Sign in

Privacy Policy

Last updated: November 3, 2026

This Privacy Policy explains what information Repkin ("we," "us," "our") collects, how we use it, and the choices you have. Repkin is operated by Georges Abou Zeidan.

1. Information we collect

  • Account information: your email address and password (handled securely by our authentication provider, Supabase — we never see your raw password).
  • Profile information you choose to add: display name, username, sex, date of birth, height, weight, activity level, fitness goal, and a profile photo or preset avatar.
  • Fitness data you log: workouts and exercises, sets/reps/weight, personal records, progress photos, calorie and food logs, water intake, and recovery check-ins.
  • Social data: friend connections you create, and the data those connections let friends see (display name, avatar, personal records, and rank tier on shared leaderboards).
  • Cheers: the quick preset messages (like "Let's go!") you send to or receive from friends — which message, who sent it to whom, and when. They're picked from a fixed list; there is no free text. Only the friend who sends one and the friend who receives it can see it.
  • Day sharing: only if you switch on "Share my day" (it is off until you do), your accepted friends can see, for today and yesterday, the names of the workouts you logged and how many exercises each had, and your calorie and macro totals (and calorie goal) for the day — never the individual foods you ate. You can switch it off at any time and your friends stop seeing it immediately.
  • PR announcements: when you press "Tell my friends" after saving a best lift, your accepted friends are told the exercise name, weight and reps of that lift, and can react with a cheer. This only ever happens when you press the button — nothing is announced automatically.
  • Food search terms: when you search for a food to log, your search term is sent to the USDA FoodData Central public database to find matching results — and, when that finds little (for example a regional or packaged product), to the Open Food Facts public database as well. We don't send any information that identifies you personally with those searches.
  • Community recipes and activity: recipes you post (text and an optional photo), which are public; the recipes you save; the emoji reactions (🔥 or 😐) you give to other people's recipes; reports you send about other people's recipes; and the users you block.
  • Feed posts and activity: the pictures you post to the Feed (a pump, a physique, or your day or week card), the caption you write, who you chose to share each one with (your friends, or everyone), the emoji reactions you give to other people's posts, the reports you send about posts, and the users you block.
  • Chats: the messages you send in squads and in 1-to-1 chats with friends (text, emoji and photos), the squads you create or join (with the picture its creator adds, if any) and the invites you send or get, the chats you mute, and the reports you send about messages.
  • Notification data: only if you turn notifications on for a device — the address and encryption keys your browser's push service gives that device, a short description of the device (its browser type), your notification choices and time zone, and a record of which reminders have already been sent so none repeats. You can remove all of it by turning notifications off.

2. How we use your information

We use your information to operate Repkin's features: tracking your workouts and nutrition, calculating your rank tiers and streaks, showing your progress over time, sending in-app reminders, and enabling the friend/leaderboard features you opt into.

