The operator of Reppy (the “Service”) handles your personal information as follows.
- If you do not sign in, your workout data stays on your device, and the operator does not collect any personal information.
- If you sign in, your account and your plans, routines, selected routine, custom exercises, and finished workout history are stored on a server in Korea and kept in sync with your other devices signed in to the same account.
- If you use AI connections, that workout data is also sent to the AI service you connect.
When You Do Not Sign In
Signing in is optional, and you can use every feature of the app without it. The app includes no advertising, analytics, or crash reporting tools. If you do not sign in, the app does not send your workout data off your device, including to the operator’s servers.
- The workout plans, routines, and workout history (including notes) you enter are stored only on your device. The operator cannot see this information.
- If you have device backups (such as iCloud Backup or Google backup) turned on, this information is included in those backups. Backups are between you and Apple or Google, and the operator does not access them.
- Deleting the app also deletes the information stored on your device.
Apple Health and Health Connect
If you allow it, the app writes your finished workouts (type, start time, end time, duration, routine name, and plan name) to the Apple Health app on iPhone, or to Health Connect on Android. The app does not read any data from Apple Health or Health Connect.
- Information written there stays on your device. The app does not send it to the operator’s servers, use it for advertising, or share it with third parties.
- You can turn this off at any time: on iPhone in iOS Settings → Reppy or in the Health app, and on Android in the app’s settings or in Health Connect’s app permissions.
Information Collected When You Sign In
You sign in with your Apple or Google account on the Profile tab of the app, or on a web page when you connect Reppy from an AI app. When you sign in with Apple on Android, a browser screen opens over the app and goes through the Reppy server. The first time you sign in, a Reppy account is created, and the following information is stored on the server.
- Values received from Apple and Google: your account identifier, email address (this may be an Apple “Hide My Email” address) and whether it is verified, and your name and profile photo URL if Apple or Google provides them
- Account information: the values above, sign-in times, and a token used to disconnect your Apple or Google sign-in when you delete your account (stored encrypted)
- Workout data: plans, routines (names, exercises, reps and weight per set, rest time), your selected routine, custom exercises (name, muscle group, equipment), and finished workouts (sets, reps, and weight per exercise, notes, start and end times). What you create in the app and what an AI creates are collected in the same account. For an item you delete, only a mark that it was deleted (identifier and time) remains, with no content.
- Sign-in sessions: hashes of the tokens that keep you signed in to the app, and their expiry times (access 15 minutes, refresh 30 days)
- Temporary sign-in records: one-time values used to verify a single sign-in. They are stored as hashes, not in their original form (for Apple sign-in, the nonce is stored as is so it can be matched against the value Apple returns). Apple sign-in on Android also keeps the account link and a one-time code (as a hash). A sign-in must be completed within 5 minutes of starting (10 minutes for Apple sign-in on Android), and the one-time code can be used once, within 60 seconds.
- Connection information (when you use AI connections): the name and address of each AI app you connect, the permissions you allowed, and the dates you connected, last used, and disconnected it
- Usage records (when you use AI connections): call counts (for rate limits), and server logs with the connection identifier, tool name, result type, and time
What Happens When You Sign In: Syncing Across Devices
When you sign in, your device’s plans, routines, selected routine, custom exercises, and finished workout history are uploaded to the server and kept in sync with your other devices signed in to the same account (iPhone and Android alike). The app syncs automatically when it comes to the foreground, when you finish a workout, and after you edit or delete something. There is no sync button.
- The first time you sign in, everything on this device is uploaded, and it is merged with any data already in the account from other devices. For the same item, the most recent edit is kept.
- If this device was previously used with a different account, the app asks you first after you sign in. Merge into this account: the device’s data is uploaded to this account and merged with the account’s data. Show only this account’s history: the plans, routines, custom exercises, and workout history on the device are deleted and only this account’s data is downloaded; nothing from the device is uploaded. Cancel: you are not signed in and the device’s data stays as it is.
- Not synced: a workout in progress, device settings (such as the weight unit), and records written to Apple Health or Health Connect.
- Without a connection, the app keeps running on your device and syncs next time.
- If you sign out, the data on this device stays. The data you uploaded also stays in the account, and picks up again when you sign back in. Data on the server is deleted when you delete your account (see “Your Rights” below).
Your AI conversations and the content that tools send and receive are not kept in server logs.
The connection pages use cookies to carry out sign-in and to keep you signed in (for up to one hour). There are no advertising or analytics cookies. If you block cookies in your browser, you cannot connect an AI app.
Purposes of Processing
- Verifying your account and signing you in
- Storing your workout data in your account and keeping it in sync across your devices
- Letting the AI apps you connect read your workout data and create plans and routines
- Managing connections, preventing excessive calls, and investigating errors
- Answering your inquiries
Retention and Destruction
- Account information and workout data: until you delete your account. They are deleted immediately when you do. Signing out does not delete the data on the server.
- Sign-in sessions: an access token works for 15 minutes and a refresh token for 30 days, and when you sign out the app asks the server to revoke the session so it stops working immediately. If that request cannot get through (for example, while offline), the session stays on the server until the refresh token expires (30 days) and is then cleaned up. Session records (token hashes) are deleted 30 days after the token expires or you sign out, or immediately when you delete your account.
