Crucible — Privacy Policy

Effective date: [INSERT DATE] Last updated: June 21, 2026

This Privacy Policy explains what information the Crucible app ("Crucible," "we," "us") collects, why, and what choices you have. Crucible is a strength-training and workout-tracking app for iOS.

Our basic stance: Crucible is built to keep your data yours. We do not sell your data, we do not show ads, and we do not use third-party analytics or advertising trackers.

1. The short version

• Your workout data lives on your device by default.
• If you create an account, your data is backed up and synced to our cloud provider (Supabase) so you can use it across devices. This is optional.
• Purchases and subscriptions are handled by Apple (via RevenueCat as our billing layer). We never see or store your card details.
• We do not run ads, sell your data, or embed third-party analytics/tracking SDKs.
• You can export your full history to CSV at any time, and you can delete your account and synced data from inside the app.

2. Information we collect

a) Information you create in the app (stored on your device)

Everything you log in Crucible is stored locally on your device, including:

• Programs, training days, and prescribed exercises you create or import.
• Logged workouts: sets, reps, weights, RPE/RIR, rest, notes, and personal records.
• Cardio and timed/interval sessions.
• Body metrics you choose to enter (e.g. body weight and measurements).
• App settings and preferences.

If you never create an account, this information stays on your device and is not transmitted to us.

b) Account information (only if you create an account)

To enable cloud backup and cross-device sync, you can create an account using your email address and a password. We use Supabase (our authentication and database provider) to manage this. Authentication is handled by Supabase; we do not store your password in plain text.

c) Synced training data (only if you create an account)

When you have an account and sync is active, the app data described in section (a) is uploaded to our cloud database as a single record associated with your account, so it can be restored and kept in sync across your devices. This may include body-metrics data you have entered.

d) Purchase information

Crucible offers optional in-app purchases and subscriptions ("Crucible Pro"). These transactions are processed by Apple through the App Store. We use RevenueCat to manage entitlements and validate purchase receipts. We receive information about your subscription status (e.g. whether Crucible Pro is active) but not your payment-card details. RevenueCat may assign an anonymous identifier and, if you are signed in, associate your purchase with your account so your Pro access follows you across devices.

e) Imported files

The spreadsheet import feature reads a file you select (.xlsx or .csv) on your device to create a program. The file is processed locally; we do not upload your source spreadsheets to our servers.

f) What we do NOT collect

• We do not display advertising or use advertising identifiers.
• We do not embed third-party analytics, marketing, or tracking SDKs.
• We do not sell or rent your personal information to anyone.

3. How we use information

We use the information above only to:

• Provide the core app functionality (logging, programs, history, progressive-overload tracking).
• Back up and sync your data across your devices when you have an account.
• Authenticate you and let you reset your password.
• Provide and restore your Crucible Pro purchases and subscriptions.
• Respond to support requests you send us.

We do not use your data for advertising or profiling.

4. Where your data is stored and who can access it

• On your device: in the app's local storage.
• In the cloud (account users): in our Supabase project database. Access is restricted to your account through row-level security so that one user cannot read another user's data.
• Purchases: processed by Apple; entitlement state managed by RevenueCat.

These providers act as our service providers / data processors. We encourage you to review their respective privacy practices (Apple, Supabase, RevenueCat).

We retain your synced data for as long as your account exists. If you delete your account (see section 6), your synced data is deleted.

5. Data security

We rely on industry-standard protections provided by our infrastructure partners, including encrypted connections (HTTPS/TLS) for data in transit and access controls on the database. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

6. Your choices and rights

• Use without an account. You can use Crucible entirely on-device without creating an account.
• Export your data. You can export your full workout history to a CSV file from within the app at any time.
• Access / correction. You can view and edit your data directly in the app.
• Account & data deletion. You can permanently delete your account from inside the app: Account → Danger zone → Delete account. This removes your account and all associated synced data from our cloud (your authentication record and your synced data record) and cannot be undone. By default, the workout data already stored on your device is left in place so you can keep using Crucible in local-only mode; the deletion screen also offers an explicit option to erase the on-device data at the same time. You may also delete the app from your device to remove the local copy. If you have any trouble, contact us at [INSERT CONTACT EMAIL].
• Region-specific rights. Depending on where you live (e.g. EEA/UK under GDPR, or California under the CCPA/CPRA), you may have additional rights such as access, portability, correction, deletion, and the right to object. To exercise them, contact [INSERT CONTACT EMAIL].

7. Children's privacy

Crucible is rated for a general audience and contains no objectionable content (intended to qualify for a 4+ App Store age rating). However, Crucible is not directed to children under 13, and account creation and subscriptions are intended for users 13 years and older (or the minimum age of digital consent in your country, whichever is higher). We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact [INSERT CONTACT EMAIL] and we will delete it.

8. International users

Your information may be processed and stored in countries other than your own, including where our service providers operate. By using Crucible with an account, you understand your data may be transferred to and processed in those locations.

9. Changes to this policy

We may update this Privacy Policy as the app evolves. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the app.

10. Contact

Questions or requests about this policy or your data:

[INSERT CONTACT EMAIL] [INSERT LEGAL/COMPANY NAME, if applicable]

This document is a draft prepared for the app owner's review and is not legal advice. Consult a qualified attorney before publishing.