Privacy policy

Last updated 24 October 2026.

rpelog is a personal workout tracker. It stores what you log and nothing else. Your data is not sold or shared, there are no ads, and this site uses no cookies, no analytics and no third-party requests.

Who is responsible

The publisher of rpelog, an individual, decides why and how your data is used. Details are on the legal page.

What is stored

• Your account: your email address, which comes from the sign-in service, and the date you were last seen in the app.
• Your profile: your display name, your unit (kg or lb), your language and theme, and, only if you enter them, your height, your birth date and the choice of the male or female body drawing. Your working weight settings.
• Your training: your sessions with their date and, if recorded, their start time and duration, each set (exercise, weight, reps, RPE, tempo, note), your body weights, the maxes you save, your favorite exercises and the exercises you create.
• In your browser: the workout you have not finished, workouts finished without a connection that are not saved yet, a copy of your recent data so the app opens without a connection (removed when you log out), your theme, plate and rest timer settings, and the sign-in session of the app. They stay on your device.

The data is used to run the app: to show your sessions, progress and working weights. It is not used for anything else, and it is not used to profile you.

Optional features

Some accounts have optional features. If you use them, this data is also handled:

• Strava: if you connect your Strava account, rpelog reads your activities (type, date, length, heart rate and heart-rate zones) to show them next to your sessions, and keeps the access tokens it needs. Disconnecting Strava, or deleting your account, removes them. rpelog never writes to Strava.
• Board photo: if you photograph a workout board, the photo is sent to Anthropic's service to read the lifts. The photo is not stored by rpelog. Only a count of scans per day is kept, to limit use.

Who handles your data

• Auth0 (Okta) handles sign-in and holds your login details.
• Upsun (Platform.sh) hosts the app and its database.
• Strava and Anthropic, only if you use the optional features above.

Your data is never sold, and it is not shared with anyone else.

How long it is kept

For as long as your account exists. When you delete your account, in the app under Me and Account, your data is erased 30 days later, and until then you can restore the account by signing in. Backups of the database are overwritten as they expire.

Your rights

You can see and change your profile and your sessions in the app, download a copy of your data there on a computer (a JSON file with everything, or a CSV file of your sets, in Profile under Account), and delete your account there. Under the GDPR you can also ask for a correction, ask for your data to be erased, object to its use or ask for its restriction. To use a right, get in touch:

Send a message on Instagram @rpelog, or use the support page.

You may also complain to your data protection authority. In France that is the CNIL.

Cookies

This site sets no cookies and loads nothing from other sites. The app stores the items listed above in your browser only to work.

Changes

If this policy changes, the date at the top changes. A change that matters to you is announced in the app.