Privacy Policy

Last updated: July 16, 2026

This Privacy Policy explains how GainsLab ("Repium," "we," "us") handles information in the Repium mobile app (the "App"). GainsLab is a registered business name operated by Kousherian Development Inc., an Ontario corporation. Questions? Contact support@repium.app.

Our approach

Repium is local-first. You can use the App as a guest with no account and no personal information required — your workout data stays on your device. Cloud features (backup and syncing across devices) are optional and only apply if you choose to create an account. In short: no account is required, nothing leaves your device unless you turn on sync, and we don't show ads, run a social feed, or sell your data.

Information we collect

1. Information you provide

• Account information (only if you create an account): your email address. If you use Sign in with Apple, we receive the email you approve — which may be Apple's private "Hide My Email" relay address. We do not request your name.
• Workout data you enter: exercises, sets, reps, weights, rest times, personal records, workout history, notes, planned templates, and preferences (e.g., unit of measurement). For guests this stays on your device; for account holders it is also stored in the cloud to enable sync and backup.

2. Information collected automatically

• Diagnostics and usage: app performance, crash reports, feature usage, device model, OS version, and app version, collected via Google Firebase (Crashlytics, Analytics) to keep the App stable and improve it.
• Technical identifiers: an anonymous app/installation identifier and IP address (processed by Firebase). Guests are assigned an anonymous identifier that is not tied to your real-world identity.

We do not sell your data, and we do not use it for third-party advertising.

How we use information

• Provide and operate the App (log workouts, show history and PRs, timers, templates).
• Back up and sync your data across your devices (account holders only).
• Diagnose crashes, fix bugs, and improve features.
• Respond to your support requests.

Legal bases (GDPR, where applicable): performing our contract with you (providing the App), your consent, and our legitimate interests in maintaining and improving the App.

Third-party services

We rely on these providers, who process data on our behalf:

• Apple — Sign in with Apple (authentication).
• Google Firebase (Google LLC) — Authentication, Cloud Firestore (cloud data storage for account holders), Cloud Storage (serving exercise animations), Crashlytics, Analytics, and Remote Config.

The exercise catalog is licensed content bundled inside the App; it is not fetched from a third party at runtime, so none of your personal data is shared with any exercise-data provider.

Because these providers (notably Firebase) operate globally, your information may be stored and processed in the United States or other countries. Where required, such transfers rely on appropriate safeguards.

Data storage, security & retention

• Guest data is stored locally on your device. Account data is stored locally and in Cloud Firestore.
• Data is encrypted in transit and at rest. No method of storage is 100% secure, but we take reasonable measures to protect your information.
• We retain your data until you delete individual workouts, delete your account, or uninstall the App. Deleting your account removes your cloud-stored workout data (see below).

Your rights & choices

Depending on your location (PIPEDA in Canada, GDPR in the EU/UK, CCPA/CPRA in California), you may have the right to:

• Access the personal data we hold about you;
• Correct (rectify) inaccurate data;
• Delete (erase) your data;
• Export your data (data portability);
• Restrict or object to certain processing; and
• Withdraw consent at any time, where processing is based on consent.

EU/UK users also have the right to lodge a complaint with their local data protection (supervisory) authority. We aim to respond to any rights request within 30 days.

How to exercise these:

• In-app account deletion: you can delete your account and its associated cloud data directly in the App (Profile → Account → Delete Account). This wipes your workouts, summaries, and personal records from our systems and deletes your authentication account.
• Guests: simply uninstalling the App removes your local data.
• For any other request, email support@repium.app.

Children's privacy

Repium is not directed to children under 13 (or the minimum age required in your region), and we do not knowingly collect their personal information.

Changes

We may update this Policy. Material changes will be reflected by updating the "Last updated" date and, where appropriate, notice in the App.

Contact

GainsLab, operated by Kousherian Development Inc. — support@repium.app