Privacy Policy

1. The short version

2. What stays on your devices

These are stored in the app’s private storage on your iPhone and are never sent to our server:

• Sensor data. The pods stream motion readings to your iPhone over Bluetooth. The app turns them into reps and bar speed and saves each set (raw readings, rep timings and speeds, the lift, the load you entered, and a heart rate summary if you wore your Watch).
• Heart rate summaries. For each set: average, peak, end and pre-set heart rate, and how far it fell during the rest. The second-by-second readings are held in memory during a workout only and are not saved by Alta.
• Settings and preferences, such as units, your pod pairing, and your profile photo (if you add one, it is stored on your phone only and is not uploaded).
• A Bluetooth connection log (when pods connect and disconnect), kept small and used only to troubleshoot the pods on your phone.

Your iPhone may include the app’s files in your own device backups (for example iCloud Backup) according to your Apple settings. Alta does not use iCloud or any cloud storage of its own for this data.

Sharing a set’s raw data. The set detail screen has a “Share raw data” button. It opens the standard iOS share sheet with that set’s data file (which includes its heart rate summary, if any). Nothing is sent unless you choose a destination, and where it goes is up to you.

3. Apple Health

Alta asks for Apple Health access only when you choose to give it (after your first workout with Alta on a paired Apple Watch, or from Settings). You can change it at any time in the Health app or iPhone Settings.

• On Apple Watch, while a workout is open, Alta runs a strength-training workout session. It reads your heart rate (and active energy) as the Watch measures it, shows it on the Watch, and sends the heart rate to your iPhone over Apple’s direct Watch-to-iPhone connection. When the workout ends with at least one set, the Watch saves a “Traditional Strength Training” workout, with that heart rate and energy, to Apple Health.
• On iPhone, Alta can read heart rate, resting heart rate, heart rate variability, sleep and workouts from Apple Health, to show them next to your lifts. The iPhone app does not write to Apple Health.

4. Your account

Alta needs an account. You sign in with Sign in with Apple or Sign in with Google; we never see or store a password. When you sign in, our server stores:

• An account ID, and the sign-in provider’s ID for you.
• The email address the provider gives us. With Apple you can choose “Hide My Email”, in which case we only get a relay address. We use your email only to run your account and to reply if you contact us. We don’t send marketing email.
• Any name or profile details included in the provider’s sign-in token (with Google, this can include your name and a link to your Google profile picture). The app uses your name only to suggest a display name, and does not show your Google picture.
• The handle (like @alex) and display name you choose, whether you share workouts, and when the account was created and last updated.
• Standard service logs kept by our hosting provider, such as IP address, device and request times, for security and troubleshooting.

On your phone, the app keeps your sign-in session in the iOS Keychain.

5. Sign in with Google

If you choose Sign in with Google, Alta asks Google only for the basic sign-in scopes openid, email and profile. That gives us your Google account ID, email address, name and profile picture link. We do not request access to Gmail, Drive, Contacts, Calendar or any other Google service.

We use this information only to create your Alta account and sign you in. We do not use it for advertising, we do not sell it, we do not use it to build profiles about you, and we do not transfer it to anyone except our database host (Supabase) as needed to run sign-in. People do not read it, except when you ask for help, when needed for security, or when the law requires it.

When you delete your Alta account, the app also asks Google to revoke Alta’s access. You can remove it yourself at any time at myaccount.google.com/permissions.

6. Friends and shared workouts

Who can find you

Any signed-in Alta user can search for your handle and see your handle and display name (and send you a friend request). People you have blocked, or who have blocked you, cannot find you.

What is uploaded

While you are signed in, each workout you finish (with at least one counted rep) is uploaded as a summary. It contains only:

• The date, start time, duration and number of sets.
• For each lift (up to 15): its name, number of sets, the top set’s load and reps, its estimated one-rep max, and that set’s rep speeds.
• Totals for the workout (sets, reps, volume, fastest rep) and any personal records set.

It never contains raw sensor data, heart rate or any other health data, location, or bodyweight. Workouts finished before you signed in are not uploaded.

Who can see it

Your accepted friends can see your shared workouts, give them kudos, and see you on the friends leaderboard (workout days, sets, streaks and strength progress) and your profile (streak, workouts this month, and best lifts). People who are not your friends cannot see any of it.

