About this policy
Winset is a strength-training app for iPhone. This policy explains what information the app, this website and Winset support handle, and the choices you have.
Alexis Morales Amaro operates Winset and is responsible for the service described here.
It does not cover services you use alongside Winset, such as your email provider or Apple’s App Store.
Your account
A Winset account uses an email address and a password. Both are sent to the account service, which keeps the sign-in records it needs to recognize your account, confirm your address and protect access to it.
The app keeps you signed in by storing your sign-in session in the iPhone’s Keychain. An account is signed in on one iPhone at a time, so the account service also records which sign-in is the current one.
Your training
Winset stores the training you create and record: your Programs and their settings, their Routines, Exercises and prescriptions, your place in the training week, your notes, and each Workout’s sets — reps, weight, time, side, whether a set was completed or skipped, and when.
It is saved on your iPhone and, when Winset can reach it, with your account, so it can be restored when you sign in. Changes that have not uploaded exist only on the iPhone.
While a Workout is in progress, the account service is told which Routine and Program it belongs to and when it started, so that an account has one Workout in progress at a time. The sets you record stay on the iPhone until you finish it. If you discard it, they are never uploaded and the account keeps only that record, marked as ended.
About you
Winset asks three things about you: a weight range, an age range, and any training constraints — pain, discomfort or movement limitations in an area such as a knee or the lower back. Every question offers Prefer not to say. Your answers are stored with your account, adjust recommendations and Exercise selection, and can be changed in Profile.
Training constraints can reveal something about your health, so share only what you are comfortable with. Winset does not ask for your sex, gender or exact body weight.
On your iPhone
The app keeps a working copy of your training and your answers on the iPhone so that it works without a connection. The custom Exercises you created and a Program draft you have not finished saving are kept only on the iPhone and are not uploaded.
Three preferences belong to the iPhone, not your account: weight unit, the day your week starts and haptics. They are never uploaded, and they stay when you sign out or delete your account.
If the app ever cannot read its saved data, it sets the unreadable copy aside rather than deleting it, because it may hold training that never reached your account. Winset does not read or upload it. It stays on the iPhone, even after sign-out or account deletion, until you delete the app.
Your iPhone’s own backups can include the app’s data. Your Apple settings control them, not Winset.
Email and support
Winset emails your account address when it needs you to confirm it, when you ask to reset your password, and once to welcome you. These emails are sent through Resend. For the welcome email the account service keeps a delivery record — your address, when it was queued and sent, the attempts made and any delivery error — which is deleted with your account.
Email you send to winset-support@code904.com is routed through Cloudflare Email Routing. Winset and the email providers involved receive your address, your message and anything you attach. Never send a password, or a reset or confirmation link.
This website
This website shows what Winset does and how to get help. It has no accounts, forms or uploads. It sets no cookies, stores nothing in your browser, and runs no advertising or analytics scripts. Everything it loads is served from the site itself.
Cloudflare hosts and delivers this website, so it receives the request your browser makes: your IP address, the page or file requested, the time, your browser type and the page you came from. Links to the App Store and to email open services with their own privacy practices.
How Winset uses information
Winset uses the information described here to run your account and keep it secure; to save, restore and sync your training; to recommend sets and build Programs; to show your History and Progress; to export and import your training; to answer support requests; and to find and fix problems with the service.
The app and this website include no advertising and no analytics software from other companies. Nothing in the app shares your training with other people unless you export a file and send it yourself.
Who else handles information
Winset uses these service providers, each for what its role needs:
- Supabase: your account, sign-in, and the training and answers stored with it.
- Resend: Winset’s automated emails — confirmation, password reset and welcome.
- Cloudflare: hosting and delivering this website.
- Cloudflare Email Routing: email sent to Winset’s support address.
They may process information in a country other than the one you live in. Information may also be disclosed where the law requires it, to deal with a security problem, or because you ask. When you export a file or email support, the people and services you choose receive what you send.
How long information is kept
Your training and your answers are kept for as long as you have an account. A Program you delete leaves the app, and the account keeps a hidden record of it so the deletion reaches every place you sign in, until the account itself is deleted.
Service providers’ technical logs and backups, and emails you send to support, are kept separately from your account. Deleting your account in the app does not remove them.
Export and import
Export a copy, in Profile → Settings → Account & data, creates a file with your Programs and their Routines, your custom Exercises and your completed Workouts. It leaves out your email address and password, your answers about yourself, the iPhone’s preferences, an unfinished Program draft and a Workout in progress.
The file carries a code derived from your account, used only to check that it is imported by the account that made it. The code cannot be turned back into your account details, but it ties the file to one account, so the file is not anonymous.
Import training data adds what your account is missing from one of these files. It never overwrites what you have, and it refuses a file from a different account.
Once a file leaves the app, Winset cannot change or delete it. It is a copy of your training, not of everything Winset holds about you; for anything else, email winset-support@code904.com.
Signing out
Sign out uploads any waiting changes, then removes your training and your answers from the iPhone; if the upload cannot finish, you stay signed in and nothing is removed. Custom Exercises and a Program draft that exist only on the iPhone are removed too; Winset names them before you confirm.
If you are signed out because your account was opened on another iPhone, or your session expired, your training stays on the iPhone and returns when you sign in to the same account. It is removed when a different account signs in there; Winset asks first if that would discard work never saved to your account.
Deleting your account
Delete account, in Profile → Settings → Account & data, permanently deletes your account. Your sign-in, your training, your answers and the record of your welcome email are removed from the account service, and the app clears them from the iPhone once the service confirms. It needs a connection and no Workout in progress; if the request fails, nothing is deleted and the app says so. Deletion does not reach:
- Files you exported or shared.
- The iPhone’s three preferences: weight unit, week start and haptics.
- An unreadable copy of saved data that the app set aside on the iPhone. Deleting the app removes it.
- A record that each of the account’s sign-ins ended — a session identifier, the reason and the time, with no training and no email address — so another iPhone can learn the account was deleted.
- Service providers’ technical logs and backups, and emails you sent to support.
Deletion clears the iPhone you delete from. If another iPhone still holds a copy of your training, because it was signed out when you signed in elsewhere or has been offline, delete the Winset app on it to remove that copy.
Security
Your sign-in session is stored in the iPhone’s Keychain, the app connects to the account service over an encrypted connection, and the account service lets a signed-in account read and change only its own data.
No system is completely secure. Use a password you do not use elsewhere, and keep your iPhone up to date.
Your choices and rights
Depending on where you live, you may have the right to see, correct, delete or receive a copy of your information, to object to or limit how it is used, and to complain to a data-protection authority.
Much of this is already in the app: Profile changes your answers, Export a copy gives you your training, and Delete account removes the account. For anything else, email winset-support@code904.com. Winset may need to confirm that a request comes from the account holder; never send a password.
Children
Winset is not intended for children under 13 and does not knowingly collect personal information from them. If Winset learns that it has collected personal information from a child under 13, it will take appropriate steps to delete it. A parent or legal guardian who believes this has happened can email winset-support@code904.com.
Changes and contact
When this policy changes, the new version appears on this page with a new date. For privacy questions or requests, email winset-support@code904.com.