Privacy and your data

Progress treats health data as the most sensitive thing it holds. Health data syncs only after you consent, is never visible to other users, and can be exported or deleted by you at any time. Servers are in the EU (Ireland). Crash reports and usage statistics carry no identity and no health values.

Consent, stream by stream

Training data (sessions, workouts, plans) syncs when you create an account. Health data does not, until you say yes:

  • Weight and body measurements
  • Diet
  • Supplements
  • Injuries and check-ins
  • Personal information and body stats on your profile (birth date, biological sex, height)
  • Cardio recordings (heart rate and GPS routes)
  • Progress photos

The first time you open one of those trackers while signed in, a single sheet asks Sync your health data? with one checkbox. Turn on enables all of them. Not now keeps everything working on your phone only, and Progress will not ask again. Each stream can be switched on or off later in Settings → Privacy → Health data sync. Turning a stream off also offers to erase its server copy. Erasing the server copy never touches what is on your phone.

Your sign-up record

When you create an account you confirm that you are 16 or older and agree to the Terms of Service and Privacy Policy. Progress saves that confirmation in your account with the date and the version of the terms, next to your health and AI consents, so it can show later what you agreed to. Like every consent record, it cannot be edited afterwards, it is part of your export, and it is deleted with your account.

The AI coach

Before your first message to the cloud coach, a separate sheet asks for consent to send your data, including health data, to the AI provider. You can withdraw it with one toggle in Settings. Beyond your training data and body measurements, the cloud coach can read three kinds of health data: your injuries and pain check-ins, your diet goal, and your supplements. It reads each one only while its health data sync is also on, and it never sees your recovery, sleep or strain scores. With cardio sync on, it also reads your runs and rides, but never your routes. Facts the coach remembers are saved only when you approve them, and you can delete them in Settings → Privacy → Coach memory; they are included in your export and removed when you delete your account, as are the thumbs ratings you give replies. The on-device coach needs no consent because nothing leaves the phone. Coach answers are general guidance, not medical advice.

What is never shared

Your health data is never visible to friends or anyone else. Friends can see the sessions you finish and choose to share: the log name, duration, rating, your note, and the numbers of each set. Each session has a Share with friends switch, and you can block anyone. Friends never see your heart rate, routes, weight, injuries, diet, supplements or photos, whatever you share.

Export

Settings → Privacy → Export my data prepares a bundle of everything stored in your account. When it is ready you get a download link that works for 24 hours. Photos are listed inside the bundle as links that work for 7 days. One export runs at a time. The export comes from your account only: anything that never synced (for example a health stream you kept off, or data logged while signed out) is not in it.

Delete your account

Settings → Privacy → Delete account removes everything: sessions, history, plans, consents, chats, media, and the account itself, in one step. You type DELETE, then confirm it is you by signing in again. You receive a confirmation code, shown once; keep it if you may want to contact support about the deletion. Nothing is recoverable afterwards, so export first if you want your history.

What is kept: a deletion record with your account id, the code and the time, so support can confirm the deletion happened. Database backups roll off within 30 days. Data Progress wrote to Apple Health stays in Apple Health. Other phones signed in to the account keep what is stored on them, so remove the app there too.

Custom exercises or workouts that another user has already used in their own log are kept without your name on them, so their history stays intact.

Erase this phone

There is no button that erases only this phone. Removing the app removes what it stored on the phone; whatever synced stays in your account.

Diagnostics

Progress sends crash reports and anonymous usage statistics to help fix bugs. They contain no account id, no email, no health values, no free text and no location. You can turn this off under Settings → Diagnostics.