3. How information is shared

  • We do not sell your information, and we don't use third-party advertising or analytics trackers in the App.
  • Friends you connect with can see what friend/leaderboard features are designed to show: your display name, avatar, personal records, rank tier, level and XP. Progress photos are never shared with other users, regardless of friend connections.
  • If you send a proof video of a lift for the leaderboards, it is stored privately and can be watched only by you and by the Repkin team, who check it. Other users never see it; they see only that your lift is verified. To check the lift automatically, still frames cut from the video are sent to an AI service (Anthropic), which reads the plates and counts the repetitions; the frames are used only for that check. A video that is turned down is deleted, and you can ask us to delete any of your videos at any time.
  • The public leaderboard is on by default. While you are on it, every Repkin user can see your display name (or username), avatar, selected title and banner, level, XP and rank, and nothing else: no weights, food, workouts or photos. You can turn it off at any time in your Profile ("Public leaderboard"), you can report or block anyone you see on it, and people reported by several users, or who break our rules, can be removed from it.
  • Recipes you post to the community (and any photo you attach) are visible to every Repkin user, together with your display name, username and avatar. Reactions are shown only as totals on each recipe (for example "🔥 12") — who gave which reaction isn't shown to anyone. The recipes you save, the users you block, and the reports you send are private to you — reports are seen only by the app owner, who uses them to review content.
  • A post in the Feed is shown only to the people you chose: your accepted friends (the default) or, if you choose "Everyone" (available after a 7-day streak), every Repkin user, together with your display name, username, avatar and title. The picture is stored privately and is only shown to people who are allowed to see that post. Reactions are shown only as totals on each post; who gave which one isn't shown to anyone. Reports about a post are seen only by the app owner, who uses them to review content, and a post reported by several people is hidden while it is reviewed. You can delete any of your posts at any time, which also deletes its picture, and blocking someone stops them seeing your posts and you seeing theirs.
  • A message in a chat can be read only by the people in that chat: your friend in a 1-to-1 chat, or the members of a squad (a squad has up to 12 people, and nobody can be added without accepting an invite). Reports about a message are seen only by the app owner, who sees the reported message and who sent it, but cannot read chats that nobody has reported; a message reported by several people is hidden while it is reviewed. A squad's picture is stored privately and shown only to the squad's members (and to the app owner, if it is reported). A photo sent in a chat is stored privately too, and shown only to the people in that chat (and to the app owner, if it is reported or flagged by the photo check). You can delete your own messages, and a deleted message loses its photo for good; the person who created a squad can delete any message in it and change or remove its picture, and deleting your account deletes the messages and photos you sent. Notifications about a message show its first words on your lock screen unless you mute the chat.
  • Photos you upload (to the Feed, in a chat, as a squad picture, as a profile picture or on a recipe) are checked automatically for content that breaks our rules, such as explicit images. For that check the photo is sent to an AI service (Anthropic) and used only for that check. The check can make mistakes: a photo that is clearly explicit may be refused, a photo it is unsure about stays up and may be flagged for the Repkin team to look at, and the team can remove it. We keep a short note of what the check decided about each photo, which only the Repkin team can read. Your private progress photos, which only you can see, are never sent for this check.
  • Rep, the AI assistant: when you chat with Rep, your message and a short summary of your own data (the basics of your profile such as age, height, weight, activity level and goal, your recent workouts, saved best lifts, streak and today's food totals, the calorie target you saved, the names of your saved meals, and which muscles may need attention) are sent to an AI service (Anthropic) to write the answer, and used only for that. Never your email, your photos or anyone else's data. Your conversation with Rep is saved in your account, the newest messages only (at most the last 60, and nothing older than 30 days), so it is still there when you come back; you can erase it any time with New chat in Rep's menu, and it is deleted with your account. We also keep a daily counter of how many messages you sent, so everyone gets the same number of free messages a day. If you tap Save under a calorie target or a recipe from Rep, that target or meal is saved to your account like anything you add yourself, and you can undo or delete it. A saved calorie target comes with a short note of the details you gave Rep for it (such as your sports, your schedule or foods you avoid or are allergic to), so Rep does not have to ask again; it is read by Rep when you talk to him, and you can make him forget it any time with Forget my diet notes in the same menu. Rep is an AI and can be wrong; what it says is not medical advice.
  • Health data (phone app only): if you connect Apple Health or Samsung Health (through Health Connect) in the Repkin phone app, Repkin reads today's steps and active calories on your phone and shows them to you. These numbers stay on your phone: they are not sent to our servers, not saved in your account, not shared with anyone and never used for advertising or marketing. You can turn it off in Repkin (Turn off, on the Calories screen) or in your phone's Health settings.
  • We share information with the service providers that run Repkin: Supabase (database, authentication, and file storage), Vercel (hosting), Anthropic (an AI service that answers your questions to Rep, checks proof videos of lifts, from still frames, and checks uploaded photos for content that breaks our rules), and — once configured — a transactional email provider for account-related emails (like password resets). These providers only process data on our behalf and under their own security commitments.
  • If you turn on notifications, each notification (its text and your device's address) is delivered through your device's push service — operated by Google, Apple or Mozilla depending on your browser or phone — which is how any website sends notifications. Notifications about your recipes never say who saved or reacted to them.

4. How we protect your information

Your data is stored in a Postgres database with row-level security, meaning your data is only reachable by your own account unless a feature explicitly shares it. Progress photos, Feed pictures and lift proof videos are stored in a private file storage bucket and are only ever accessed through short-lived, per-request links generated for you (or for the people allowed to see a Feed post, or, for proof videos, for the Repkin team that checks them). Profile/avatar photos are stored in a separate, publicly-accessible bucket, since they're shown across the app (e.g. on leaderboards).

5. Your choices

You can review and update most of your information anytime from your Profile settings, where you can also turn notifications on or off, and choose which ones you get and when, and choose whether you appear on the public leaderboard. You can delete your account yourself at any time: open Profile, scroll to the bottom of Settings and choose "Delete my account". That permanently removes your account and everything in it right away. You can also download a copy of your data yourself: in the same place, choose "Download my data". It is one file with your profile, workouts, food and water logs, records, friends and more (your photos aren't in it). For anything else about your data, email Georges.abouzeidan@hotmail.com.

6. Data retention

We keep your information for as long as your account is active. When you delete your account, your data, photos and videos are removed from Repkin immediately; copies held in our database provider's routine backups are cleared as those backups expire, generally within 30 days.

7. Children's privacy

Repkin isn't directed at children under 16, and we don't knowingly collect information from them. If you believe a child has created an account, contact us and we'll remove it.

8. International users

Our service providers may store and process data in countries other than your own. By using Repkin, you understand your information may be transferred internationally.

9. Changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date above when we do.

10. Contact

Questions about this policy or your data? Email Georges.abouzeidan@hotmail.com.

See also our Terms of Service and Support.