Crucible — Privacy Policy

Effective date: June 23, 2026 · Last updated: October 31, 2026

This Privacy Policy explains what information the Crucible app and the Crucible Coach web portal (“Crucible,” “we,” “us”) collect, why, and what choices you have. Crucible is a strength-training and workout-tracking app for iOS; Crucible Coach is a companion website coaches use to program for, and review, athletes who have linked with them.

Our basic stance: Crucible is built to keep your data yours. We do not sell your data, we do not show ads, and we do not use advertising or marketing trackers.

1. The short version

Your workout data lives on your device by default.
If you create an account, your data is backed up and synced to our cloud provider (Supabase) so you can use it across devices. This is optional.
If you link with a coach (by entering their invite code), that coach can see your programs and logged training, send you programs, and read your weekly check-ins for as long as the link is active. You can revoke the link at any time.
If your coach asks to see a set, you can film it and send it to them. Videos are uploaded to our storage provider (Cloudflare R2) and are viewable only by you and that coach. Nothing is filmed or uploaded unless you tap Record or choose a video yourself.
Purchases and subscriptions are handled by Apple (via RevenueCat as our billing layer). We never see or store your card details.
We collect anonymous crash reports (via Sentry) so we can fix bugs. They contain no training data and no personal information.
We do not run ads, sell your data, or embed advertising/marketing trackers.
You can export your full history to CSV at any time, and you can delete your account and synced data from inside the app.

2. Information we collect

a) Information you create in the app (stored on your device)

Everything you log in Crucible is stored locally on your device, including:

Programs, training days, and prescribed exercises you create or import.
Logged workouts: sets, reps, weights, RPE/RIR, rest, notes, and personal records.
Cardio, running, and timed/interval sessions.
Body metrics you choose to enter (e.g. body weight and measurements).
App settings and preferences.

If you never create an account, this information stays on your device and is not transmitted to us.

b) Account information (only if you create an account)

To enable cloud backup, cross-device sync, and coaching, you can create an account using your email address and a password, and optionally a display name — or with Sign in with Apple, in which case Apple gives us a sign-in token, the email address you choose to share (which may be Apple's private relay address) and, the first time only, your name. We use Supabase (our authentication and database provider) to manage this. Authentication is handled by Supabase; we do not store your password in plain text, and with Sign in with Apple there is no password at all.

c) Synced training data (only if you create an account)

When you have an account and sync is active, the app data described in section (a) is uploaded to our cloud database as a record associated with your account, so it can be restored and kept in sync across your devices. This may include body-metrics data you have entered and the distance, pace, splits and route of runs you record with GPS (section o).

d) Coaching data (only if you link with a coach)

Crucible lets you link your account to a coach who uses the Crucible Coach portal. You do this by entering an invite code your coach gives you; nothing is shared until you enter a code and confirm. While a link is active:

Your coach can see: your display name, the programs on your account, your logged workouts and training history (sets, reps, weights, RPE, notes, personal records), the heart-rate summary attached to a workout (average, maximum, time in zones and, for WHOOP users, strain), and the weekly check-ins you submit.
Your coach can send you: programs and program updates, which are applied to your account, and written replies to your check-ins.
Weekly check-ins are short questionnaires your coach configures (for example, how training felt, sleep, body weight, notes). What you type in a check-in is stored on our cloud database and shown to your coach. Only submit what you are comfortable sharing with them.
Your coach cannot see your email address, password, purchase information, or anything on your device that you have not synced.

You can revoke the link at any time from the Coach tab. Revoking immediately stops your coach’s access to your training data, check-ins, and videos. Programs your coach already sent remain in your account (they are yours to keep or delete). A coach can also end the link from their side.

e) Videos you send to your coach

If your coach flags a set they want to see, the app shows a Record / Library option on that set. Nothing happens unless you choose it.

