Privacy Policy

Last updated: July 19, 2026

Who we are

RepStandard is operated by Duomenų vizija, MB ("we", "us", "our"), the data controller responsible for your personal data. This policy explains what we collect, why we collect it, who we share it with, and your rights under the EU General Data Protection Regulation (GDPR). You can reach us at info@duomenuvizija.lt.

Data we collect

We collect: (a) Account data — your email address, name, and, if you use Sign in with Apple, the identifier Apple provides. (b) Workout and fitness data — exercise repetitions, workout history, max-test results, your selected fitness level and goals, and body measurements such as height and weight that you choose to provide. This is health and fitness information. (c) Camera and motion data — to count your repetitions the app uses your device camera together with on-device pose detection (see "Camera and on-device processing" below). (d) Usage and device data — through Firebase Analytics we collect app interactions, feature usage, onboarding responses, and device information such as device model, OS version, and identifiers; once you sign in, these events are associated with your account identifier so we can understand usage per account. (e) Diagnostic data — through Firebase Crashlytics we collect crash reports and technical diagnostics. (f) Subscription data — your purchase and subscription status, processed through RevenueCat and Apple. (g) Advertising identifiers — with your permission, given through Apple’s App Tracking Transparency prompt, we collect your device’s advertising identifier (IDFA) and share it with Meta (Facebook/Instagram) so we can measure which ad campaigns bring people to RepStandard. If you decline this permission, no advertising identifier is collected and none is shared with Meta for this purpose. We do not sell your data.

Camera and on-device processing

RepStandard uses your device camera to detect body movement and count exercise repetitions in real time, using Google MediaPipe pose detection that runs entirely on your device. Camera images, video, and the body-pose landmarks derived from them are processed locally on your device and are not recorded, stored, or transmitted to us or to any third party. Only the resulting workout counts and results are saved to your account.

How we use your data

We use your account and workout data to operate the app — to authenticate you, save and sync your progress across devices, calculate ranks, streaks and rest days, and personalize your training program. We use analytics data to understand how the app is used, improve features, and test onboarding and pricing variations. We use diagnostic data to keep the app stable and secure, and subscription data to manage access to premium features. Where you’ve granted App Tracking Transparency permission, we also use your device’s advertising identifier to measure the effectiveness of our advertising campaigns.

Who we share data with

We do not sell your data. We share it only with service providers that process it on our behalf under data-processing agreements: Supabase (authentication and database hosting for your account and workout data); Google Firebase — Analytics, Crashlytics and BigQuery (usage analytics and crash reporting); RevenueCat (subscription management); Meta Platforms, Inc. (Facebook/Instagram) — only if you’ve granted App Tracking Transparency permission, to measure and attribute the performance of our ad campaigns; and Apple (Sign in with Apple, payment processing, and the App Tracking Transparency permission itself). Some of these providers may store or process data on servers outside the European Economic Area (EEA); where they do, appropriate safeguards such as the European Commission’s Standard Contractual Clauses are in place.

Legal basis (GDPR)

We rely on the following legal bases: performance of our contract with you (Art. 6(1)(b)) to provide the core service and store your account and workout data; your explicit consent (Art. 9(2)(a)) for processing health and fitness data such as body measurements and exercise performance, which you may withdraw at any time; your consent (Art. 6(1)(a)), given through Apple’s App Tracking Transparency prompt, before we collect or share your device’s advertising identifier with Meta for ad measurement — you can withdraw this at any time in your device Settings; and our legitimate interests (Art. 6(1)(f)), or your consent where required, for analytics and crash reporting used to improve and secure the app.

Data retention and deletion

We keep your data for as long as your account is active. You can reset your progress or delete your account at any time from within the app. When you delete your account, your personal data is removed from our active systems; limited records may be retained in archived or anonymized form where necessary for legal, security, or aggregated-analytics purposes.

Data security

We apply appropriate technical and organizational measures to protect your data. All data in transit is encrypted using TLS, account and workout data is stored on access-controlled infrastructure, and access is restricted to authorized personnel strictly for support and maintenance.

Children

RepStandard is not intended for children under 13, and you must meet the minimum age required in your country to use it. We do not knowingly collect data from children under this age.

Your rights

Under the GDPR you have the right to access, correct, delete, or export your personal data, to restrict or object to certain processing, and to withdraw consent at any time. To exercise these rights, contact us at info@duomenuvizija.lt. You also have the right to lodge a complaint with your local data protection authority — in Lithuania, the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija).

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date below, and where required we will ask for your renewed consent.

Contact us

If you have any questions or requests regarding your privacy, contact us at info@duomenuvizija.lt. We are committed to addressing all requests promptly and transparently.