Privacy

The short version

Your training is yours. It is stored on your own phone. If you create an account it is also stored in our database so you don't lose it when you change phones. Nothing is sold, shared, or used for advertising. There are no third-party analytics, no advertising identifier, and nothing that follows you between apps or websites. We count one thing, once per phone, and it is not tied to you — what that is.

How the Training Diary may be used is set out in the Terms of Use.

What is stored

Without an account, everything stays on your device and never leaves it: your workouts, the sets you log, your exercise library, your body composition entries, and your settings.

With an account, the same information is also copied to our database, along with the email address you signed up with. We do not ask for your name, your date of birth, or your address.

Alongside it we hold an internal account number that identifies you to the database, and — if you hold a subscription from before the Training Diary became free — your subscription status, its renewal date, and the Stripe reference numbers for your customer record and your subscription. Those references are how we ask Stripe to cancel your subscription when you delete your account. They identify an account at Stripe; they are not card details, and we never hold those.

We do not collect your location, your contacts, your photos, or anything from other apps. There is no advertising identifier and no third-party analytics.

Payments (earlier subscriptions). The Training Diary is free now, and no new payments are taken. A small number of people hold a subscription from before the app became free. Those were handled by Stripe: your card details were entered on Stripe's own page and never reached this app or our database. What we store is whether that subscription is still current, the date it renews, and the two Stripe reference numbers described above.

If you send us feedback, we keep what you wrote, the email address you gave us if you gave one, which part of the app you were reporting on, the version you were running and the browser you were using. Anything personal in the message itself is there because you chose to put it there. You can send feedback without an account; if you are signed in when you send it, it is stored against your account so we can reply.

If you delete your account, your subscription is cancelled at Stripe first, and only then is everything above removed: your workouts, your body composition entries, your exercise library, your settings and your subscription record.

Two things are deliberately kept, and both are stripped of anything that points at you.

Feedback you sent us stays, with your email address and your account number removed from it. What is left is the message and the version of the app it was about. A bug report is often the only record that a fault existed, and it is just as useful with the name off it — so we keep the useful half and delete the half that is about you. If a message you sent has your name inside the text of it, tell us and we will remove that too.

Stripe's record of what you were charged, and when. A business has to keep its invoices for years after it issues them. That record holds an email address and the payments; it holds nothing about your training.

How long we keep your training

The Training Diary is free for everyone, and there is one version of it: everything is kept.

On this phone. Every workout you finish is kept, with no limit. Nothing is removed automatically, and the app never deletes training on your behalf — the only deletions are the ones you make yourself.

With an account, the same information is also kept in your account — your workouts, the written programs you follow and where you are up to in them, your exercise library, your body composition entries and your settings — and synced to every device you sign in on, so it is still there if you change or lose your phone.

Deleting a workout yourself. When you delete a workout, it is removed from your phone and marked deleted in your account so the removal syncs. This cannot be undone.

Progress photos

Progress photos are stored on your phone and nowhere else. They are not uploaded, not copied to your account when you sync, and not visible to anyone at the gym. We could not look at them if we wanted to.

The trade-off is that they go with the phone. Losing it, wiping it, or deleting the app takes the photos with it, and we cannot get them back.

Deleting a body entry deletes its photos. Erasing everything from Options removes all of them.

Who can see it

Only you. Every table is protected by row-level security, which means the database itself refuses to return a row unless the account asking for it owns that row. Gym staff cannot read your training through this app.

The database is hosted by Supabase on Amazon Web Services in Sydney, Australia. Your training data does not leave the country.

Three other services see your email address but never your training: Netlify, which hosts the app; Stripe, which handled earlier subscriptions and still cancels them when an account is deleted; and Resend, which delivers our emails — sign-in, password resets, and replies to feedback you send us. These are based in the United States, so your email address is processed there.

Deleting it

Options › Delete my account permanently deletes your account and everything stored against it: workouts, body composition entries, your exercise library and your settings. It happens immediately and cannot be undone.

Our database provider takes routine backups for disaster recovery, so a deleted account may persist in one of those for a short period before it is overwritten. Those backups are never read or used to restore an individual account.

Options › Erase all data clears everything held on the phone itself, whether or not you have an account.

You do not need to email anyone or wait for a response to do either.

Accounts nobody comes back to

If you do not sign in or sync for 24 months, we permanently delete your account and everything stored in it. We email you 30 days before, and again 7 days before. Signing in at any point starts the 24 months again.

An account with a subscription from before the Training Diary became free is never treated as inactive while that subscription is current, no matter how little you use the app.

We chose 24 months because people step away from training for long stretches — injury, illness, or simply life — and we would rather your history be waiting when you come back. But we do not think it is right to hold someone's personal information forever on the chance they might return.

Australian tax law requires us to keep records of transactions for five years. If you paid for a subscription before the Training Diary became free, the record that a payment happened is kept by us and by Stripe for that period. It contains no training data.

Counting visits

The first time the app is opened on a phone, and only the first time, it records that a visit happened. That record is the date, which link it was opened from if the link was tagged, whether the app had already been added to a home screen, and the build number.

It is not tied to you. There is no account, no name, no email, no IP address and nothing about your device stored with it, and there is no way to work backwards from one of these rows to a person or to their training. Nobody outside the gym can read them, including the app itself — the browser can add a row and can never read one back.

We count this to answer one question: of the people who tap a link, how many stay. That is all it is for.

Younger users

This app is intended for adults and older teenagers who train, at any gym or at home. It is not designed for, or directed at, children under 13, and we do not knowingly hold their data.

Anybody aged 15 or over can normally set up their own account. If you are younger than that, a parent or guardian should create it and agree to this policy with you. The app can be used without an account at any age — nothing leaves the phone.

Asking us something

Email admin@nolimitshealthclubs.com.au, or ask at reception for the training app. We aim to reply within 30 days.

Under the Australian Privacy Principles you may ask what we hold about you, ask us to correct it, and ask us to delete it — though the app already shows you everything and lets you change or delete all of it yourself, without asking anyone.

If you are not happy with how we have handled a privacy question, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

If this policy changes

If we change how your information is handled in a way that affects you, we will update this page and say so in the app. The date at the top always reflects the current version.