Privacy policy

Sigmaxx is an iPhone training tracker. You record workouts and, if you want to, physique check-ins. This page explains what data that involves, where it goes, and what you can do about it.

Your account

Sigmaxx creates an anonymous account on your device. No name, email address or phone number is required to use it. The credentials for that account are held in your iPhone’s Keychain, so the account survives restarting the app.

What stays on your iPhone

• Your workouts, routines, plans and training history.
• Check-in photos. Photos are stored locally and are not part of the cloud backup.
• Your weight history, measurements, age and the preferences you set during onboarding.
• Saved AI reports, so you can read them again and compare check-ins over time.

What is backed up

Backup stores completed workouts, routines, profile fields and check-in metadata in a database hosted by Supabase, protected so that only your own account can read or write its rows. Photos, active sessions and photo files are not uploaded. Restoring shows you a preview of missing records before importing them, and does not overwrite local edits.

Because the account is anonymous, it cannot be recovered if its credentials are lost, for example by deleting the app or losing the device. Keep your own export if the history matters to you.

AI features

Coaching notes and check-in analysis run only after you agree on an explicit, versioned permission screen during onboarding. Each screen says what it will send before it sends anything, and you can withdraw the permission in Settings; app access then pauses.

• Training review sends the training records relevant to the review — sets, weights, reps and dates. It does not send photos.
• Check-in analysis sends the covered photos you approved, your age and your goal. You crop on the device and see the final image first. Location and other image metadata are removed and the orientation is normalised before upload; the uncropped original is never sent as a hidden fallback.

Requests go to a Sigmaxx server function that checks your account and then calls OpenAI’s API. Provider credentials stay on that server and are never in the app. OpenAI processes the content to produce the response and applies its own retention to API traffic; we do not control that retention. The report that comes back is saved to your records so you can compare check-ins — check-ins and reports are kept, not discarded.

Faces

Before a progress photo is shown, saved or sent anywhere, Sigmaxx detects faces on your iPhone with Apple’s on-device Vision framework and covers each one with a sticker. The uncovered photo is never stored and never leaves the device. Detection can miss a face in unusual lighting or angles; you see the covered photo before you keep it.

Sharing

Workout cards, progress cards and reports are only shared when you choose to share them. Each one shows you a preview of exactly what it contains before the system share sheet opens. Your photos, age and plan history are not included by default.

Subscriptions

Subscriptions are purchased through Apple in the App Store. Sigmaxx uses RevenueCat to check whether a subscription is active. RevenueCat receives an anonymous customer identifier and purchase receipt data from Apple. It receives nothing from your training records, photos or reports.

Analytics

Sigmaxx does not include a third-party analytics or advertising SDK. If product analytics are added, this page will say so before they ship, and no images, measurements, age or report content will be sent with them.

What Sigmaxx does not do

• Sell or share your data with advertisers.
• Rank you against other people or make any of your data visible to anyone else.
• Give medical advice. Body-fat ranges are visual estimates and can be wrong.

Notifications and Live Activities

If you allow notifications, Sigmaxx schedules one local alert when a rest period ends during a workout, and shows the rest countdown as a Live Activity on the lock screen. Both are generated on the device; nothing is sent to a server for them.

Deleting your data

Settings, Privacy, Delete all my data removes every record and photo on your iPhone, deletes your anonymous account and its backup rows from our servers in the same step, and returns the app to first launch. If the server step fails because you are offline, the app tells you; email us from the address below and we delete the rest within 30 days.

Changes

If this policy changes in a way that matters, the date at the top changes and the app tells you on next launch.