Privacy Policy
Repivate ("the App") is operated by Individual Entrepreneur Luxxat Labs ("we", "us"), registered in the Republic of Kazakhstan. Contact: hello@luxxatlabs.dev.
The short version: Repivate is offline-first — your training data lives on your device. Cloud features (sync, AI Coach) are optional and only receive what they need to work.
1. Data stored on your device
The App stores your data locally on your device in an app-private database:
- Workout schedules, exercises, logged sets/reps/weights, workout history
- Nutrition logs (foods, calories, macros)
- Profile details you enter (name, body weight, goals, units, language)
- Rest-timer and app settings
This local data never leaves your device unless you sign in and use sync or the AI Coach (below). Deleting the App deletes local data.
Progress / body photos: if a future App version offers progress photos or body measurements from photos, they are processed on your device only and are never uploaded to our servers or any AI provider. Our cloud services only ever see trend numbers, never images.
2. Account and cloud sync (optional)
You can use the App without an account. If you sign in (Google Sign-In or Sign in with Apple, via Firebase Authentication), we receive your name, email address, and an account identifier.
Launch-notification list (website): if you leave your email address in the "Notify me" form on repivate.app, we store it solely to send you a message when the App launches. It is never shared or used for other marketing, and you can have it removed at any time by emailing hello@luxxatlabs.dev.
When you sync, your profile, schedules, workout history, and nutrition logs are copied to our cloud database (Google Cloud Firestore, hosted in the EU — europe-west1). Sync happens when you sign in or press the sync button — not continuously in the background.
3. AI Coach (subscription feature)
The AI Coach is powered by Anthropic's Claude models. When you use Coach features (weekly review, plan check-up, Q&A chat), the App sends to our secure gateway:
- Summary statistics computed from your logged workouts and nutrition (e.g. weekly volume, estimated 1-rep-max trends, calorie/protein averages)
- Your goals, app language, and — for chat — your messages and recent chat history
Our gateway forwards this to Anthropic's API to generate the Coach's reply. Anthropic does not use API data to train its models by default. We never send photos, precise location, contacts, or your email/name to the AI provider. Your subscription status and Coach usage (for fair-use limits) are stored with your account.
All numeric targets shown by the Coach are computed by our own deterministic engine from your data — the AI narrates them.
The Coach provides general fitness and nutrition education, not medical advice. Consult a qualified professional for pain, injury, or medical conditions.
4. Subscriptions and payments
Subscriptions are billed by Apple App Store or Google Play — we never see your card details. We use RevenueCat to manage subscription status; it receives store purchase tokens and an app user identifier.
5. Analytics and crash reporting
We use Google Firebase services: Firebase Analytics (aggregate usage events, e.g. "workout completed"), Crashlytics (crash reports with device model, OS version, stack traces), and Remote Config. These help us fix bugs and improve the App and are not used to build advertising profiles. Repivate shows no third-party ads and sells no data.
6. Third-party processors
| Processor | Purpose | Data |
|---|---|---|
| Google Firebase (Google LLC) | Authentication, database, analytics, crash reports | Account info, synced app data, usage/crash events |
| Anthropic PBC | AI Coach responses | Workout/nutrition summaries, chat messages, language |
| RevenueCat, Inc. | Subscription management | Purchase tokens, app user ID |
| Apple / Google | Billing | Handled under their own policies |
Some processors are located outside your country (including the USA); transfers rely on their standard contractual safeguards.
7. Your rights and data deletion
- Delete your account in-app (Profile → Delete account): permanently removes all your server-side data — synced profile, schedules, history, nutrition logs, coach chat history, usage records — and your login. This is immediate and irreversible. Store subscriptions must be cancelled separately in your App Store / Google Play settings.
- Local data: delete by uninstalling the App.
- Depending on your location (including under GDPR), you have rights of access, correction, portability, deletion, and objection. Contact hello@luxxatlabs.dev — we respond within 30 days.
We keep account data only while your account exists. Crash and analytics data are retained per Firebase's standard retention periods.
8. Security
Data in transit is encrypted (TLS). Server data lives in Google Cloud with access limited to authenticated requests for your own account. No method of storage is 100% secure, but we minimize what we collect in the first place.
9. Children
Repivate is not directed at children under 16, and we do not knowingly collect their data.
10. Changes
We will post any changes to this policy at this URL and update the effective date. Material changes will be flagged in the App.