Camera, microphone, and photo library. If you tap Record, the app uses your camera and microphone to film the set (videos include audio). If you choose Library, the app reads only the video you pick. You can decline these permissions in iOS Settings; the rest of the app works normally without them.
What is uploaded. After you trim the clip, the video file is uploaded directly from your device to our storage provider, Cloudflare R2, along with a small label describing the set (exercise, weight, reps, date, whether it was a PR). Clips are limited to 90 seconds.
Who can view it. Only you and the coach you are linked to. Access is granted through short-lived, signed links that are only issued while your coach link is active. Videos are never public and are never used for any other purpose.
Retention. Videos are stored so that you and your coach can review them. Video files are automatically and permanently deleted from our storage provider 90 days after upload. Revoking your coach link, or deleting your account, immediately removes access to your videos; the underlying files are then purged on the same 90-day schedule.
Videos you film with Crucible are not added to your Photos library unless you save them there yourself.

f) Coach accounts (Crucible Coach portal)

If you sign up as a coach at coach.trycrucible.app, we collect your email address, password (managed by Supabase), and the display name you choose, plus the programs you build and the check-in questions and replies you write. Athletes who accept your invite code can see your display name. Athlete training data shown to you belongs to the athlete; you may use it only to coach them, and your access ends when either side revokes the link.

Email notifications (optional). If you turn notifications on in the portal's Settings, we store the address you enter and email it when one of your athletes submits a check-in, uploads a set video or accepts your invite. Each email carries only what the event is about (the athlete's display name, the week's summary or the lift filmed) and is sent through our email provider (Resend). We keep a log of these notifications (which event, which coach, when, and whether it was delivered) so we can troubleshoot delivery; athletes are never emailed by the portal. Turn notifications off in Settings at any time.

g) Purchase information

Crucible offers optional in-app purchases and subscriptions (“Crucible Pro”). These transactions are processed by Apple through the App Store. We use RevenueCat to manage entitlements and validate purchase receipts. We receive information about your subscription status (e.g. whether Crucible Pro is active) but not your payment-card details. RevenueCat may assign an anonymous identifier and, if you are signed in, associate your purchase with your account so your Pro access follows you across devices.

h) Imported files

The import feature reads a file you select (an .xlsx or .csv program, or a workout-history export from another app) on your device to create a program or history. The file is processed locally; we do not upload your source files to our servers.

i) Crash reports and diagnostics

To find and fix bugs, the app sends crash reports to Sentry, a crash-reporting service. A crash report contains technical information about what the app was doing when it failed (stack trace, app version, device model, OS version) and, for the spreadsheet importer, counts only (for example, how many days or exercises were parsed). Crash reports never include your name, email, file names, sheet contents, exercise names, weights, or any training data, and they are not linked to your identity. We do not use session replay, performance tracing, or any behavioral analytics.

j) Notifications and Live Activities

Rest-timer alerts, optional daily training reminders, and the lock-screen rest timer and run display (Live Activities) are scheduled and displayed entirely on your device. They do not send anything to us. You can turn them off in the app or in iOS Settings.

k) Website waitlist and coach applications

If you enter your email on trycrucible.app to join the waitlist, we store it in our Supabase database and use it only to tell you when Crucible launches and for occasional product updates. If you apply to the coaching beta on trycrucible.app/coaching.html, we store what you enter in that form (your name, email address, roster size, how you program today and any notes) in the same database and use it only to reply to you and set up your coach account. Email support@trycrucible.app to be removed from either at any time.

l) Apple Health (HealthKit) — optional, read-only

If you turn it on, Crucible reads your completed workouts from Apple Health: cardio workouts (runs, rides, rows, swims, walks and similar recorded by Apple Watch or apps such as Strava, Runna, Garmin or Nike Run Club) and strength workouts (recorded by Apple Watch, the Crucible Apple Watch app or other apps). For each workout we read its type, start time, duration, distance, calories, the name of the app that recorded it, and the heart rate recorded during it — we keep the average, the maximum and the time spent in each heart-rate zone, not the individual samples. If you turn it on, Crucible also reads your body weight and body fat percentage from Apple Health (written by a smart scale or another app) so your body-weight log and trend fill themselves; we keep one value per day with the name of the app that wrote it. We use this only to show cardio workouts in Crucible with their heart rate, count them toward your weekly cardio target, mark a planned run in your training plan as done, and attach a strength workout's heart rate to the Crucible lifting session it overlaps. Strength workouts are never shown as separate entries.

