The short version
- What you log or import in the web app is stored on your device. Without an account, we never receive it.
- If you create an account, your data is also backed up to it so it syncs between devices. The backup is stored with Google Firebase in the EU, and deleting your account deletes it.
- Videos you check with form check, and the camera in form practice, are analysed on your device. We never receive them.
- If you sign up for the beta, we keep your email and the few details you choose to give us, to email you about Sticking Point and send app invites.
- No ads, no analytics, no tracking cookies, and we don't sell your information.
- Sticking Point is for adults 18 and over.
Your training data
Workouts you log, exports you add from Hevy, Strong or Fitbod, food entries, body weight and measurements, your goal and your body numbers are stored in your browser's own storage (IndexedDB) on that device, so they're there when you come back.
Without an account, none of it is sent to us or anyone else. To remove it, use Delete all data on the app's Your data page, or clear this site's data in your browser settings. Because we never receive it, we can't see, recover or delete it for you.
With an account, we keep your email address, your year of birth (to confirm you're 18 or over) and a record of your consent, and the data above is backed up to your account a few seconds after it changes. The backup is stored in Google Firebase (Firestore) in the EU, in Belgium and the Netherlands, and only you can read it, when signed in. Backups start once you've verified your email. Delete your account from the app's account page and the account, its backup and your consent record are deleted.
Videos you analyse with form check, and the live camera in form practice, are processed by a pose model running in your browser. The video and the body positions found in it never leave your device. If you choose Save this check, only a short summary (the exercise, date and rep numbers) is kept, on your device and in your backup if you have an account.
Beta sign-ups
If you sign up, we store:
- your email address (required) and first name (optional)
- which phone you use (iPhone or Android), what you want help with, which app you use now, and whether you're a lifter or a coach
- whether we've invited you to the beta, and when
- the country your request came from, which our host works out from your IP address
- when you signed up and how many times
We use these details only to email you about Sticking Point (beta invites, new features, the coach beta and the apps' launch) and to send you a test invite. When we invite you, we give your email to Apple (TestFlight) or Google (Play Console) so they can send the invite. You can ask us to remove you at any time by emailing hello@stickingpoint.app, and every email we send will tell you how to unsubscribe.
To stop automated sign-ups, we keep a counter tied to your IP address for up to 15 minutes. It's deleted automatically.
Sign-up details are stored with Cloudflare, our host, and kept until you ask us to delete them or we close the list.
Consumer health data
Training, food and bodyweight logs can count as consumer health data under laws such as Washington's My Health My Data Act. Our consumer health data privacy policy explains what we collect, why, who we share it with and how to use your rights.
Hosting and other services
Pages on this site load a few things from other companies. When your browser fetches them, those companies receive your IP address and basic browser information, under their own privacy policies:
- Cloudflare hosts the site and stores sign-ups. It processes request data such as IP addresses to deliver and protect the site.
- Google Firebase runs accounts (Firebase Authentication) and stores account backups (Cloud Firestore, EU multi-region), only for people who create an account.
- Google Fonts serves the typefaces.
- jsDelivr serves the Three.js library for the 3D animation.
- Pexels and Unsplash serve the videos and photos.
- Apple and Google receive your email only if we invite you to test the app on TestFlight or Google Play.
Your rights
You can ask to see, correct, or delete the sign-up and account details we hold about you. You can delete your account and its backup yourself from the account page, and download everything as a file from the Your data page. Or email hello@stickingpoint.app and we'll respond within 30 days.
If you're in the EU or UK, you also have the right to object to or restrict how we use your details, to get a copy in a portable format, and to complain to your data protection authority. We rely on your consent when you sign up, and you can withdraw it at any time.
Children
Sticking Point is for adults 18 and over, and we don't knowingly collect details from anyone younger. If you think someone under 18 has signed up, email us and we'll delete it.
Security
The site only runs over HTTPS. Access to the sign-up list is protected by a secret key that only we hold. Account backups are protected by security rules that let only the signed-in owner read or change them.
Changes and contact
If we change this policy, we'll update the date at the top, and we'll email people on the list about significant changes. Questions: hello@stickingpoint.app.