Privacy Policy 8REP

Last updated: October 13, 2026 · Polski

8REP is a training and nutrition app designed so that your data stays primarily on your device. We don't run servers that collect your data, we don't use analytics or tracking tools, and we don't sell your information. This document explains what data is processed, for what purpose and on what legal basis.

1. Data controller

The data controller within the meaning of the GDPR is 8RECORDS Filip Gołda, ul. Hauke-Bosaka 7/101, 25-217 Kielce, Poland — the publisher of 8REP. Privacy contact: filip@8records.pl.

2. What data we process and where it is stored

Data you enter or that the app generates is stored locally on your device (SwiftData database). This includes:

Data category	Examples	Where it goes
Training data	Plans, sessions, sets, weights, reps, rest times, body weight entered manually in a workout's details	Device (optionally iCloud — see §4)
Nutrition data	Meals, products, macronutrients, water, recipes, calorie targets	Device (optionally iCloud)
Body and health data	Weight, body measurements, progress photos, workout heart rate	Device only — never iCloud (see §4)
Outdoor workout routes	Route GPS points, distance, pace, elevation gain (only when you record an outdoor workout)	Device only — never iCloud (see §6)
HealthKit data	Weight, body fat %, waist circumference, height, calories (active and resting), steps, heart rate, heart rate variability (HRV), resting heart rate, sleep, workouts (when you turn on the integration)	Apple Health app — stays on your device
Settings and preferences	App configuration, onboarding state	Device

No account is required. We don't collect your name, email address or other identifying data in order for the app to work.

8REP Pro purchases (subscriptions and the one-time purchase) are handled entirely by Apple (App Store). We never receive your payment details — the app only checks whether your Apple account has an active purchase.

3. Apple HealthKit

The Health (HealthKit) integration is completely optional and works only after you consent to the individual data types. When you turn it on:

• the app can read: weight, body fat %, waist circumference, height, calories burned (active and resting), steps, heart rate, heart rate variability (HRV), resting heart rate, sleep and workouts — to calculate your daily balance, show progress and assess training readiness (HRV and resting heart rate are compared only with your own baseline from the last 60 days, on your device),
• the app can write: weight, body fat % and waist circumference entries and completed workouts with calories burned, and for outdoor workouts also distance and route — so they are available to other apps and Apple Watch.

During a workout, the Apple Watch app measures heart rate and calories burned (a HealthKit workout session), shows them live on the watch and phone, and saves the workout to the Health app when it ends. If you turn off saving workouts to Health in 8REP or discard the workout, the measurement is not saved. Deleting a workout from 8REP history also deletes it from the Health app. When you start an outdoor workout on the watch, the watch also records the route with its own GPS — details in §6.

HealthKit data is processed only on your device. In line with Apple's requirements, we do not use health data for advertising or marketing and do not share it with third parties. You can withdraw consent at any time in system Settings → Health.

4. iCloud sync (optional)

8REP can sync data between your devices through iCloud (Apple CloudKit). This feature is off by default and you turn it on yourself in the app's Settings.

• Once on, data is stored in your private iCloud database, linked to your Apple ID.
• Your profile syncs along with the data: name, date of birth, sex and the goal chosen in the app (through the iCloud key-value store), so your next device doesn't ask for them again. Height stays on the device.
• Health data is not synced. Body measurements (weight, circumferences, progress photos), workout heart rate and outdoor workout GPS routes stay only on your device — they never go to iCloud, even with sync turned on. The exception is body weight you enter yourself in a specific workout's details (used for bodyweight exercises and calorie estimates) — it is part of that workout's data and syncs with it. Weight, body fat % and waist circumference saved to the Health app (when you turn saving on) can reach your other devices through the Health app's own sync — on Apple's terms, without 8REP's involvement.
• We have no intermediary server and no access to this data — it is processed by Apple within your iCloud account, under Apple's privacy policy.
• Turning off sync or deleting data from iCloud is entirely up to you.
• Regardless of sync: the number of free Coach workouts and generated plans you have used is stored in the keychain (synced through iCloud Keychain if you have it on), so reinstalling the app doesn't renew the free limit. These are counters only — no workout data.
• If you have iCloud Backup turned on in iOS, it includes the app's data on the device (body measurements and routes too) — just like any other app's data. Apple creates and encrypts that backup; we have no access to it.

5. Barcode scanner and Open Food Facts

When you scan a food product, the app sends only the barcode, and when you search for a product — the search text you type (from two characters, automatically as you type, while the list shows all products) — to the open, community-built Open Food Facts database to fetch product information. Type product names into the search, not personal data. None of your personal data, training or health data is sent. Product data is available under the ODbL license. Use of Open Food Facts is subject to its own privacy policy.

6. Location and outdoor workouts

When you record an outdoor workout (run, walk, ride — an 8REP Pro feature), the app uses your location with your permission. Access is granted only "While Using the App" — never "Always" — and is active only during recording; the system then shows the location indicator, including on the Lock Screen. Indoor workouts (e.g. treadmill, stationary bike) don't use location at all.

