Your privacy, explained.

Who is responsible for your information

Evan Dempsey is responsible for the personal information processed to provide Autoregulate. This policy covers the iPhone app and this brochure website.

What we collect and why

• Account information: your account identifier, email address, display name when supplied, and sign-in provider. We use this to authenticate you, protect your account, and associate your saved data with you.
• Training information: your experience, goals, schedule, equipment, programs, completed sets, weights, reps, effort, and feedback about pump, soreness, and fatigue. We use it to provide your plan, training log, progression and recovery estimates.
• Gym photos: images you select for equipment analysis and the equipment results you confirm. Photo analysis is optional; you can add equipment manually.
• Membership information: product identifiers, purchase and renewal status, expiry dates, and transaction-related identifiers needed to grant access, restore purchases, and resolve billing issues. Apple handles payment; we do not receive your full payment-card details.
• Service and support information: messages you send us, technical errors, security events, request information such as IP addresses, and records needed to investigate abuse or operate the service.

Gym photos and equipment recognition

Photos are uploaded when you choose Analyze photos. The app re-encodes images to remove embedded metadata before upload. Our backend sends the selected images to Google Gemini to identify possible equipment. Review the results before saving your inventory or using it to plan training.

Our uploaded photo files are removed after processing, including failed processing where cleanup succeeds. Unfinished scan jobs expire after 24 hours and are picked up by a scheduled hourly cleanup; outages or retries can delay removal. The equipment inventory you confirm stays in your account. Google’s own service processing and retention terms also apply to data handled by Gemini.

Choose photos of equipment and avoid including faces, personal documents, or other people’s private information. Autoregulate does not need access to your entire photo library.

The services we use

• Google Firebase and Google Cloud: authentication, account and training storage, private photo storage, backend processing, and service operations.
• Google Gemini: analysis of the gym photos you choose to submit.
• Apple and RevenueCat: payment processing, subscription status, purchase restoration, and membership access.
• Expo: delivery of app updates. Update requests may include technical app and device information.
• Cloudflare: delivery of this website and operational request/security information.

Providers process information under their applicable service terms and privacy arrangements. We may also disclose information when required by law, to protect the service or someone’s rights, or as part of a lawful business transfer. We do not sell your personal information or use your training history for advertising.

Legal grounds for processing

Where data-protection law requires a legal basis, we process account, membership, and requested training-service data to perform our contract with you. We rely on legitimate interests for proportionate service security, fault investigation, and support, subject to your rights. We process information to meet legal obligations where required. Where consent is required for an optional feature or particular information, you can withdraw it; withdrawal does not affect processing that was lawful beforehand.

Training feedback may reveal information about your physical condition. Supply only information you want used for your training. The app’s estimates do not make decisions with legal or similarly significant effects about you.

Storage and retention

Your phone stores training data so you can continue an existing session offline. Saved sessions and changes sync with your signed-in account when connectivity permits. An unfinished workout is saved locally and is not live-synced between devices.

We retain account and training information while you use the service, until you delete it or request account deletion. Operational and support records are retained for as long as needed to provide support, investigate incidents, resolve disputes, and meet legal obligations. An account-deletion completion record is retained to prevent deleted accounts from recreating data. Apple and RevenueCat may retain transaction or subscription records under their own requirements; deleting your app account does not erase those independent records.

International processing

Our infrastructure and providers may process information outside your country, including in the United States. Where European data-protection rules apply, transfers must use an applicable adequacy decision or appropriate contractual safeguards, as relevant to the provider and transfer. Contact us for information about the safeguards applicable to your data.

Your choices and rights

You can edit your training preferences and equipment in the app. Manage camera, photo, and notification permissions in iPhone Settings. Rest alerts are optional. In Profile → Data & privacy, you can export your training information and request account deletion.

Depending on your location, you may have rights to access, correct, erase, restrict, or obtain a portable copy of your information, object to processing based on legitimate interests, and withdraw consent. Contact us to make a request; we may need to verify your identity. You can also complain to your local data-protection authority. In Ireland, this is the Data Protection Commission.

Read the account deletion instructions. Account deletion and cancelling an App Store subscription are separate actions.

This website

This brochure does not include advertising trackers, analytics scripts, or a mailing-list form. The training calculators run in your browser; their inputs are not sent to our backend. Hosting providers may process network and security information to deliver the site. If analytics or other data-collecting features are introduced, we will update this policy and request consent where required.

Children

Autoregulate is not directed at children under 13. If you believe a child has provided personal information, contact us so we can investigate and, where appropriate, remove it.

Changes and contact

We will update the date on this page when the policy changes and provide additional notice where required. Contact us using the details above for privacy questions or to exercise your rights.