The short version
- Brick works without an account. You never have to give us your name or email address to log workouts.
- Your training data is backed up to servers in the European Union, under a random identifier, so it survives a crash or a lost connection. Create an account if you want to get it back on another phone.
- Body measurements and progress photos stay on your phone unless you turn on Health data in the cloud.
- Analytics and crash reports are off until you switch them on.
- No ads, no selling of your data, no tracking across other apps and websites.
- You can export your full history at any time, free on every plan, and delete your account from inside the app.
Who we are
The publisher of Brick (“we”, “us”) is the controller of the personal data described in this policy.
For any privacy question or request, write to support@brickgym.app.
This policy covers the Brick app for iPhone and Apple Watch (and the Android app once it is released) and this website.
What we collect and why
When you use Brick without an account
The first time Brick goes online, it creates an anonymous account for your installation: a random identifier with no name or email attached. Your workouts, routines, programs and settings are saved on your phone first and then backed up under that identifier. If you are offline, everything stays on the phone and is backed up later.
Without an account, you can’t restore that backup on a new phone, because nothing links it to you. To keep your data across phones, create an account.
Your account (optional)
You can create an account with Sign in with Apple, Google or an email address and password. We then receive:
- your email address (with Sign in with Apple, this may be a private relay address that Apple creates for you);
- your name (and, with Google, your profile picture), if the provider shares it. With Sign in with Apple, your first name becomes your display name, which you can change or remove in your profile;
- with an email and password, your password, which our authentication provider stores only in a protected (hashed) form that we can’t read;
- which sign-in method you used, plus technical sign-in records kept by our authentication provider for security.
We never receive your Apple or Google password. Signing in links your anonymous data to the account, so nothing is lost.
Training data
What you enter in Brick: workouts (exercises, sets, weights, reps, durations, distances, effort ratings, rest times, notes, dates and time zone), routines and programs, custom exercises, import records (the file name and number of workouts imported), exercise name matches, and your settings (units, weekly goal, rest timer, plates and similar). If you answered the onboarding questions, we also keep your goal, experience level and preferred number of training days.
We use this data to run the app: show your history, statistics and personal records, sync between your devices, and back it up.
Body measurements and progress photos
Body weight, body fat and body measurements, and progress photos (a Premium feature), are health data. By default they are stored only on your phone. They are uploaded to our servers only if you have an account and say yes to Health data in the cloud, either when you create your account or later in Profile → Settings → Privacy. You can turn it off at any time: your measurements and photos then come back to your phone and are deleted from our servers.
Photos are resized and re-encoded before they are saved, which removes their metadata (such as location). On the phone they are stored with iOS file protection.
Note: signing out or deleting your account removes measurements and photos that exist only on your phone. Export them first if you want to keep a copy.
Apple Health and Apple Watch
Connecting Apple Health is optional and off by default. If you turn it on, Brick can:
- read your body weight and body fat (to keep your measurements up to date) and your heart rate during a workout;
- write your completed workouts, the estimated active energy (calories), and the body weight and body fat you log in Brick.
When you train with the Apple Watch app, the watch measures your heart rate and active energy during the workout and sends them to your phone.
The average and maximum heart rate and the estimated calories for a workout are saved with that workout, so they are synced and backed up like the rest of your training data. We use Health data only to provide these features. It is never used for advertising or marketing and never shared with data brokers. You can revoke access at any time in the Health app or in iOS Settings.
Brick Coach
If you use Brick Coach (a Premium feature), we store your answers to the questionnaire (goal, experience, days and time available, equipment, focus areas, joints to avoid, exercises you dislike), the plan it builds, and your optional check-ins (how recovered your muscles felt and whether an exercise caused joint pain). The plan and its weekly adjustments are calculated on your phone, using fixed rules. They don’t have any legal or similarly significant effect on you, and you decide whether to accept each change.
The health check before starting a plan is answered on your phone: we only keep the date you confirmed it, never your answers.
Importing and exporting
When you import a CSV or Excel file, a PDF or screenshots, the file is read on your phone (text recognition included). The file itself is never uploaded. Only the workouts or routines you choose to import are saved, like any other training data.
Export creates a ZIP file of CSV files on your phone (workouts, body measurements, routines). Where it goes next is up to you.
Subscriptions
Premium is bought through the App Store (and, later, Google Play). The store handles payment: we never see your card or bank details. Our subscription provider, RevenueCat, receives your purchase records from the store and tells the app whether Premium is active. We keep a record of your subscription status (product, store, renewal and expiry dates, and the history of subscription events) linked to your Brick identifier.
Analytics and crash reports (only with your consent)
Analytics and crash reports are off by default. If you turn them on in Profile → Settings → Privacy → Analytics & crash reports, we use Google Analytics for Firebase and Firebase Crashlytics to understand how the app is used and to fix bugs. They collect:
- usage events, such as a workout started or finished (with its duration and number of sets), a screen of the onboarding viewed, a paywall shown or an import completed. They never contain your notes, names of your routines or the content of your workouts;
- exercise searches that returned no result (the search text only, cut to 100 characters), so we can add missing exercises and names;
- crash reports: the state of the app when it crashed, with device model, OS version and app version;
- an app instance identifier, your Brick identifier, and approximate location derived by Google from your IP address (country or city level).
This data is pseudonymous, not anonymous: it is linked to a random identifier, not to your name or email. You can turn it off at any time; collection stops immediately.
Support
If you email us, we receive your email address and what you write. The email the app prepares also includes the app version, iOS version, device model, language, whether you use Brick as a guest or with an account, and whether you have Premium. You can delete that part before sending.