Imported workouts and heart-rate summaries are stored on your device as part of your Crucible cardio and lifting sessions and, if you have an account, backed up with the rest of your training data — never as raw Health records. Health data is never used for advertising or marketing, never sold, never shared with third parties, and is not for medical use. The only data Crucible writes to Apple Health is workouts: the runs and lifts you record with the Crucible Apple Watch app, and — if you allow it when you first save one — the runs you record with your iPhone (their distance, route, time and an estimated active energy). It never writes weight, measurements or anything else, and you can turn the run write off in Preferences.

You can stop sharing at any time in iOS Settings → Privacy & Security → Health → Crucible. Deleting an imported workout in Crucible removes it only from Crucible, not from Apple Health.

m) WHOOP — optional, read-only

If you connect WHOOP, you sign in on WHOOP's own page and choose what to share; Crucible never sees your WHOOP password. With your permission Crucible reads your completed workouts (type, start and end time, average and maximum heart rate, strain, calories and distance), your daily recovery (recovery score, heart-rate variability, resting heart rate), your daily strain, your sleep (performance and time in bed), your profile name and your body measurements (height, weight, maximum heart rate). We use this only to show the workout in Crucible, count it toward your weekly cardio target, mark a planned run as done, and show your recovery and strain on the Home screen. Crucible does not write to WHOOP.

The sign-in tokens WHOOP issues are stored only on your device (in the iOS keychain). Imported workouts are stored as Crucible cardio sessions, and the heart rate, strain, calories and time in zones of a WHOOP activity are stored on the Crucible cardio or lifting session it matches; if you have an account these are backed up with the rest of your training data like any other workout detail. Your daily recovery, strain and sleep record and your WHOOP profile and body measurements stay on your device and are not backed up or synced. WHOOP data is never used for advertising or marketing, never sold, never shared with third parties, and is not for medical use. Disconnect any time in Profile → Preferences → Integrations → WHOOP; that revokes Crucible's access at WHOOP and deletes the tokens from your device. You can also revoke access from your WHOOP account settings.

n) Bluetooth heart rate monitors — optional, read-only

If you pair a Bluetooth heart rate monitor (a WHOOP band with heart rate broadcast turned on — the supported device — or another Bluetooth heart rate monitor you choose to pair), Crucible uses Bluetooth to read your heart rate from that device during a workout so it can show your live heart rate and zone and save the workout's average, maximum and time in zones with it. The pairing (the device's Bluetooth identifier and name) is stored only on your device; heart rate readings are saved as part of your workout like any other workout data. Crucible does not use Bluetooth for anything else and never sends heart rate readings to third parties. Unpair any time in Profile → Preferences → Integrations → Heart rate monitor.

o) Location (GPS runs) — optional, during runs only

If you allow it, Crucible uses your iPhone's location only while an outdoor run you started in Crucible is in progress — including with the screen locked, which iOS shows with the blue location indicator — to measure distance, pace and mile / kilometre splits and to draw the route of that run. Location is never read at any other time, and never in the background outside a run. You can run without it: decline the one-time location prompt or turn off GPS for runs in Preferences, and the run is timed without distance.

What we keep is the run's distance, pace, splits and a thinned route (a few hundred points, about a metre of precision), stored on your device as part of that run and, if you have an account, backed up with the rest of your training data (section c). Location data is never used for advertising or marketing, never sold, never shared with third parties, and is not used to track you between sessions. Deleting the run deletes its route. You can revoke access at any time in iOS Settings → Privacy & Security → Location Services → Crucible.

p) What we do NOT collect

We do not display advertising or use advertising identifiers.
We do not embed advertising, marketing, or behavioral-analytics SDKs. The only third-party SDKs in the app are for billing (RevenueCat) and crash reporting (Sentry).
We do not access your contacts. Location is used only during an outdoor run you start in Crucible, and only if you allow it (section o). Apple Health is read only if you turn it on (section l), and only for your completed workouts, the heart rate recorded during them, and your body weight and body fat. WHOOP is read only if you connect it (section m). Bluetooth is used only for a heart rate monitor you pair (section n).
We do not sell or rent your personal information to anyone.

