Privacy policy
Effective 4 October 2026
This policy covers the SplitRep app for Android, its companion Bluetooth devices, and this website (splitrep.app). SplitRep is the data controller. You can reach us at hello@splitrep.app.
The short version
- Your workouts stay on your phone. SplitRep has no accounts and no server that stores your training data.
- If you connect Strava, the app sends the sessions you choose to Strava and reads your Strava activities to show them beside your lifting. Your Strava login stays on your phone.
- No ads, no analytics, no tracking, no selling of data.
What the app stores on your phone
To do its job, the app keeps the following in its own storage on your device:
- your workouts and programs: exercises, target sets, reps and weights;
- your training history: each set you log, with its weight, reps or duration, rest, and the time it was logged;
- custom exercises you create;
- settings, such as your gym's weight steps and, if you enter it, your bodyweight (used only to fill in bodyweight exercises when sending them to Strava);
- the companion devices you have paired.
This data does not leave your phone unless you send it somewhere, as described below. We cannot see it, and we cannot recover it for you if your phone is lost, which is why the app offers a backup file.
Strava (optional)
If you choose to connect a Strava account:
- Signing in. You sign in on Strava's own page, and Strava gives the app access tokens. They are stored only on your phone. One step of that exchange needs a secret that cannot ship inside an app, so it goes through a small service we run on Cloudflare. That service adds the secret, passes the request to Strava, and returns the tokens to your phone. It stores nothing.
- What the app sends to Strava. Each session you save, when automatic upload is on or when you upload one yourself: the exercises, sets, reps, weights and durations, the start time, and the title and description. Who can see the activity on Strava depends on your Strava privacy settings. Strava's default is that everyone can.
- What the app reads from Strava. Your name and athlete ID, and your recent activities (type, date, distance and time), so it can show your week's rides and runs beside your lifting. This includes activities you have made private. The app asks Strava for permission to upload activities and to read all of yours, including private ones.
- Disconnecting. You can disconnect in the app's settings, or revoke access at any time from your Strava account settings, under My Apps.
Once data is on Strava, Strava's own privacy policy applies to it.
Companion devices
If you use a SplitRep watch or puck, the app talks to it directly over Bluetooth. It sends the device your workout plan and receives the sets you log on it, plus the device's name, battery level and firmware version. That data goes only between your phone and your device. The app does not use Bluetooth to find your location.
Photos, backups and share links
- Share cards. When you tap Save on a session card, the app adds that image to your photo library. It does not read your photos.
- Backups. A backup is a file with your training data in it, saved wherever you choose. Your Strava tokens are never included.
- Share links. When you share a workout, the plan (exercises, sets and reps, without your weights) is written into the link itself. Anyone who has the link can read that plan. The part of the link that carries the plan is never sent to our website.
What we do not do
The app contains no advertising, analytics or crash-reporting code, and no third-party tracking. We do not sell, rent or trade personal data, and we do not use it for advertising or for training AI models.
This website
splitrep.app is hosted on Cloudflare. It uses no cookies and no analytics. Like any web host, Cloudflare processes technical data such as your IP address and browser type to deliver and protect the site. See Cloudflare's privacy policy.
If you email us, we use your address and message only to reply and to help you. Mail to splitrep.app is forwarded through Cloudflare to our email provider. We delete correspondence once it is no longer needed to handle your question.
Legal basis
Under the GDPR, we process data to provide the features you ask for, such as uploading a session to Strava when you have connected your account, and on our legitimate interest in keeping this website secure. Your phone asks for your consent before the app can use Bluetooth or add images to your photos, and you can withdraw that consent in your phone's settings.
Where data goes
Data you send to Strava is processed by Strava, Inc. in the United States under Strava's terms. Cloudflare runs a global network, so the sign-in step and this website may be served from outside the European Economic Area.
How long data is kept
Data on your phone is kept until you delete it or uninstall the app. Uninstalling, or clearing the app's storage, removes it, along with your Strava tokens. Data you have uploaded to Strava stays there until you delete it on Strava.
Your rights
You have the right to access, correct, delete and export your personal data, and to object to or restrict how it is processed. Because your training data lives on your phone and not with us, you can do most of this yourself: back up to export, edit or delete in the app, uninstall to erase, and disconnect Strava to stop the app's access. For anything else, email hello@splitrep.app. You can also complain to the Irish Data Protection Commission (dataprotection.ie) or to the data protection authority where you live.
Children
SplitRep is not directed at children under 16, and we do not knowingly process their data.
Changes
If the app starts handling a new kind of data, we will update this policy before that version is released, and change the date at the top of this page.