Privacy Policy

Last updated 8 August 2026

The short version: Your core training data is stored on your device and in your own private iCloud — we cannot see or access it. The optional Community features (feed, friends, crews, leaderboards) require a STRAXE account and are stored on our backend provider, Supabase.

Contents

01Information in the App
02Where Your Data Is Stored
03Apple Health (HealthKit)
04Social Features (Optional)
05Subscriptions & Payments
06Third Parties & Tracking
07Notifications
08Retention & Deletion
09Your Rights
10Children
11Changes
12Contact

This Privacy Policy explains how STRAXE (the "App"), provided by Verntro Labs, LLC, a Texas limited liability company ("we," "us," or "our"), handles your information. For data-protection purposes, the data controller is Verntro Labs, LLC. STRAXE is a strength-training tracker for iPhone and Apple Watch. We designed STRAXE to keep your core training data in your own hands: it is stored on your device and in your private Apple iCloud. The optional social features (the Community tab — feed, friends, crews, and leaderboards) are the exception: they require a STRAXE account and use a backend provider (Supabase) — see Section 4.

01Information in the App

The core App does not require an account or your name, email, or phone number. (The optional social features require a STRAXE account — see Section 4.) The information in the App consists of:

Profile you set: a display name you choose.
Training data you log: workouts, sets, weights, reps, routines, personal records, achievements, and your bodyweight and body measurements — whether you enter them yourself or STRAXE reads them from Apple Health (Section 3).
Photos you add (optional): a profile photo and any progress photos you choose to track your physique over time.
Health data (with your permission): see Section 3.
App preferences: units, rest-timer and notification settings.

02Where Your Data Is Stored

Your training data and profile are stored on your device and synced through your private iCloud (Apple's CloudKit private database), tied to your Apple ID, so it stays available across your own Apple devices. This is your personal iCloud space — we cannot see or access it. We do not copy this core training data to servers we control. (Data you choose to share through the optional social features is the exception, and is stored on our backend — see Section 4.)

Your profile photo and progress photos are stored the same way — on your device and in your private iCloud only. They are never uploaded to us or any third party, and they are not written to Apple Health.

Apple's handling of iCloud data is governed by Apple's Privacy Policy.

03Apple Health (HealthKit)

If you grant permission, STRAXE interacts with Apple Health as follows:

Reads: heart-rate variability, resting heart rate, and sleep (to calculate a "recovery readiness" indicator); your bodyweight, body fat percentage, and waist measurement (so values your scale already records appear in the App without re-entry); and — on Apple Watch — your heart rate and active energy during a workout (shown live and saved with that workout). None of this is written to iCloud. Values read from Apple Health are held in memory while the App is running and are re-read from Health each time, rather than being stored with your training data.
Writes (one-way): your completed workouts, and the bodyweight, body fat percentage, and waist measurements you enter in the App, can be saved to Apple Health so they appear in the Health app. When STRAXE reads bodyweight back from Health it ignores its own entries, so a value you typed here is never mistaken for a new reading from your scale.

What leaves your device. Your heart-rate variability, resting heart rate, sleep, and workout heart rate are used only for on-device calculations. They are never sent to us or to any third party. Bodyweight is the one exception: if you opt in to the pound-for-pound leaderboard and choose to share your bodyweight, that number is sent to our backend (Section 4) — and because STRAXE uses whichever reading is most recent, it may be one that came from Apple Health rather than one you typed. If you do not opt in, your bodyweight is not sent to us at all.

We do not use Health data for advertising, marketing, or data-mining, and we do not disclose it to third parties. You can change Health permissions any time in iOS Settings › Privacy & Security › Health.

04Social Features (Optional — a STRAXE Account)

The Community tab is optional. To use it you create a STRAXE account with Sign in with Apple. When you do, the following is stored on our backend provider, Supabase Inc., which processes it on our behalf as our data processor:

your chosen username and display name;
posts, comments, reactions, and crew messages you create;
your friends and crew memberships;
if you opt in to the leaderboard, your best estimated one-rep-max per lift and your bodyweight — whichever bodyweight reading is most recent, which may be one you entered or one STRAXE read from Apple Health (Section 3). You can turn off bodyweight sharing, or leave the leaderboard entirely, in Profile › Community privacy;
if you turn on notifications, a device token from Apple's push service, stored with your account so we can send the alerts described in Section 7. It identifies your device to Apple's servers, not you personally, and it is deleted with your account.

Your HRV, sleep, resting heart rate, and heart rate stay on your device and are used only for on-device recovery scoring (Section 3). They are never sent to the backend. Bodyweight is the only Health-sourced value that can reach our backend, and only if you opt in to the leaderboard as described above.

Other STRAXE users can see your username, display name, the content you post, and — if you opt in — your leaderboard entry. You control what you share — including whether your bodyweight appears on the pound-for-pound leaderboard and whether others can find you by username — in Profile › Community privacy. To keep the community safe you can block users and report posts, comments, crew messages, or display names; reports are stored for safety and moderation review, and alert our moderators so they can be acted on quickly. Posts, comments, and crew messages are also automatically screened for objectionable content — including by a third-party moderation provider, OpenAI, which receives their text solely for that purpose — and may be hidden if flagged. You can delete your account at any time (Profile › Delete account), which permanently removes your profile, posts, comments, crew messages, friends, crews, and leaderboard entries from the backend — see Section 8 for the one record we keep.