3. How we use information

We use the information above only to:

Provide the core app functionality (logging, programs, history, progressive-overload tracking).
Back up and sync your data across your devices when you have an account.
Authenticate you and let you reset your password.
Connect you with a coach you have chosen, deliver their programs and replies to you, and show them the training data, check-ins, and videos described in section 2 while the link is active.
Provide and restore your Crucible Pro purchases and subscriptions.
Diagnose crashes and importer failures so we can fix them.
Respond to support requests you send us.

We do not use your data for advertising or profiling, and we do not use your training data or videos to train machine-learning models.

4. Where your data is stored and who can access it

On your device: in the app’s local storage.
In the cloud (account users): in our Supabase project database. Access is restricted through row-level security so that one user cannot read another user’s data, and a coach can read an athlete’s data only while an active link exists.
Videos: in a private Cloudflare R2 storage bucket. Files are never publicly listable; they are reachable only through short-lived signed links issued to you or your linked coach.
Purchases: processed by Apple; entitlement state managed by RevenueCat.
Crash reports: in Sentry.

These providers act as our service providers / data processors. We encourage you to review their respective privacy practices (Apple, Supabase, Cloudflare, RevenueCat, Sentry).

We retain your synced data for as long as your account exists. If you delete your account (see section 6), your synced data is deleted. Videos are retained as described in section 2(e).

5. Data security

We rely on industry-standard protections provided by our infrastructure partners, including encrypted connections (HTTPS/TLS) for data in transit, encryption at rest, and access controls on the database and video storage. Video uploads and playback use signed, time-limited links. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

6. Your choices and rights

Use without an account. You can use Crucible entirely on-device without creating an account.
Coaching is opt-in. No coach can see your data unless you enter their invite code and confirm. You can revoke a coach link at any time from the Coach tab.
Filming is opt-in, per set. You choose whether to record or attach a video for a flagged set. You can deny camera, microphone, and photo-library permissions in iOS Settings.
Export your data. You can export your full workout history to a CSV file from within the app at any time.
Access / correction. You can view and edit your data directly in the app.
Account & data deletion. You can permanently delete your account from inside the app: Account → Danger zone → Delete account. This removes your account and all associated cloud data — your authentication record, your synced training data, your coach links, your check-ins, and your video records — and cannot be undone. Your coach loses access immediately; video files are purged from storage on the schedule in section 2(e). By default, the workout data already stored on your device is left in place so you can keep using Crucible in local-only mode; the deletion screen also offers an explicit option to erase the on-device data at the same time. You may also delete the app from your device to remove the local copy. If you have any trouble, contact us at support@trycrucible.app.
Region-specific rights. Depending on where you live (e.g. EEA/UK under GDPR, or California under the CCPA/CPRA), you may have additional rights such as access, portability, correction, deletion, and the right to object. To exercise them, contact support@trycrucible.app.

7. Children’s privacy

Crucible is rated for a general audience and contains no objectionable content (intended to qualify for a 4+ App Store age rating). However, Crucible is not directed to children under 13, and account creation, coaching, video sharing, and subscriptions are intended for users 13 years and older (or the minimum age of digital consent in your country, whichever is higher). We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact support@trycrucible.app and we will delete it.

8. International users

Your information may be processed and stored in countries other than your own, including where our service providers operate. By using Crucible with an account, you understand your data may be transferred to and processed in those locations.

9. Changes to this policy

We may update this Privacy Policy as the app evolves. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you in the app.

August 25, 2026: added coaching (2d), videos for your coach (2e), coach accounts (2f), crash reporting (2i), notifications (2j), and the website waitlist (2k); updated storage, security, and deletion sections accordingly.

10. Contact

Questions or requests about this policy or your data:

support@trycrucible.app
Daniel Coschigano