaves your device is if you tap Share and pick where it goes.

8. Taking your data with you

You can export your history as a CSV, or your whole history as a JSON backup, through your device’s share sheet. Where that file goes is entirely your choice. The app does not send it anywhere.

9. Your controls and your rights

• Access and portability. Export as CSV or JSON at any time.
• Deletion. Delete individual items, or Delete all data, which wipes the local store and the cloud copy.
• Account deletion. Profile, Delete account, shown when you are signed in. This removes the account itself, everything synced to it, and everything on that device. It is immediate, there is no grace period, and it cannot be undone. If you signed in with Apple you are asked to confirm with Apple once more, so that Sign in with Apple is disconnected at the same time. You never have to contact anyone to do this.

Depending on where you live, for example under the GDPR, UK GDPR or CCPA and CPRA, you may have further rights to access, correct, delete or restrict processing. Write to us and we will action them.

10. How long it is kept

Data on your device is kept until you delete it or uninstall the app. Synced data is kept until you delete it or delete your account. We hold account and identity data only for as long as the account exists.

11. Security

Data on your device is protected by your device’s own operating system. Everything in transit to our backend uses HTTPS. Cloud data is isolated per account by row-level security. No method of storage or transmission is completely secure, but these are the measures we take.

12. Children

Solyd is a general-audience app and is not directed at children under 13. We do not knowingly collect personal information from them. If you believe a child has given us personal information, write to us and we will delete it.

13. Where your data is processed

Our backend is hosted in Sydney, Australia. If you use cloud sync from outside Australia, the data described in sections 2 and 3 is transferred there and processed there. Everything else stays on your device and is transferred nowhere.

14. Changes to this policy

If how Solyd handles your data changes, this page and the effective date at the top are updated before that change ships.