Privacy

What Load stores

Your email address and password — the password as a bcrypt digest, never as text.

The name you give when you first set up the app. Your country and time zone, read from your phone’s settings when you sign up, with the time zone kept in step after that so a session is filed under the day it happened. Your settings: kilograms or pounds, a default rest time and weight step, and whether the Monday notification is on.

What you log: your workouts and the exercises in them, with their goals, weight steps and rest timers; every session, with when it started and ended and each set’s weight and reps; the notes you write; and any exercise you create.

With Load Pro, each weekly write-up you ask for: the paragraph, the suggestions under it, and the figures it was written from.

Your subscription: whether you have Load Pro and until when, which store and plan it came from, whether it renews, and whether a payment has failed.

Technical records: a hashed session token with the IP address and device that created it; a delivery address for each phone you have Load on, so a notification can reach it; a password-reset code while one is live, hashed and good for ten minutes; a record of each AI request — its kind, the model, the token count and how long it took, not its content; a record of each Monday notification sent; and the purchase events RevenueCat forwards from the store you bought through.

Load’s server also keeps a running log of the requests it receives, for diagnosing faults. It includes the IP address each request came from and the figures it carried, with passwords, tokens and email addresses filtered out.

What Load does not collect

Photographs, sound and your location. Load has no feature that uses the camera or the microphone. It never asks for or receives your position; country and time zone come from your phone’s settings, and those two answers are all that is kept.

Anything for advertising. There are no ad networks, no analytics SDKs and no third-party trackers in either app. Nothing records which screens you open or how long you stay.

Who else sees it

Anthropic — only with Load Pro, and only when you ask for last week’s write-up. Load sends the figures for that week and the four before it: the names of your workouts and lifts, the date and length of each session, how many days you trained each week, each session’s best set, its goal and whether you met it, what Load did to the weight, any new records, how many sets each muscle got, and whether you use kilograms or pounds. Not your email address, your name, your notes, or anything that identifies your account. Anthropic’s model writes the paragraph, and Load stores it with your account.

RevenueCat — your subscription and its purchase history from the store, keyed to a random identifier made for your account rather than to your email address, so they never learn who you are. When you delete your account, Load asks RevenueCat to delete its record too.

SMTP2GO — your email address and the message, only when you ask for a password reset code or your password is changed.

Bugsnag — when something in Load fails: what went wrong, your device model, the version of iOS or Android, the version of Load, the number that identifies your account, and a short trail of the app’s requests to Load’s server just before it. If the failure is on the server, the report carries the request that failed, with passwords, tokens and email addresses removed. Your email address is never sent. It is how a bug that happens on your phone becomes something that can be fixed.

Google — a delivery address for your Android phone, and the text of each notification. Firebase Cloud Messaging is the only route onto Android, and messaging is the only part of Firebase in the app: no analytics, no advertising identifier.

Apple — the same on an iPhone, through the Apple Push Notification service.

The only notification Load’s server sends is the Monday one, and it says that last week is ready and which dates it covers — none of your figures. Notifications are off until you allow them, and the Monday one has its own switch in Profile. Rest-timer alerts are scheduled by your phone itself; nothing is sent anywhere to make them.

Cloudflare sits in front of Load’s server and carries the traffic between the app and it.

Your training data

What you lift, how often and how it is going is personal, and Load treats it that way: it is never sold, never shared for advertising, and never sent to anyone other than those named above.

Load does not connect to Apple Health or Health Connect. Nothing is read from them and nothing is written to them.

Where it lives

On a server in Singapore, run by Hetzner, with Cloudflare in front of it. Your data is not copied to any other provider.

How long, and deleting it

Until you delete it. Nothing is kept on a schedule — your history is yours until you remove the account.

A workout, session or exercise you delete inside the app is hidden rather than erased, because your history refers to it; it is erased for good with the account.

Deleting the account is immediate and permanent. How to delete your account covers both the in-app path and how to ask if you no longer have the app installed.

Children

Load is for people aged 13 and over, which is the floor both app stores set. It is not designed for or directed at children.

Changes, and getting in touch

If this policy changes in a way that matters, the date at the top changes with it.

Questions, or anything you want removed: load@charithp.com.