- Temporary sign-in records (one-time sign-in verification values, and Apple sign-in records on Android): deleted one day after they expire. Records tied to your account are deleted immediately when you delete your account.
- Disconnected connections: deleted 30 days after you disconnect, or immediately when you delete your account.
- Connection tokens: deleted 30 days after they expire.
- Call counts: deleted after two days.
- Server logs: deleted after 30 days.
- Inquiry emails: kept in case of disputes, and deleted within one year after your inquiry is resolved.
Information whose retention period has passed, or that you ask us to delete, is deleted from the database. Server data is backed up daily and backups are kept for 4 days, so deleted information is also gone from backups within 4 days.
Sharing with AI Services (Third-Party Provision and Transfer Abroad)
Your signed-in data goes to an AI service only if you use an AI connection. Only if you consent, the operator sends the result to the AI service you connected each time that AI app calls a Reppy tool. Consent is asked on a consent screen each time you connect, separately from account sign-up.
- Recipients: Claude — Anthropic, PBC (United States); ChatGPT — OpenAI (United States); Gemini — Google LLC (United States). For other AI apps, the recipient shown on the consent screen
- Data: plans, routines and the selected routine; finished workouts (including exercise notes); per-exercise stats (last done, best set, volume). Your email and other account information are not sent.
- Purpose: planning workout routines and reviewing your history in AI conversations
- When and how: sent over the internet (HTTPS) each time the AI calls a tool
- Retention: governed by the recipient’s policy. Once you disconnect, the operator sends nothing more. Conversation content already sent must be deleted in that AI service.
- Your right to refuse: you may decline. If you do, the connection is not made, and you can keep using the app as before.
- How to disconnect: at any time at reppy-api.moseoh.com/connections or in the AI app’s connection settings. Once disconnected, that AI app immediately can no longer read or write.
Processors and Other Transfers Abroad
- Server operation: Oracle Cloud Infrastructure (Korea) — servers and database
- Delivery and security: Cloudflare, Inc. (United States and countries where Cloudflare has edge locations) — relays and protects requests to reppy.moseoh.com and reppy-api.moseoh.com. HTTPS connections end at the nearest edge location, so your IP address and request content pass through it in transit. This happens over the network each time you use the Service, and any retention (none, or short-lived logs) follows Cloudflare’s policy.
- Sign-in verification and disconnection: Apple Inc. and Google LLC (United States) — when you sign in, the server sends the authorization code to Apple or Google to exchange it for tokens (the server verifies the ID token itself with the providers’ public keys), and when you delete your account it sends a request to disconnect your sign-in (token revocation). This happens over the internet (HTTPS) each time you sign in or delete your account.
- Forwarding inquiry emails: Cloudflare, Inc. (United States) — forwards emails sent to reppy@moseoh.com (sender address and content) to the operator’s mailbox. They are transferred over the internet when you send an email.
- Storing inquiry emails: Google LLC (United States) — the operator’s mailbox (Gmail). Deleted within one year after your inquiry is resolved.
If You Use the Service Outside Korea
The server is located in Korea. If you sign in or use AI connections from outside Korea, the account information and workout data described above are transferred from your country to the server in Korea, where they are stored and processed. If you do not want this, do not sign in; you can keep using the app as before.
Children Under 14
Children under 14 may not sign in or use AI connections. If we learn that an account belongs to a child under 14, we will delete the account and its data. If you do not sign in, no information is collected, so anyone can use the app regardless of age.
Your Rights
- You can ask to access, correct, or delete your personal information, or to stop its processing. Email reppy@moseoh.com and you will get a reply within 10 days.
- You can delete your account yourself in the app (Profile → Account → Delete Account), or ask by email at the address above. Deleting it removes your account information, the workout data stored on the server, your sign-in sessions, and all AI connections, and disconnects your Apple or Google sign-in (the token is revoked). If the sign-in cannot be disconnected, the account is not deleted and you are told about the error. The workout data on your device is not deleted and stays.
- Deleted information is also gone from server backups within 4 days (see “Retention and Destruction” above).
- You can disconnect AI connections yourself as described in “How to disconnect” above.
Security Measures
- All communication with the server uses HTTPS only.
- Sign-in session tokens and connection tokens are stored as hashes, not in their original form, and tokens used to disconnect Apple or Google sign-in are stored encrypted.
- An AI can see only the workout data allowed for its connection and cannot see account information. AI apps cannot delete plans, routines, or workouts.
- Excessive calls are limited.
Privacy Officer and Contact
Privacy officer: the Reppy operator (an individual developer) · reppy@moseoh.com
You can report or seek advice on privacy violations to the Personal Information Infringement Report Center of Korea (privacy.kisa.or.kr, 118 within Korea) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).
Changes to This Policy
If this policy changes, the change will be announced on this page and the effective date updated. If a feature that sends data from your device to the server is added or changed, this policy will be revised before that feature is released. The previous policy is available here.