Privacy policy

Last updated: 1 November 2026

Thank you for using MuscleQuest. We value your privacy and are committed to protecting your personal data. This privacy policy outlines how we collect, use, and safeguard your information when you use our app.

1. Information We Collect

We collect the following types of information to provide and improve our services:

a. Personal Information

• Account Information: Account creation in MuscleQuest is optional. If you choose to create an account using Google OAuth, we collect your name, email address and profile photo from your Google account.
• Workout Data: Your workout data is stored locally on your device and will only leave your device if you choose to create a backup or share it with friends.
• Social Features: Friends and sharing are optional and require an account. Your display name and profile photo are visible to your friends, to people who search for your exact email address, and to anyone you send a friend request to or receive one from. Your email address is stored with your account and other users never see it. A one-way hash of it lets people who already know your exact address find you. Plans, workouts, custom exercises, workout history, body measurements and strength progress are shared only if you turn on sharing for that category in the app, or for a single plan or workout, and only with your friends.

b. Device and Diagnostic Information

• Device Information: General data related to your device model, operating system version, language and app version, and diagnostic information.

2. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve the app.
• Personalise the user experience.
• Communicate with you regarding updates and app-related notifications.
• Analyse app stability and performance for optimisation.

3. How We Share Your Information

MuscleQuest does not sell or share your personal data with third parties, except in the following cases:

• Service Providers: We may share limited data with trusted service providers that assist us in operating the app: Supabase Inc. for accounts, backup storage and social features (hosted in Ireland, EU), Google for sign-in, Cloudflare for delivering exercise animations and app configuration, Bugsnag (SmartBear) for error reports and performance data, and Expo for app updates, crash reports and performance data.
• Your Friends: If you use the social features, your display name and profile photo are visible to your friends, to people who search for your exact email address, and to anyone you send a friend request to or receive one from. Plans, workouts, custom exercises, workout history, body measurements and strength progress are shared with your friends only for the categories, or the single plans and workouts, where you turn sharing on in the app.
• Legal Requirements: We may disclose your information if required by law or in response to valid legal processes.

4. Data Security

We take data security seriously and use various technical and administrative measures to protect your information. However, no method of transmission over the internet or electronic storage is 100% secure. We strive to use commercially acceptable means to safeguard your data but cannot guarantee absolute security.

5. Data Storage and Retention

• Workout Data: Stored locally on your device. If you opt for a backup, it is stored in Supabase Storage in the EU, readable only by your account. Data from the backup is used exclusively for restoration.
• Shared Data: Data you share with friends is kept until you remove it in the app or delete your account. Turning off sharing for a category stops its items being shared automatically but does not remove what is already shared; use "Delete all shared data" in the app for that. Copies that friends have already added to their own library stay on their devices.
• Personal Data: Retained for as long as your account is active or as needed to provide services and comply with legal obligations.
• Account Deletion: Deleting your account in the app immediately removes your account, profile, friendships, shared data and backups. You choose whether to keep the training data on your device. Copies that friends have already added to their own library stay on their devices. If you can't use the app, the form on that page takes up to 30 days.
• Diagnostics: Error reports and diagnostics already sent to Bugsnag and Expo are kept for those providers' retention periods and are not removed when you delete your account.

6. Your Rights

You have the right to:

• Access, update, or delete your personal data.
• Withdraw consent for data collection where applicable.
• Contact us for any questions or concerns regarding your data.

7. Third-Party Services

MuscleQuest uses third-party services to support core app functionality and diagnostics. These services may collect the following categories of data:

• Device or other IDs (such as app instance IDs, device identifiers and IP addresses)
• Technical data (such as device model, operating system, language, app version, app launch counts, screens viewed, and the addresses and timings of network requests)
• Diagnostics and crash data (such as crash logs, error messages, stack traces and app startup performance)

This data is collected and used for the following purposes:

• Authentication and account security (via Supabase Auth with Google sign-in)
• Crash reporting, performance monitoring and diagnostics to identify and fix technical issues (via Bugsnag and EAS Observe from Expo)
• Delivering exercise animations and app configuration (via Cloudflare)
• Delivering app updates and counting app launches by platform and app version (via Expo Application Services)

Data collected by these services may be associated with your user account or device to help investigate issues and improve the app. MuscleQuest does not use this data for targeted advertising and does not sell your personal data. For more information, please review the privacy policies ofSupabase,Google,Cloudflare,Expo andBugsnag.

8. Data Transfer

Your account, backups and shared data are stored with Supabase in the EU (Ireland), protected by access rules that limit each item to you and, for shared data, your friends. Our other service providers may process data on servers outside your region or country, which may have different data protection regulations.

Versions of MuscleQuest before 2.0 used Google Firebase for accounts, backups, shared data, usage analytics and crash reports, and keep doing so until you update. We copy accounts, backups and shared data from Firebase to Supabase without any action from you. Once the move is complete we delete them from Firebase, including those of accounts deleted in the meantime.

9. This Website

This website uses Cloudflare Web Analytics to count page views. It does not use cookies, does not track you across sites and does not collect personal data. If you use the account deletion form, the name, email address and message you enter are sent to us through Formspree so we can process your request.

10. Changes to This Privacy Policy

We may update this policy from time to time. Any changes will be communicated by posting the new policy on this page with an updated date. Users are advised to review this page periodically for any changes.

11. Contact Us

If you have any questions about this privacy policy, please contact us:

• Email: [email protected]