Your training stays on your phone.

1. What is stored on your device

By default everything you create lives only on your phone, in the app’s own storage, and is not transmitted to us or to anyone else:

• Workout history. Logged sets, weights, reps, dates, durations and workout names.
• Routines and folders. Your saved templates and how you have organised them.
• Custom exercises and exercise notes. Movements you create yourself, and whatever you write against a movement, such as a cue or a setup detail.
• Injuries. The body areas and severity you flag so the app can suggest safer alternatives. This is health information, and it is treated as such.
• Body weight. The weigh-ins you log, and body-weight samples read from Apple Health if you connect it.
• Progress photos. Stored in Solyd’s private storage on the device, outside your photo library. They are never uploaded, never part of cloud sync, and never included in an export. You can require Face ID, Touch ID or your passcode to open them.
• Profile. An optional display name, username, training goal and avatar colour.
• Preferences and the workout in progress, so a session survives closing the app.

You can delete any single item, or wipe all of it at once with Profile, Delete all data.

2. Cloud backup and sync, only if you sign in

Signing in is optional and exists so your training can follow you to a second device. If, and only if, you create an account, these are synced to our backend:

• Workout history and routines.
• Settings: preferences, favourites, exercise notes, injuries, folders, custom exercises, body measurements, and your profile.

Not synced, even when signed in: the workout currently in progress, and your progress photos. Signing in, signing out, and syncing a second device never move them.

Every synced row is scoped to your account by row-level security, so no other Solyd user can reach it. Deleting something removes it from the cloud on the next sync, and Delete all data clears both copies.

3. Account and identity, only if you sign in

You can create an account with a magic email link, Sign in with Apple, or Sign in with Google. Your email address, or the identity token and name from Apple or Google, is sent to our backend to create and authenticate the account. Your session is then kept on your device so you stay signed in.

Guest mode requires no account and no personal information at all.

4. Apple Health and Health Connect, optional

If you turn it on and grant permission, Solyd connects to your phone’s health store: Apple Health on iPhone, Health Connect on Android. It uses it for two things:

• Body weight, read and written, so the weight you log in Solyd and the weight in Health stay in step.
• Recovery and live vitals, read only: sleep analysis, heart-rate variability, resting heart rate, heart rate and active energy.

Those five are read when a screen needs them, used there, and never stored by the app. They are never sent to our servers or to anyone else. Android reports heart-rate variability in a different measure than iPhone does, so the app scores it on its own scale rather than pretending the two numbers mean the same thing.

You control the permission in the app and in iOS Settings or the Health Connect app. Decline it and the app says so instead of estimating.

Note that what Solyd writes into your health store stays there. Deleting your Solyd account, or the app, does not remove the body weight and workouts it saved. Those are your records in your health app and only you can delete them, which the account deletion page explains.

5. The exercise library, and searches that find nothing

The app ships with the exercise library built in, and refreshes it from our backend so it stays current. That reference data is public and identical for everyone, and no personal information is sent with the request. It happens on launch, including in guest mode, so as with any app that touches the network your device’s IP address is visible to our backend as ordinary request metadata.

Searches that find nothing. If you are signed in and a search of the library returns no results, the app sends us the words you typed, so we can add the movements people are actually looking for. That is the whole of it: the text, and whether you were searching the library or building a routine. It is not linked to your account, the stored record carries no user id, and if you are not signed in nothing is sent at all. This is the only telemetry in Solyd.

6. Who we share data with

• Supabase, our database and authentication host, processes the synced data in sections 2 and 3 and serves the exercise library, on our behalf, as our processor. Hosted in Sydney, Australia.
• Apple and Google act as identity providers, only if you choose their sign-in and only at the moment you sign in.

That is the complete list. We do not share your data with advertisers, data brokers or analytics companies, and we do not sell it.

7. What we do not collect

There are no third-party analytics, advertising, crash-reporting or tracking SDKs in the app. It does not collect your location, advertising identifiers or device IDs, your contacts, your microphone or your browsing history. There is no advertising in Solyd, and nothing you do in it is measured or reported back to us as analytics: no screen views, no session lengths, no crash reports.

Two things are worth stating precisely, because they sit close to that line. The first is the failed-search log described above: only when you are signed in, only the words that returned nothing, and never tied to your account. The second is that a few in-app flags travel with your settings. When you sign in, your settings sync so they follow you across devices, and those settings include a handful of yes/no flags the app keeps for itself: whether you have finished onboarding, whether you have seen a particular tip or notice, and how many times you have dismissed the workout reminder nudge. They exist so a second phone does not show you the same first-run screens again. They are stored on your account like any other setting, are visible to nobody but you, and are not used to measure anything. If you never sign in, they never leave the device.

Photos and camera. Solyd can take progress photos and set a profile picture, so it does use the camera and photo library, with your permission and only at the moment you choose to. Nothing captured is transmitted to us. The only way a progress photo leaves your device is if you tap Share and pick where it goes.

8. Taking your data with you

You can export your history as a CSV, or your whole history as a JSON backup, through your device’s share sheet. Where that file goes is entirely your choice. The app does not send it anywhere.

9. Your controls and your rights

• Access and portability. Export as CSV or JSON at any time.
• Deletion. Delete individual items, or Delete all data, which clears the store on your device and empties your synced content. Your workouts and routines are marked deleted rather than erased: they stop reaching any device and never return, but the rows are only removed from our database when the account itself is deleted.
• Account deletion. Profile, Delete account, shown when you are signed in. This removes the account itself, everything synced to it, and everything on that device. It is immediate, there is no grace period, and it cannot be undone. If you signed in with Apple you are asked to confirm with Apple once more, so that Sign in with Apple is disconnected at the same time. You never have to contact anyone to do this.
• If you have already uninstalled. You can still delete the account from the account deletion page, by confirming a link we email to the address you signed in with.

Depending on where you live, for example under the GDPR, UK GDPR or CCPA and CPRA, you may have further rights to access, correct, delete or restrict processing. Write to us and we will action them.

10. How long it is kept

Data on your device is kept until you delete it or uninstall the app. We hold account and identity data only for as long as the account exists.

Synced data needs a plainer answer than it used to have here. Deleting your account removes it: the account and every workout, routine and setting held against it are erased, with no grace period and no retention window. Deleting a single item, or using Delete all data, marks that content deleted instead. It stops syncing anywhere and you cannot get it back, but the marked rows stay in our database until the account is deleted, and we do not put a time limit on that. If you want it gone rather than marked, delete the account.

11. Security

Data on your device is protected by your device’s own operating system. Everything in transit to our backend uses HTTPS. Cloud data is isolated per account by row-level security. No method of storage or transmission is completely secure, but these are the measures we take.

12. Children

Solyd is a general-audience app and is not directed at children under 13. We do not knowingly collect personal information from them. If you believe a child has given us personal information, write to us and we will delete it.

13. Where your data is processed

Our backend is hosted in Sydney, Australia. If you use cloud sync from outside Australia, the data described in sections 2 and 3 is transferred there and processed there. Everything else stays on your device and is transferred nowhere.

14. Changes to this policy

If how Solyd handles your data changes, this page and the effective date at the top are updated before that change ships.