Privacy Policy

01What we collect

• Your training and profile. Your onboarding answers: goal, experience, schedule, gym and equipment, body weight, and how you heard about RIGOR (with the creator’s name, if a creator told you and you type it). Also your height if you add it, your plan, every workout and set you log, your notes and any exercises you add. It is saved on your iPhone or iPad first and backed up to our servers so you can restore it on a new phone. We use your goal, experience, schedule, gym, equipment, body weight and what you log to build and adjust your training; how you heard about RIGOR to learn how people find us; and your height only on your profile. Your plan and a summary of your logged workouts are also shown on our subscription screens.
• Your account. The app creates an anonymous account with a random ID when you first open it. If you sign in with Apple or Google, we receive the name and email address the provider shares with us (Apple lets you hide your email).
• Apple Health, only if you allow it. RIGOR can read your body weight and height from Apple Health instead of you typing them, and saves each finished workout (as strength training, with its start time and duration) to Apple Health. The weight and height are backed up with your profile. We never use Health data for advertising or marketing, never sell it, and never send it to our analytics or subscription providers. You can stop sharing at any time in Settings › Apps › Health › Data Access & Devices › RIGOR.
• Subscriptions. Apple processes every payment. We never see your card details; we receive the subscription status and Apple’s transaction identifier so your subscription follows your account.
• Usage analytics. Which screens are opened and which actions are taken. PostHog receives these with a random install identifier and, once your account exists, an identifier made from your account ID, not your name or email, together with your IP address, from which it works out an approximate city. It also receives your goal, days per week, split, workout length, experience level, type of gym, how you heard about RIGOR (and the creator you named), the Apple Ads campaign that brought you, if one did, and your subscription status (free, trial, subscribed or lapsed, and the monthly or yearly plan), so we can compare groups of lifters. The campaign comes from Apple’s own ad attribution, which tells us only which of our ads led to the install; it does not follow you across other apps or websites. When we test two versions of a screen, PostHog uses the install identifier to decide which one you see. Superwall records which subscription screens you saw and what you bought, tied to your account ID, and receives your IP address, from which it works out an approximate location; it passes your subscription’s events (such as a trial, purchase, renewal, cancellation, billing problem, expiry or refund, with the product, price, country and Apple’s transaction identifiers) to PostHog under the same identifier. Nothing is sent to PostHog before you accept the Terms and this policy on the app’s first screen, and you can turn usage analytics off at any time in Profile › Legal › Share usage analytics. Off, the app records nothing more for PostHog on any device signed in to your account; Superwall still passes your subscription’s events to PostHog, because that is how we count purchases.
• Device details. Our analytics provider receives your device model and type, iOS version, app version, language, time zone and screen size. Our subscription provider receives your device model, iOS version, app version, language, connection type, the date the app was installed and the identifier Apple gives our apps on your device (the vendor identifier).
• Support. If you email us, we keep your message. If you choose to attach diagnostics, they include your app and device details, your settings, backup state and account ID.
• Crash reports. Technical details about errors (device model, iOS version, what the app was doing), under a random identifier for the app’s installation. They don’t include your name or email. Crash reports are not usage analytics: they are sent with analytics turned off too, so we can fix errors.
• Before you accept the terms. When the app first opens it creates your anonymous account, asks Expo whether there is an update, starts Superwall (which the app needs to know whether you subscribe) and can send a crash report. Nothing goes to PostHog until you accept.
• Visits to this website. joinrigor.com counts page visits with Cloudflare Web Analytics. It sets no cookies and does not identify you.

02How we use it

To run the app: build and adjust your plan, back up and restore your training, keep your subscription working, fix bugs and improve RIGOR. We don’t show ads, we don’t sell your data, and we don’t use it to track you across other companies’ apps or websites.

03Who helps us run RIGOR

These providers process data on our behalf, only for the purposes above:

• Google Firebase (accounts, backup database and server functions; servers in the United States)
• Superwall (shows subscription screens and tracks subscription status; receives your account ID, your plan’s name and summary, your first workout’s name, your goal, days per week, workout length and a one-line summary of your logged workouts (how many, and the name and date of the last one), the creator you named, if any, Apple’s ad attribution token, from which it learns the Apple Ads campaign that brought you, if one did, the vendor identifier and your IP address)
• PostHog (usage analytics and tests of two versions of a screen; receives app events, device details, a random install identifier, an identifier made from your account ID, your goal, days per week, split, workout length, experience level, type of gym, how you heard about RIGOR and the creator you named, the Apple Ads campaign that brought you, if one did, your subscription status, your subscription’s events from Superwall, and your IP address)
• Sentry (crash reports)
• Expo (delivers app updates; when the app checks for one, Expo receives a random install identifier, the update the app is running and your IP address)
• Apple (Sign in with Apple, App Store payments, Apple Health)
• Google (Sign in with Google)
• Cloudflare (hosts this website and counts its visits)
• ImprovMX and Google Workspace (receive and hold the emails you send to our support address)

04How long we keep it

• Your training and account data are kept while your account exists.
• You can delete your account at any time in the app: Profile → Delete account and data. This removes your backup and your account from our servers and wipes the data from your iPhone or iPad. Deleting the account doesn’t cancel an App Store subscription; cancel it in your Apple account settings.
• An anonymous account that hasn’t been used for 180 days and never bought a subscription is deleted automatically.
• PostHog keeps analytics events for one year and Sentry keeps crash reports for up to 90 days; both are then deleted. The facts PostHog keeps beside the events (the plan details, how you heard about RIGOR, the Apple Ads campaign and your subscription status listed above) have no fixed period: they are kept until you ask us to erase them. Deleting your account does not remove these records, because they are not tied to your name or email; to have your analytics records erased, write to support@joinrigor.com.
• Superwall keeps its record of the subscription screens you saw and what you bought under your account ID for as long as we use Superwall, and we ask it to delete the records when we stop. Deleting your account does not remove them; to have them erased sooner, write to support@joinrigor.com and we will ask Superwall to erase them.
• Expo keeps the update checks described above only as long as reasonably necessary; it publishes no fixed period. They carry a random install identifier, not your name, email or account ID.
• Cloudflare keeps the full record of visits to this website for 7 days, then about one visit in ten, and shows us the last six months.
• Support emails, with any diagnostics you attach, are kept for up to two years after your last message and then deleted; ask and we delete them sooner. ImprovMX, which forwards them to us, deletes each message once it is delivered and keeps a delivery log (sender, recipient and subject) for 7 days.

05Your rights

Wherever you live, you can ask us for a copy of your data, to correct it, or to delete it, by writing to support@joinrigor.com. If you are in the European Economic Area, the United Kingdom or California, you also have the rights your local law gives you, including the right to object and to complain to your data protection authority. We process your data to provide the service you asked for (contract) and, for analytics and crash reports, for our legitimate interest in keeping the app working well.

To withdraw a permission: stop Apple Health access in Settings › Apps › Health › Data Access & Devices › RIGOR. To stop usage analytics: turn off Profile › Legal › Share usage analytics in the app.

06International transfers

Our servers and providers are in the United States. When your data is transferred there from elsewhere, we rely on our providers’ standard contractual clauses or equivalent safeguards.

07Children

RIGOR is not intended for children under 16, and we don’t knowingly collect their data.

08Security

Data is encrypted in transit and at rest by our providers, and your backup can only be read by your own account.

09Changes

If we change this policy, we’ll update the date above and, for significant changes, tell you in the app.