Supabase may process this data in the United States. Sign in with Apple may give us an Apple private-relay email address; we do not receive your real email unless you choose to share it.

05Subscriptions and Payments

STRAXE Pro is an auto-renewable subscription sold and processed by Apple through the App Store. We do not receive or store your payment card or billing details. Apple may provide us with aggregated, non-identifying sales and subscription information. Manage or cancel your subscription in iOS Settings › your name › Subscriptions.

06Third Parties, Advertising, and Tracking

STRAXE contains no third-party advertising, analytics, or tracking SDKs. We do not track you across apps or websites, we do not sell or "share" your personal information for cross-context behavioral advertising, and we do not profile you for ads. The external services we use are Apple's (iCloud/CloudKit, HealthKit, and App Store payments) and — for the optional social features only — Supabase (our backend processor) and OpenAI (which automatically screens the text of posts, comments, and crew messages for objectionable content), both described in Section 4. Push notifications are delivered by Apple's push service. All are used solely to provide the App.

Exercise demonstration photos

The exercise library shows public-domain demonstration photos from the open-source free-exercise-db project. Rather than ship hundreds of images inside the App, STRAXE loads each one on demand from where that project publishes them, on GitHub (githubusercontent.com). This happens in the exercise library whether or not you have a STRAXE account.

As with loading any image from the web, GitHub's servers receive your device's IP address and the name of the file requested — which indicates the exercise you are looking at. We do not send them anything else: no account, no name, and no training data. We receive nothing back beyond the image itself, and we cannot see what you viewed. GitHub's handling of that request is governed by GitHub's Privacy Statement. If you are offline, the photos simply do not appear and the rest of the exercise entry works normally.

Information Apple provides to us

Separately from anything in the App, Apple makes limited aggregated and anonymized reporting available to us as the developer, through App Store Connect. It may include aggregate sales and download counts by territory and date; aggregate analytics such as impressions, sessions and retention, provided only for users who have consented to share analytics with developers in iOS Settings; and crash and diagnostic reports, shared only if you have opted in to "Share With App Developers" under iOS Settings → Privacy & Security → Analytics & Improvements.

This reporting comes from Apple rather than from any code in STRAXE. It does not identify you, it does not contain your training data, and we do not attempt to re-identify anyone from it. We use it only to understand overall usage and to fix bugs, and you can stop sharing analytics and crash data at any time in iOS Settings.

07Notifications

If you enable them, STRAXE uses local notifications for rest-timer alerts and training reminders. These are generated on your device and involve no server.

If you have a STRAXE account and allow notifications, STRAXE also sends push notifications through Apple's Push Notification service — for example when someone comments on your post, sends a message in your crew, adds you as a friend, or starts a crew challenge. To deliver these we store a push token for your device alongside your account, as described in Section 4. We do not include the text of posts or crew messages in these notifications.

You can disable either kind at any time in iOS Settings › Notifications, which stops delivery. The stored push token is removed when you sign out of your STRAXE account or delete it.

08Data Retention and Deletion

Your data remains until you delete it. You can export your full training history as a CSV file, and you can permanently erase everything using Reset All Data in the App's Settings. Reset All Data deletes your data from the device and from your iCloud. If you created a social account, Profile › Delete account permanently removes it and all your social data (profile, posts, comments, crew messages, friends, crews, leaderboard entries, your push token, and any reports you filed) from the backend.

One record is kept after deletion. When you accept our Terms of Service and this Privacy Policy to use the Community features, we store a dated record that you accepted the version then in force — including your confirmation that you are 13 or older — along with the App version you accepted it in. We retain this record after an account is deleted because it is our record that the agreement was entered into, and we may need it to establish, exercise, or defend a legal claim. It holds no training data, no health data, and none of the content you posted.

09Your Rights

Because your data lives in your own iCloud and on your device, you control it directly. Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal data:

EEA/UK (GDPR): rights of access, rectification, erasure, restriction, portability, and objection. Our legal basis for processing is performance of the service you request and your consent (for Health access and the optional social features).
California (CCPA/CPRA): rights to know, delete, correct, and opt out. We do not sell or share personal information, and we do not use sensitive personal information for purposes requiring an opt-out.

You can exercise access, portability, and deletion yourself in-App (CSV export and Reset All Data). For any other request or question, contact us (Section 12).

10Children

STRAXE is not directed to children under 13, and we do not knowingly collect personal information from them. When you first set up the App you are asked to confirm that you are 13 or older as part of accepting these terms, and that confirmation is recorded with your acceptance. If you believe a child has provided information to us, contact us (Section 12) and we will remove it.

11Changes to This Policy

We may update this policy as the App evolves. Material changes will be reflected here with an updated "Last updated" date. Continued use of the App after changes take effect constitutes acceptance.

12Contact

Verntro Labs, LLC

support@verntrolabs.com

← Back to STRAXE