Polityka prywatności

Data we collect

Skulpo records the training data you enter yourself: exercises, sets, weights, reps, body weight, measurements, and the recovery model calculated from them. It also keeps your app settings and the profile you fill in — name, age, sex, height, weight and training goal. Skulpo does not collect your contacts, location, photos, or advertising identifiers.

Where your data lives

Your training history stays on your device. It is never uploaded to our servers, and creating an account does not sync or back it up. In-app backups and exports are made by you, on request: the file is plain, unencrypted JSON or CSV and goes only where you send it — a share sheet, your email app, or your device storage. Anyone who gets that file can read it, so keep it somewhere you trust.

Separately, if your device's own system backup is switched on (Android backup to your Google account), the operating system may include Skulpo's data in it. That backup belongs to your Google account and is controlled by your device settings, not by us.

Uninstalling Skulpo erases everything it stored on the device.

Your account (optional)

The app works fully without an account. If you create one, we use Supabase, our authentication provider, to store your email address, a securely hashed password, and an account identifier. We process this data to perform our agreement with you: signing you in and linking a premium subscription. Session tokens are held in the secure storage of the operating system (Android Keystore / iOS Keychain), never in ordinary app storage. Your workouts are not attached to the account. Signing out clears the session on this device and leaves your training data untouched. The account is kept until you ask us to delete it (see YOUR RIGHTS).

Diagnostics & analytics (opt-in)

This is off by default and runs only with your consent. Nothing is sent unless you switch on "Diagnostics & analytics" in Settings → PRIVACY. You can switch it off at any time: usage events stop immediately, and crash reporting shuts down fully the next time the app starts.

While it is on, two services receive data:

• Sentry — crash reports: the error, where in the app it happened, and technical context (app version, operating system version, device model). Account details, screenshots, network requests and anything you typed are stripped from the report before it is sent; the report does include a short list of the last in-app steps (screen names and whether an action succeeded), so we can see what happened right before the error. Sentry also receives an anonymous session ping when you open the app, used to measure how often the app runs without crashing. Reports are deleted automatically after at most 90 days.

• PostHog — usage counts, on its European servers: exactly eight events, namely app_open, onboarding_done, first_workout_logged, second_workout_logged, import_done, share_tap, paywall_view and premium_purchased. Nothing is attached to them — no exercise, weight, rep, date or profile data. PostHog stores a random identifier for your installation so that unique users can be counted; device details and location lookup are switched off. Events are kept only as long as we need them to understand how the app is used.

Like any internet transfer, these requests expose your IP address to the receiving server; we do not use it to determine your location.

Neither service ever receives your training history.

App updates

When Skulpo starts, it may check Expo Application Services (EAS Update) for updates to the app's code and download them if available. Like any internet request, this carries your IP address and technical details of the app (version, platform). No training, profile or account data is involved. This is the standard update mechanism for apps built with Expo.

No ads, no data sales

Skulpo carries no advertising and no advertising or tracking SDKs. We do not sell, rent or trade your data, we do not share it with data brokers, and we do not build advertising profiles. Premium purchases, where available, are processed by Google Play or the App Store under their own privacy policies — your payment details never reach us.

Your rights

You exercise most of these yourself, in the app:

• Access and portability — export your full history as CSV, or a complete backup as JSON, from Settings → DATA.

• Correction — every set, exercise and profile field can be edited or corrected directly.

• Erasure of data on your device — delete individual sets or whole exercises from any day in the app; uninstalling Skulpo removes everything it stored locally.

• Erasure of your account — the app cannot yet delete accounts by itself. Write to [email protected] from the address you registered with and we will delete the account and the email address held with it, normally within 30 days.

• Withdrawing consent — the "Diagnostics & analytics" switch described above.

Because your training data never reaches our servers, we cannot read, restore or delete it for you — that copy is yours alone. You may also complain to your local data protection authority.

Age limit

Skulpo is not intended for children. You must be at least 16 years old to use it, and we do not knowingly collect data from anyone younger. If you believe a child has used Skulpo on your device, delete the app — everything it stored locally goes with it. Nothing was sent to us: training data never leaves the device, and diagnostics stay off unless switched on.

Data controller

The controller of your personal data is Marcin Bystrzanowski, the independent developer who builds and publishes Skulpo, ul. Chopina 20/8, 71-450 Szczecin, Poland.

For anything about your personal data — access, correction, erasure, objection, or questions about this policy — write to [email protected].

Contact

Skulpo is built and published by Marcin Bystrzanowski, an independent developer. For privacy questions, data access requests or account deletion, write to [email protected]. You can also reach us from Settings → SUPPORT → Send feedback.

Messages sent through Send feedback in the app or the contact form on skulpo.com may be read and sorted with the help of Claude, an AI assistant made by Anthropic (Anthropic Ireland, Limited in Europe; Anthropic PBC in the USA). Before any message is passed to it, e-mail addresses are removed from the text. The assistant does not answer you, does not change anything in the app and does not decide anything about your request — a person decides what happens next and writes any reply. Contact form messages with the Press, Business & partnerships or Privacy & data request topic are never passed to the assistant. Data sent to Anthropic in the USA is transferred under standard contractual clauses. If you prefer your message to be read without AI, or it concerns your personal data, write to [email protected] instead.