Technical and security data
To protect our servers against abuse, the app proves it is a genuine copy of Brick using Firebase App Check and Apple’s App Attest. The app also downloads a few settings from Firebase Remote Config (for example, which subscription options to show). These services handle technical data such as an installation identifier, IP address and device information.
This website
The website doesn’t use cookies, analytics or advertising trackers, and its fonts are hosted on the site itself. It remembers your language choice in your browser’s local storage. Our hosting provider, Cloudflare, processes your IP address and standard request logs to deliver the pages and keep them secure.
What we don’t do
- We don’t show ads and we don’t sell or rent your personal data.
- We don’t track you across other companies’ apps or websites, and Brick doesn’t access the advertising identifier (IDFA).
- We don’t use your health data for advertising or marketing.
- We don’t use your data to train third-party AI models.
Legal bases (GDPR)
| Purpose | Legal basis |
|---|---|
| Running the app, saving and syncing your training data, your account, Premium | Performance of our contract with you (Art. 6(1)(b) GDPR) |
| Body measurements and photos in the cloud, Apple Health data, Coach answers about joint pain | Your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR), which you can withdraw at any time |
| Analytics and crash reports | Your consent (Art. 6(1)(a) GDPR) |
| Security, abuse prevention, app configuration, support emails | Our legitimate interests in keeping Brick secure and working, and in answering you (Art. 6(1)(f) GDPR) |
| Keeping records the law requires, answering authorities | Legal obligation (Art. 6(1)(c) GDPR) |
Withdrawing consent doesn’t affect what was done before you withdrew it.
Who processes your data for us
We use a small number of service providers. They process data only on our instructions and under data processing agreements.
| Provider | What for | Where |
|---|---|---|
| Google (Firebase): Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, App Check, Remote Config | Accounts, database, photo storage, server functions, security | Database, photos and server functions in the European Union. Sign-in and security services may also process data outside the EU. |
| Google (Firebase): Analytics and Crashlytics | Usage statistics and crash reports, only with your consent | United States and other countries |
| RevenueCat, Inc. | Subscription status | United States |
| Cloudflare, Inc. | Hosting this website | Cloudflare’s global network: pages are served from the data centre closest to you |
Apple (App Store, Sign in with Apple, Apple Health, iCloud backups of your phone) and Google (Google Play, Google sign-in) also process data when you use their services. They do so under their own privacy policies, as independent controllers.
We may disclose data if the law requires it, for example to answer a valid court order. If Brick is ever sold or merged, your data would move to the new owner under this policy, and we would tell you first.
International transfers
When data leaves the European Economic Area (for example to Google or RevenueCat in the United States), it is protected by the EU–US Data Privacy Framework where the recipient is certified, or by the European Commission’s Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards.
How long we keep your data
| Data | How long |
|---|---|
| Account and training data | Until you delete it or delete your account. Server copies are erased at once, and backups roll over within 30 days. |
| Guest backup (no account) | Until you delete it (see below). It can’t be restored on another phone without an account. |
| Abandoned (discarded) workouts | Deleted automatically 30 days after you discard them |
| Measurements and photos in the cloud | Until you delete them, turn off Health data in the cloud, or delete your account |
| Subscription records | Until you delete your account. RevenueCat and the stores keep their own records under their policies. |
| Analytics data | Deleted automatically by Google after a set period |
| Crash reports | 90 days |
Your rights
Under the GDPR you have the right to:
- access your data and get a copy of it;
- rectify inaccurate data (most of it you can edit directly in the app);
- erase your data;
- data portability: export in Settings → Data → Export data, or ask us for the rest in a machine-readable format;
- object to processing based on our legitimate interests;
- restrict processing in certain cases;
- withdraw your consent at any time, using the toggles in the app;
- lodge a complaint with a data protection authority, in particular in the EU country where you live or work (for example the CNIL in France or the Hellenic Data Protection Authority in Greece). We would appreciate the chance to sort it out with you first.
To exercise a right, write to support@brickgym.app. We answer within one month. We may ask you to confirm that the account is yours, for example by writing from the email address linked to it.
Deleting your data
With an account: in the app, go to Profile → Settings (gear icon) → Account → Delete account, then confirm with Continue to delete and Delete for good. This deletes your sign-in account and everything stored under it on our servers: workouts, routines, programs, Coach data, measurements, photos and your subscription record. If you use Sign in with Apple, Brick also revokes its access to your Apple ID. The copy on your phone is wiped, and Brick restarts as a new guest.
Deleting your account doesn’t cancel a subscription: cancel it in your App Store account settings. Workouts that Brick saved to Apple Health stay in Apple Health, where you can delete them.
As a guest: create an account (Profile → Settings → Account → Create account), then delete it as described above. This erases the backup too. If you can’t do that, write to us.
Without the app: write to support@brickgym.app from the email address linked to your account and we’ll delete it for you.
Children
Brick is not intended for children. You must be at least 16 years old to use it. We don’t knowingly collect data from children under 16. If you believe a child has given us data, contact us and we will delete it.
Security
Data is encrypted in transit and at rest. Each account can only access its own data, and our server rules check every write. No system is perfectly secure, though: if a breach puts your data at risk, we will notify you and the authorities as the law requires.
Changes to this policy
When we change this policy, we update the date at the top of this page. If a change matters, for example a new kind of data or a new purpose, we will tell you in the app before it takes effect and ask for your consent where it is needed.
Contact
Email: support@brickgym.app