• The route (GPS points), distance, pace and elevation gain are stored only on your device — they don't go to iCloud, even with sync turned on, and aren't sent to any server.
• Apple Watch. If you start an outdoor workout on the watch, the watch records the route (its own GPS, the same "While Using the App" permission). When the workout ends, the route is transferred directly to your iPhone over the Apple Watch – iPhone connection and saved there; it doesn't pass through any server. When the watch is out of range of the phone, the transfer waits on the device and arrives after reconnecting. The route is always recorded by the device you start the workout on — never both at once.
• To measure elevation gain, the app may use the barometer ("Motion & Fitness" permission); readings stay on the device.
• During a workout and in the details, the route is shown on an Apple map (the "Apple map under the route" option, on by default). To draw the map, the system downloads map tiles from Apple's servers for the area you're in or the route passes through; the route itself is not sent — the app draws the route line on the device. Map downloads are subject to Apple's privacy policy. With this option off, the route is drawn without a map and without a network connection.
• If you use the Health integration, the outdoor workout is saved there with distance and route. Deleting the workout in 8REP also deletes its route from Health.
• Routes are part of the manually created backup (see §10); they are not included in the coach export.
• Segments and heatmap: the app detects repeated routes and stretches you mark yourself on your device and ranks your efforts; the heatmap shows all your routes overlaid. Segments and results stay on the device (segments are included in the backup); the heatmap can't be shared.

Sharing a route. Only you share a route — as an image (card) that you send with an app of your choice. To protect your safety:

• the start and end of the route are hidden by default (radius from 200 m to 1 mile, your choice), and the center of the hidden area is randomly offset so your starting point can't be read from it;
• you can create privacy zones (e.g. home, work) — parts of the route inside a zone don't appear on cards; the app suggests a zone when a route starts at a place you often start from. Zones are stored only on your device — they don't go to iCloud or the backup;
• you can share a card without the route (stats only) and hide the date, time, pace or elevation gain;
• the card contains no map or street names — the route is drawn as a plain line, and the image file contains no location data (GPS metadata).
• you can put your own photo behind the card — from your library or taken in the app. You pick a library photo in the system Photos picker, so 8REP doesn't get access to your whole library, only to the selected image. The photo is used only in memory while the card is created — it isn't saved in the app or remembered between shares. The finished card is created as a new image, so it carries none of the original's metadata (including the photo's GPS coordinates).
• the card background can also be your own video (up to 60 seconds — the length of one Stories frame; longer recordings are trimmed). You pick it in the same system Photos picker, so 8REP still sees only the selected file. A working copy of the recording and the finished card are created in a temporary folder and deleted when you close the share sheet; the whole card is built on your device and nothing is sent to a server. The card carries the picture and sound from your recording — check what can be seen and heard before you send it.

7. Camera and photos

The app asks for camera access to scan barcodes and product labels and to take progress photos. Progress photos and photos chosen from your library are stored only locally in the app's data — they don't go to iCloud, even with sync turned on (see §4). We don't send them to any server.

8. Notifications

With your permission, the app sends local notifications (e.g. rest timer reminders between sets, deload suggestions). We don't use them for marketing.

9. What we DON'T do

• We don't use analytics, ads or tracking tools (no Firebase, Crashlytics, ad SDKs, etc.).
• We don't build user profiles or track you across apps or websites.
• We don't sell or rent your data.
• We don't share your data with third parties for commercial purposes.

Diagnostic reports. When the app crashes or freezes, iOS (MetricKit) may hand it a technical report: device model, system and app version and a code trace — without your workouts, diet or health data. Reports stay on your device (up to the 20 most recent); you can review them, delete them or send them to us yourself, for example by email (Settings → Diagnostic reports). We receive only what you send and use it only to fix the bug.

10. Backups and export

You create backups and coach exports manually. The backup file also contains outdoor workout routes. You decide where you save the backup file and who you give it to. Once a file is exported, you are responsible for how it is shared further.

11. Legal basis for processing (GDPR)

Because data is processed locally on your device and under your control, in most cases the controller has no access to it. To the extent processing takes place, the basis is:

• Consent (Art. 6(1)(a), and Art. 9 for health data) — HealthKit, notifications, camera access, location and motion sensor (route recording), iCloud sync.
• Performance of the service / legitimate interest (Art. 6(1)(b)/(f)) — Open Food Facts queries needed for the scanner and the food search to work.

12. Your rights

You have the right to:

• access your data — it is visible and editable directly in the app;
• delete your data — delete records in the app or uninstall the app, which removes local data; delete data in iCloud in your iCloud settings;
• withdraw consent — in system Settings (Health, camera, location, motion & fitness, notifications) or in the app (iCloud, route recording, Apple map);
• lodge a complaint with a supervisory authority (in Poland: the President of the Personal Data Protection Office; in the EU: your local data protection authority).

13. Retention and deletion

Data is kept for as long as you keep it in the app. Uninstalling the app removes local data from the device. If you used iCloud sync, data may remain in your iCloud account until you delete it in your iCloud settings.

14. Children

8REP is not directed at children, and we don't knowingly collect data from children below the age required by local law.

15. Changes to this policy

We may update this policy from time to time. We will signal material changes by updating the date at the top of this page and, where needed, with a message in the app.

16. Contact

For anything related to privacy and data protection, write to: filip@8records.pl.