Privacy Policy

Summary

• We collect what you log in Physik (workouts, body measurements, nutrition, progress photos) to run the app for you.
• We don't sell your personal information, and we never use your health or fitness data for advertising.
• Apple Health data is only read or written with your permission, and is never used for ads or marketing.
• The free plan shows ads from Google AdMob. Paid plans have no ads.
• You can delete your account and all its data in the app at any time (Profile → Delete Account), or ask us to delete your data while keeping your account.

Who we are

Physik (the “app”, “we”, “us”) is based in California, USA, and is the controller of the personal information described here. Contact us at support@physikapp.com for anything in this policy.

This policy covers the Physik iOS app, its Apple Watch app, and physikapp.com.

What we collect

Information you give us

• Account: email address and password (managed by our authentication provider; we never see your password), and optionally a username, first and last name, and profile photo.
• Profile and onboarding: birth date, sex, height, experience level, goals, training days, available equipment, muscle groups to avoid, unit and theme preferences, and nutrition goals.
• Training data: workouts, exercises, sets, weights, reps, distance, time, RPE/RIR, notes, routines and folders, personal records, rest times, and readiness or soreness ratings.
• Body and health data: weekly check-ins (weight, body fat, tape measurements, resting heart rate, blood pressure, sleep quality, hunger and energy), progress photos, nutrition and water logs.
• Routines you publish: if you make a routine public, its name, description, and exercises are visible to other Physik users in Explore.
• Support requests: what you send us through Contact Support or email, plus your account email and app version.
• Imported history: if you import from Hevy, the workouts and routines you choose to import. A Hevy API key, if you use one, is stored only in your device's Keychain and sent only to Hevy.
• Website waitlist: your email address, if you join the waitlist on physikapp.com.

Information collected automatically

• Service logs: our backend records technical information such as IP address, request times, and errors to operate and secure the service.
• Purchases: your subscription status and purchase history, provided by Apple and our subscription provider. We never receive your payment card details.
• Advertising data (free plan only): see Advertising.

We don't use third-party analytics or tracking SDKs in the app.

Apple Health & Apple Watch

With your permission, Physik reads the following from Apple Health: workouts, active energy, heart rate, sleep, body weight, body fat percentage, height, dietary energy and macronutrients, physical effort, date of birth, and biological sex. Physik writes your completed workouts and the active energy they burned to Apple Health.

We use Health data only to provide features to you, for example estimating calories, pre-filling your profile, adjusting suggestions to your recovery, and showing trends. Some values you choose to use, such as your birth date or a workout's calories, are saved to your Physik account so they're available on your other devices.

We never use Apple Health data for advertising, marketing, or data mining, never sell it, and never share it with third parties except the service providers that store your account data for us. You can change Health permissions at any time in the iPhone Settings app under Health → Data Access & Devices.

The Apple Watch app records workouts to Apple Health (including heart rate and calories) and sends the sets you log to the Physik app on your iPhone.

How we use data

• To provide the app: store and sync your data, show your history, charts, and coaching insights, and run features you turn on.
• To manage subscriptions and unlock paid features.
• To respond to support requests, including privacy requests.
• To keep the service secure, prevent abuse, and enforce our Terms of Service, including moderating routines published to Explore.
• To show ads on the free plan.
• To comply with legal obligations.

Insights and suggestions in Physik are calculated from your own data. We don't sell your personal information or use your workout, body, or health data to target ads.

Who we share it with

We share personal information only with service providers that process it on our behalf, under contracts that limit their use of it:

• Supabase — database, authentication, and file storage, hosted in the United States.
• RevenueCat — subscription management (your account ID and purchase status).
• Apple — App Store purchases, Apple Health, and Apple Watch, under Apple's own privacy policy.
• Google AdMob — ads on the free plan (see below).
• Open Food Facts — food search and barcode lookups. Only the search text or barcode is sent, not your identity.
• Our email and website hosting providers — to send and receive support email and run physikapp.com.

If you connect Hevy, the app sends your Hevy API key to Hevy to fetch your data; Hevy's own privacy policy applies to Hevy.

We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a sale or transfer of the business (in which case this policy continues to apply to your information).

