Privacy
Your training log, your email address, and nobody else. The long version follows.
This website
This site sets no cookies, runs no analytics, and loads nothing from a third-party server — the fonts, images and stylesheets are all served from this domain. Nothing you do here is tracked or profiled, because there is nothing here doing the tracking.
The site is hosted on Vercel, which keeps standard server request logs (IP address, user agent, the URL requested) for operational purposes. That is a property of hosting anything on the internet rather than a choice this site makes about you.
The app
The app stores three kinds of thing:
- Your email address, used to sign you in. There is no password — you get a one-time link by email. The address is the account.
- Your training data: the workouts you programme, every set you log with its weight, reps and effort, your bodyweight if you record it, and the preferences that go with them, such as units.
- A local copy of all of it, in your browser's own storage on your device, so the app works with no signal. Writes queue there first and sync when they can.
Server-side data is held in a Postgres database hosted by Supabase, with row-level security so an account can only ever read its own rows. Deleting the app's local storage clears the copy on your device; deleting the account removes the server side.
What is not done with it
- It is not sold, rented or shared with advertisers. There are no ads.
- It is not used to build a profile of you for anything.
- There is no analytics SDK, no advertising pixel and no social embed in the app.
- Nothing you lift is published anywhere. There is no feed and no social layer.
Aggregate, non-identifying figures may be used to work out whether the progression engine is any good — for example, whether prescribed load increases are actually being completed. That work happens on the data already stored and produces numbers about the model, not about you.
Your rights over it
You can ask for a copy of everything held about you, ask for it to be corrected, or ask for the account and all of its data to be deleted. Email and it gets done. Deletion is deletion, not deactivation.
If you are in the EU or UK, the legal basis for holding your training data is the contract to provide the app you asked for; for your email address it is the same. There is no legitimate-interest marketing basis being claimed, because no marketing is done with it.
Children
The app is not directed at children under 13 and no account should be created for one.
Changes
If what is stored or who processes it changes, this page changes with it and the date at the top moves. Material changes to how existing data is used get an email, not a silent edit.
Who is asking
GETSIXPACK is built and operated by Data Sauna LLC, a Wyoming limited liability company, at 30 N Gould St, Ste R, Sheridan, WY 82801, USA. Contact: .