Privacy Policy

Musclemark

Effective: 22 October 2026

The short version

Musclemark keeps your log in your account. From version 1.0.5 you sign in with Apple or Google, and what you log is stored on your phone and in a database we run, so it is backed up and the same on every phone. The app still works offline and syncs when you are back online. There are no ads and no tracking. We do not sell data, and we do not share it with anyone beyond the services named on this page.

Who we are

Musclemark is made by Blepware (James Darmanovich). For anything about privacy, email support@blepware.com.

What the app stores

The app keeps the following on your phone and, through your account, in our database: your profile (name, sex, bodyweight, height, date of birth and lifting level), your workouts and sets, your routines, your bodyweight log, your challenges and badges, and your settings. From version 1.0.6 your account also notes which phone you use: its model and system version (for example "iPhone 17 Pro, iOS 26.1"), so we can help with anything specific to it. It also keeps a small set of local usage events; these never leave the device and we never see them. The copy on your phone is also included in your device's normal backups (e.g. iCloud or Google backup), which are governed by Apple's or Google's own policies.

Sharing and export

"Ask your own AI" and "Export CSV" turn your training into text or a file on your phone and hand it to your phone's share sheet. Nothing is sent anywhere until you pick a destination, such as an AI app, email or a files app, and from then on that service's own privacy policy applies.

Rest timer and notifications

The rest timer on the lock screen and the "rest over" alert are local notifications and a Live Activity, scheduled by the app on your phone. No push service is involved and nothing about them leaves the device.

Your account and sync

From version 1.0.5 Musclemark needs an account, made the first time you sign in with Apple or Google. (Earlier versions could be used without one, and nothing was uploaded unless you signed in.) The data listed above is stored in a database hosted by Supabase in the EU (Ireland), so it is backed up, can be restored on another phone and stays in step between phones. Sign-in credentials are handled by Supabase Auth, not by us. Apple and Google sign-in share only the name and email address you allow, and Apple can hide your email behind a relay address.

Purchases

The Musclemark Pro subscription is processed by Apple (App Store) or Google (Play Store). The app keeps whether Pro is active, and until when, on your phone so it works offline. Payment details are handled entirely by Apple or Google and never reach us. To validate a purchase, the app uses RevenueCat, which receives the store's transaction receipt together with your account id (in a version before 1.0.5 used without an account, a random, anonymous app-installation identifier instead).

No ads

Musclemark shows no ads. Since 20 October 2026 the app requests none, and from version 1.0.4 it no longer contains an advertising SDK. Earlier versions showed one banner ad served by Google AdMob; if you still have one of those, the app stops requesting ads the next time it updates itself.

What we do not do

No ads, no tracking, and no advertising, analytics or crash-reporting SDKs
No selling of data, and no sharing with anyone other than Supabase, RevenueCat and the app stores, each for the purpose described here
Your log goes only to your own account in our database, never to anyone else

Deleting your data

In the app, go to Settings > Account > Delete account. This removes the server copy of your data and your sign-in immediately. You can also email support@blepware.com from the email address on the account and we will delete it for you. The data on the phone itself is removed by deleting the app, or straight away if you switch on "Also erase the log on this phone" when you delete the account. From version 1.0.6, if you sign in with Apple, deleting your account on an iPhone also removes Musclemark from your Apple Account (Apple asks you to confirm). You can also remove it yourself in Settings > your name > Sign-In & Security > Sign in with Apple.

How long we keep data

The server copy is kept for as long as your account exists, and goes when you delete the account.

Security

Data travels between the app and the database over TLS. The database uses row-level security, so each row can be read and written only by the account that owns it.

Children

Musclemark is not intended for children under 13, or under 16 where local law sets that age, and we do not knowingly collect personal information from them. If you believe a child has created an account, email us and we will delete it.

Changes

If the app ever changes what it processes, this page will be updated first and the date above revised.

Contact

Questions about privacy: support@blepware.com