• Hide a workout and friends no longer see it, and it doesn’t count on the leaderboard. Hidden workouts stay stored on our server (marked hidden) so you can unhide them.
• Turn off “Share my workouts” in Settings and none of your workouts are shown to friends. New workouts are still uploaded, but marked hidden, so turning sharing back on never reveals a workout you meant to keep private.
• Delete a workout on your phone and its summary is removed from our server.

Kudos (who gave kudos to which workout) are visible to the workout’s owner and their friends.

7. Blocking and reports

If you block someone, we store that you blocked them; neither of you can then see the other. If you report someone, we store who reported whom, the workout involved (if any), the reason you picked and any details you typed (up to 500 characters). Only we can read reports. We use them to enforce the Terms, which can mean removing content or accounts.

8. Who processes data for us

We use a few service providers. They process data only to provide their service to us, under their own privacy terms.

• Supabase hosts our database and sign-in service: your account, profile, friends and shared workout summaries. Data may be stored and processed outside your country. Supabase privacy policy.
• Apple provides Sign in with Apple, Apple Health, and the Watch-to-iPhone connection. Apple privacy policy.
• Google provides Sign in with Google, only if you choose it. Google privacy policy.
• Vercel hosts this website. Vercel privacy policy.

We may also disclose information if the law requires it, or to protect someone’s safety. If Alta is ever transferred to someone else, this policy (or one at least as protective) will continue to apply to your data, and we will tell you first.

9. This website

This site has no analytics, no ads, no tracking pixels and no cookies. Its fonts and scripts are served from this site, not from third-party networks. If you switch between the light and dark theme, your choice is remembered in your browser’s local storage and is never sent to us. Our host, Vercel, keeps standard request logs (such as IP address and browser) for security and operation.

If you join the waitlist, we keep your email address only to tell you about Alta’s launch, and you can ask us to remove it at any time.

10. What we don’t do

• We don’t sell or rent personal data, and we don’t share it for advertising.
• The app has no ads and no advertising, analytics or crash-reporting SDKs.
• We don’t track you across other companies’ apps or websites.
• We don’t collect your location, contacts or photo library (the photo picker only gives the app the one photo you choose, which stays on your phone).

11. How long we keep data

• On your devices: until you delete it (a set or workout in the app, or the app itself). Data in Apple Health stays there until you delete it in the Health app.
• On our server: your account, profile, friends and shared workouts are kept while your account exists. A workout summary is deleted when you delete that workout. Everything is deleted when you delete your account.
• Reports are kept while both accounts exist, so we can act on repeat problems.
• Backups and logs: copies in database backups or service logs may last a short time longer, until they are overwritten. We don’t restore deleted accounts from them.

12. Deleting your data

In the app: open Settings and, under Friends and account, choose Delete account. After you confirm with Apple or Google, we immediately delete your account, profile and handle, every workout you shared and the kudos on them, and your friends, friend requests, blocks and reports. The workouts on your phone stay on your phone; delete them in the app, or delete the app.

If you signed in with Apple, you can also stop using Sign in with Apple with Alta in iPhone Settings > your name > Sign in with Apple. If you signed in with Google, see section 5.

By email: if you can’t use the app, email contact@altahealth.site from the address on your account (or tell us your handle) and we will delete your account.

13. Your rights

Wherever you live, you can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Your handle and display name are chosen when you create your account; email us if you want them changed. Depending on where you live (for example the EU, UK or California), you may have further rights, such as to object to or restrict processing, or to complain to your data protection authority. Email contact@altahealth.site and we will reply within 30 days.

We use your data to provide the app you asked for (running your account and the friends features), with your consent for Apple Health access, and for our legitimate interest in keeping Alta safe and working.

14. Security

Data travels to our server over encrypted connections (HTTPS). Every table on our server is protected by row-level access rules, so each person can read only their own data and what their friends share. Your sign-in session is kept in the iOS Keychain. No system is perfectly secure; if we learn of a breach affecting your data, we will tell you as the law requires.

15. Children

Alta is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has created an account, email contact@altahealth.site and we will delete it. In places where a higher minimum age applies for consent to data processing, you must be at least that age or have a parent’s or guardian’s permission.

16. Changes

If we change this policy, we will post the new version here and update the date at the top. If a change is significant, such as collecting a new kind of data or using it in a new way, we will tell you in the app before it takes effect.

17. Contact

Questions or requests about privacy: contact@altahealth.site.