Privacy Policy

This Privacy Policy explains how Sets (“we,” “us”) handles information when you and your clients use the Service. We aim to collect only what we need to run the product.

1. Information We Collect

• Account info — your name, email, and password (stored hashed, never in plain text).
• Payment info — handled entirely by Stripe. We store only a customer ID and your subscription status; we never see your card number.
• Client records you create — names and optional emails of clients you add. You are the controller of this data; we process it on your behalf.
• Workout logs — weights, reps, completion status, and timestamps your clients record while using the shareable workout link.
• Operational data — logs, error reports, and similar diagnostics needed to keep the Service running.

2. How We Use It

• To operate the Service and show you what you and your clients have entered.
• To process payments and manage subscriptions.
• To communicate about your account (e.g., billing, security).
• To diagnose issues and improve the product.

We do not sell your information. We do not use your workout data to train machine learning models.

3. Who We Share It With

We use a small set of vendors to run the Service. Each receives only what they need:

• Supabase — database and authentication. Stores account data, programs, clients, workout logs.
• Stripe — subscription billing. Handles payment information directly; we never receive card details.
• Vercel — hosting and edge delivery.

4. Cookies & Authentication

We use first-party cookies to keep you signed in. We do not use third-party advertising cookies. The shareable client workout link (/w/<token>) authenticates only via the token in the URL — clients do not need an account.

5. Retention

We keep your data while your account is active. If you delete your account, we delete your programs, clients, and workout logs from our database within 30 days. Backups may retain data for up to 90 additional days before being overwritten.

6. Your Rights

You can request a copy of your data, correct inaccuracies, or delete your account by emailing us. If you are in a jurisdiction with additional privacy rights (e.g., GDPR, CCPA), those apply and we'll honor them.

7. Children

Sets is intended for personal trainers and their adult clients. We do not knowingly collect information from anyone under 13.

8. Changes

We may update this Policy. Material changes will be announced via email or an in-app notice with a new “last updated” date.

9. Contact

Questions or privacy requests? Email hello@usesets.com.