Privacy Policy
Last updated: June 2026
G-Track is a workout tracking application developed by George Atton. This policy explains what data the app collects, how it is used, and your rights.
1. Data We Collect
Data you provide
- Display name — entered during onboarding, used to personalise the app.
- Body weight — optional, used only to estimate workout calories on-device.
- Workout data — exercises, sets, weights, reps, rest times, RPE/RIR ratings, and session notes you log during workouts.
- Account credentials — if you create an optional cloud account (email address and password, handled by Supabase Auth).
Data collected automatically
- Heart rate readings — captured via Bluetooth from a paired heart rate monitor during workouts. Stored locally on your device only; not transmitted unless you enable cloud sync.
- App diagnostics — standard crash reports via Expo/React Native. These do not include any personal health data.
2. How We Use Your Data
| Purpose | Data used |
|---|---|
| Core workout tracking | Exercises, sets, weights, reps, RPE, session notes |
| Calorie estimation | Body weight, workout duration, volume, heart rate |
| Personal records | Workout history (processed entirely on-device) |
| Cloud backup (Premium only) | All workout data — synced to your private Supabase account |
| App personalisation | Display name, weight unit preference |
3. Data Storage
Local storage (all users)
All workout data is stored locally on your device using SQLite. This data remains on your device even if you do not create an account.
Cloud storage (Premium subscribers only)
If you subscribe to G-Track Premium and sign in, your data is synced to Supabase — a secure, GDPR-compliant cloud database. Your data is stored in an isolated database row protected by Row-Level Security; no other user can access it.
4. Data Sharing
We do not sell, rent, or share your personal data with third parties.
The only third-party service we use is Supabase (for optional cloud sync and authentication), which processes data on our behalf under their privacy policy.
5. Bluetooth & Location Permissions
G-Track requests Bluetooth permissions to connect to a heart rate monitor (e.g. Helio Strap) during workouts. On Android, Bluetooth scanning requires the ACCESS_FINE_LOCATION permission as mandated by the Android operating system — the app does not use this permission to determine or record your physical location.
6. Data Retention & Deletion
- Local data — remains on your device until you uninstall the app or manually delete it within the app.
- Cloud data — if you have a Premium account and wish to delete your data, contact us at the email below and we will delete your account and all associated data from Supabase within 30 days.
7. Children's Privacy
G-Track is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.
8. Changes to This Policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.
9. Contact
If you have questions about this privacy policy or your data, please contact:
George Atton