Privacy policy

Defyn Yourself ("Defyn", "the app") is a workout tracker for Android phones and Wear OS watches, with a companion web dashboard. It is developed by John Meyer ("we", "us"). This policy explains what the app collects, where it is kept, and the choices you have.

Who to contact

John Meyer
support@defynyourself.com

If you never sign in

Everything you enter (exercises, programs, workouts, sets, notes, and your profile) is stored only on your phone. None of it is sent to us. Uninstalling the app removes it.

If you turn on cloud sync

Cloud sync is optional and uses Sign in with Google. When it is on we store:

• Your Google account identity: the account's email address and a user ID, held by Firebase Authentication so you can sign in on another phone or on the web dashboard.
• Your training: custom and built-in exercises, programs, workouts with their start and finish times, every set within them (weight, reps, time, reps in reserve, and when it was completed), and any notes you write on a workout.
• Your profile: first and last name, email address, gender, date of birth, age, height, current weight and target weight, as you have entered them. Every profile field is optional except your first name.

This data is stored under your account alone. Our database rules allow only you, signed in, to read or change it. It is used to back up your training, sync it between your devices, and draw the web dashboard for you. Nothing else.

Health Connect

If you connect Health Connect, Android's on-device health data store, the app asks for the permissions below. Each one is optional, and you can revoke any of them at any time in the Health Connect app. Defyn keeps working without them.

• Write exercise sessions. When you finish a workout, the app saves it to Health Connect with its start and end time, name, and the exercises and reps you completed, so it appears in apps such as Samsung Health and Fitbit.
• Read heart rate. Used only to show your average and maximum heart rate on a past workout while you are looking at it. Heart rate is never stored by the app and never leaves your phone.
• Read body weight. The newest reading updates the weight in your profile and your progress chart. If cloud sync is on, that profile weight is synced to your cloud account like the rest of your profile.

Defyn's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. Health Connect data is used only to provide the features described above. It is never used for advertising, never sold, and never transferred to anyone, apart from your own cloud backup as described here.

Your watch

The Wear OS app and the phone app talk to each other directly over Google's Wearable Data Layer. What passes between them (the current exercise, set and rest timer) is not sent to us.

App analytics

The phone app includes Google Analytics for Firebase. It automatically collects general usage information, such as when the app is opened, how long it is used, the app version, device model, operating system version, approximate region derived from the device, and an app-instance identifier. We use this only to understand whether the app is being used and working. The app sends no training, profile or health data to Analytics.

Crash reports

The phone app includes Firebase Crashlytics. If the app crashes, it sends a crash report: where in the app's code the crash happened, the app version, device model, operating system version, whether the app was in the foreground, and an identifier for this installation of the app. We use crash reports only to find and fix the cause. They do not include your name, email, training, profile or health data, and are kept for 90 days.

Where your data is stored and who processes it

Cloud data is held in Google Cloud Firestore in the United States (us-east1), with Firebase Authentication for sign-in, Firebase Hosting for the web dashboard, and Cloud Functions to carry out account deletion. Google processes this data for us as a service provider under the Firebase data processing terms. Data is encrypted in transit and at rest. We do not use any other third parties.

What we do not do

• We do not sell or rent your data.
• We do not show ads, and we share nothing with advertisers or data brokers.
• We do not use your training or health data to make decisions about you.

How long we keep it

Cloud data is kept until you delete it or delete your account. To protect against accidental loss, the database keeps point-in-time recovery for 7 days and weekly backups for 14 weeks. Data you delete can therefore persist in those backups for up to 14 weeks before it is gone for good. Backups are never used for anything but recovery.

Your choices

• Export: Profile → Export Data writes everything you have logged to a CSV file.
• Correct: edit any workout, set or profile field in the app, and the change syncs.
• Sign out: Profile → Sign Out stops syncing and clears the data from that phone. Your cloud copy remains until you delete it.
• Revoke Health Connect: in the Health Connect app, at any time.
• Delete your account: Profile → Delete Account in the app, or Delete account on the web dashboard, removes your account and everything synced to it straight away. See how to delete your account.

Children

Defyn is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

If this policy changes, the new version will be posted here with a new effective date, and significant changes will be noted in the app's release notes.