Advertising

The free (Base) plan shows banner ads served by Google AdMob. To serve and measure ads, Google may collect information such as your device type, IP address, approximate location derived from it, and ad interactions, under Google's policies. Physik does not send your fitness, body, nutrition, or health data to Google.

Physik does not ask for permission to track you across other companies' apps (Apple's App Tracking Transparency), so your device's advertising identifier isn't available to the ads in Physik. Ad-Free, Pro, and Lifetime plans show no ads.

How long we keep it

• Account and app data: for as long as you have an account. When you delete your account, your data is deleted from our live systems right away and from backups within 30 days.
• Progress photos and profile photos: deleted with your data or account, or when you remove them.
• Support requests: up to 2 years after they're resolved, unless you ask us to delete them sooner.
• Subscription records: as long as needed for billing, tax, and legal obligations.
• A record that a deletion or other privacy request was completed (what was done and when, not the data itself): kept to show we honored the request.

Your rights & choices

Wherever you live, you can:

• See and correct your information in the app, or ask us for a copy of it. Pro members can also export their workout history from Profile → Export Workout History.
• Delete your account and all its data in the app, or ask us to delete your data while keeping your account (see below).
• Get a copy in a portable format (CSV or JSON) by asking us.
• Withdraw permissions such as Apple Health, camera, or photo access in iPhone Settings, and stop ads by choosing a paid plan.
• Object to or ask us to limit certain processing.

To make a request, use Profile → Contact Support → Privacy / my data in the app, or email support@physikapp.com from the email address on your account. We may ask you to confirm the request from that address to verify it's you. We respond within 30 days (we'll tell you if we need longer, as the law allows). We won't treat you differently for using your rights.

Deleting your data

• Delete your account yourself: in the app, go to Profile → Delete Account. Your account, workouts, routines, check-ins, photos, nutrition logs, notes, and all other data are deleted immediately.
• Delete your data but keep your account: ask through Contact Support → Privacy / my data, or by email. We'll delete all of your data and leave an empty account you can keep using.
• Can't sign in? Email support@physikapp.com from your account's email address and we'll delete your account for you.

Deleting your account doesn't cancel an App Store subscription. Cancel it in your iPhone's Settings → [your name] → Subscriptions. See also Delete your account.

California residents

Under the California Consumer Privacy Act (as amended by the CPRA), California residents have the right to know what personal information we collect, use, and disclose; to delete it; to correct it; and to opt out of its sale or sharing for cross-context behavioral advertising. We don't sell personal information, and we don't share it for cross-context behavioral advertising as those terms are defined by California law. We don't use or disclose sensitive personal information (such as health data) for purposes other than providing the app to you.

In the last 12 months we collected the categories described in What we collect: identifiers (email, account ID), personal records (name), characteristics of protected classifications (age, sex), commercial information (subscription purchases), internet activity (service logs, ad interactions on the free plan), sensitive personal information (health and body data, photos), and inferences we calculate for you in the app (such as training insights). Each is used and disclosed only as described above. You can use your rights as described in Your rights & choices, or through an authorized agent with your signed permission.

EU, EEA & UK residents

We process your personal data on these legal bases: to perform our contract with you (providing the app and subscriptions); your consent (Apple Health access, photos, and the health data you choose to log, which is special-category data, and ads where consent is required); our legitimate interests (security, abuse prevention, and improving the service); and legal obligations.

You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time (without affecting earlier processing). You can also complain to your local data protection authority.

Your data is stored and processed in the United States. Our providers transfer data under the safeguards the law requires, such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

Security

Your data is encrypted in transit and at rest with our providers. Access to your data is limited to your own account by database security rules. Progress photos are kept in private storage that only your account can read. Administrators can see account details and activity counts needed for support, but not the contents of your workouts, body metrics, nutrition logs, or photos, and every administrative action is logged. No system is perfectly secure, but we work to protect your information and will notify you and the authorities of a breach as the law requires.

Age requirement

Physik is for people 16 and older. We don't knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we'll delete it.

Changes

We'll update this policy as Physik changes. If we make material changes, we'll tell you in the app or by email before they take effect. The effective date at the top shows when it last changed.

Contact

Questions or requests: support@physikapp.com, or Profile → Contact Support in the app.