Privacy Policy

Last updated: September 6, 2026

SigmaSets ("the app") is operated by WRBO LLC ("we", "us", "our"). This policy explains what data we collect, how we use it, and your rights.

Data We Collect

We collect only the data needed to provide the app's functionality:

• Account information — email address and display name. If you sign in with Apple or Google, we receive the name and email associated with that account (or an Apple relay address if you choose "Hide My Email").
• Workout data — workout templates, exercises, logged sets (weight, reps), personal records, streaks and rank points. This is the core content you create in the app.
• Profile — unit preference (lb/kg), theme preference, body weight (if you enter it), onboarding answers, and, if you set them, a handle, a profile photo and the display name shown on the PR map.
• Location — one location reading when you finish a workout, only if you have allowed location access. It places your lifts on the PR map. It is stored with that workout session, and the app works fully without it.
• Photos and videos — photos and short video clips you choose to take or attach to a workout, and progress photos. Progress photos are private to you and are never shown to anyone else. Other workout photos and clips are private until you share that workout to your friends' feed, and go private again if you delete the post.
• Audio — a video clip records sound while you film it. The microphone is used only while you record a clip; you can decline microphone access and still take photos.
• Content you share — captions, comments, props, and the workouts, routines and records you choose to share. Friends see what you share with them; the PR map's boards show your display name and lift to anyone viewing that place.
• Push notification token — a device token, only if you allow notifications, so we can deliver them.
• Purchase information — if you make a purchase, transaction IDs from the app store, to verify it. We do not see or store your payment method.

Data We Do Not Collect

• We do not use analytics or tracking SDKs.
• We do not serve ads or share data with advertisers.
• We do not sell your data to third parties.
• We do not collect your contacts or health data, and we never access your photo library beyond the items you pick.
• We do not track you across other apps or websites.

How We Use Your Data

• Provide the service — store your workouts, sync across devices, calculate insights, personal records and rank.
• Show your activity to the people you choose — the friends feed, the PR map's boards and the profile you make visible.
• Store and show your photos and videos — on your own private rails, and on a workout post only when you share it.
• Authentication — verify your identity when you sign in.
• Notifications — deliver the notifications you turn on.
• Transactional email — send verification codes and account emails. We will never send marketing email.
• Moderation — review content that other users report.

Third-Party Services

We use the following services to operate the app:

• Supabase (database and authentication) — stores your account, workout and social data. Supabase Privacy Policy
• Cloudflare (media storage and delivery, website) — stores your photos and videos in a private bucket and serves them only through short-lived signed links that expire within an hour. Cloudflare Privacy Policy
• Expo (push notifications) — relays notifications to your device using the device token. Expo Privacy Policy
• OpenFreeMap and OpenStreetMap (the PR map) — your device loads map tiles, and a workout's location is turned into a place name server-side. No account information is sent with these requests.
• Apple App Store / Google Play (payments) — process any purchase. Their payment terms apply.
• Resend (transactional email) — delivers verification codes and account emails. Resend Privacy Policy
• Apple Sign-In / Google Sign-In (authentication) — used only to verify your identity. We receive your name and email; no other data is accessed from your Apple or Google account.

We do not share your workout data, personal records, photos or profile information with any third party beyond the services above, which process it on our behalf.

Data Storage and Security

Your data is stored on Supabase's infrastructure with encryption at rest and in transit. Passwords are hashed and never stored in plain text. Access to the database is restricted by row-level security policies — you can only access your own data, and other people can only see what you have shared with them. Photos and videos are stored privately and are never reachable by a public link.

Data Retention

We keep your data for as long as your account is active. Deleting a photo or clip in the app removes it, and any signed link to it stops working within an hour. If you delete your account, we delete your data, your photos and videos and your profile photo from our systems within 30 days. Backups may retain data for up to 90 days before being purged.

Your Rights

You can:

• Access your data — all your workout data, photos and videos are visible in the app.
• Delete a photo or clip — individually, from within the app, at any time.
• Control what you share — sharing a workout is always your choice; progress photos never leave your account.
• Delete your account — available in the app's settings. This permanently removes your account, your content, your photos and videos and your profile photo.
• Contact us — for any data-related requests, email support@sigmasets.com.

Children's Privacy

SigmaSets is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with data, please contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through the app or by email. The "last updated" date at the top reflects the most recent revision.

Contact

WRBO LLC
Email: support@sigmasets.com