Privacy Policy

1.Who is responsible

Racky is provided by Orhan Aykut Kardeş, İstanbul, Türkiye (“we”, “us”). We are the data controller for the personal data described in this policy. You can reach us at support@rackyapp.com.

2.Data we collect

Account

• Your email address and the way you sign in: with your email address and a password, or with Sign in with Apple.
• If you use Sign in with Apple, Apple shares your name the first time you sign in, and your email address. If you choose to hide your email, we receive a relay address from Apple instead. We also store an identifier for your Apple ID so that you can sign in again.
• Your password is handled by our authentication provider and stored only as a secure hash. We never see your Apple ID password.

Profile

• Your full name and the display name that Racky shows you.
• Your date of birth, sex (female, male or prefer not to say), height and weight.
• Your training profile: goal, experience, activity level, how many days a week and on which days you train, session length, the equipment you can use and the program you chose.
• Settings such as units, default rest time, whether set fields are filled from your previous results, and your time zone.

Training

• The programs and workouts you choose or create, with their exercises, sets, training methods and notes, and your weekly schedule.
• Your workouts: exercises, sets, weights, repetitions, durations, rest, the effort ratings (RPE) you enter, dates and times, and whether a workout was finished or ended early.
• Personal records and achievements calculated from your workouts.
• A backup of a workout in progress, so that it is not lost if something happens to your device.

Body measurements

• The body weight and circumferences you enter (waist, abdomen, chest, hips, neck, upper arms, forearms, thighs and calves), with their dates.
• Your check-in reminder settings.

Technical data

• When the app talks to our servers, our hosting provider processes technical data such as your IP address and request logs to run and protect the service. These logs are kept for a short time.
• Your sign-in tokens are stored in your device’s Keychain.
• Racky keeps copies of your data and of the exercise images it has shown on your device, so that screens open quickly and a workout you are recording is not lost if the connection drops. Exercise images take up at most 200 MB, and you can remove them in Profile → App Preferences → Clear Cache.
• Your app language, appearance, and workout sound and vibration settings are stored only on your device.
• Rest timer alerts and check-in reminders are scheduled on your device. We do not collect a push notification token.

What we do not collect

• We do not access your location, contacts, photos, camera, microphone or Apple Health data.
• The app contains no advertising, no analytics or tracking tools and no third-party SDKs. We do not track you across other apps or websites, and we do not sell your data.

3.Body data

Your date of birth, sex, height, weight and the body measurements you enter are used only to set up and personalize your training, to show your progress and, for your date of birth, to confirm that you are at least 16. Racky does not use them to assess, diagnose or score your health, and it does not calculate health indicators such as body mass index (BMI) from them. We process this data to provide the service you asked for.

If we add a feature that derives health information from this data, such as BMI or calorie estimates, we will ask for your explicit consent before using your data for that feature, and you will be able to withdraw that consent at any time.

4.How we use your data

• To provide Racky: to create and run your account, build and run your program, record your workouts and keep them in sync. Legal basis: performing our agreement with you.
• To personalize and show progress: to suggest programs and show your progress, records and achievements. Legal basis: performing our agreement with you.
• To send account emails: to confirm your email address, let you reset your password and confirm a change of email address. Legal basis: performing our agreement with you.
• To remind you: to show the rest timer alerts and check-in reminders you turn on, with your notification permission.
• To help you: to answer the messages you send to support. Legal basis: our legitimate interest in answering you.
• To keep the service safe and working: to prevent abuse and fix problems. Legal basis: our legitimate interest.
• To meet legal obligations when the law requires it.

We do not use your data for advertising or for automated decisions that have legal or similarly significant effects on you.

5.Where your data is stored and who processes it

• Supabase (database, authentication and file storage) stores your data on Amazon Web Services servers in Frankfurt, Germany (EU).
• Resend sends our account emails. It processes your email address and the content of those emails.
• Apple, only if you choose Sign in with Apple, under its own privacy policy.
• Cloudflare hosts rackyapp.com and forwards the emails you send to support@rackyapp.com to us. It processes technical data such as IP addresses to deliver and protect the website. This website does not use tracking cookies or analytics.

We share your data with these providers only to run the service, under agreements that require them to protect it. We share it with no one else unless the law requires it.

These providers process data outside Türkiye. Your stored data is kept in Germany, and Resend and Cloudflare, both based in the United States, may also process it in other countries. This means your data is transferred abroad.

6.How long we keep your data

• We keep your data for as long as your account exists.
• When you delete your account in the app (Profile → Account & Data → Delete Account), your account and all data linked to it are deleted from our servers right away, and the app removes its data from your device. If you signed in with Apple, we also ask Apple to revoke Racky’s access to your Apple ID. Copies in our hosting provider’s backups are overwritten within 7 days.
• Our email provider keeps a record of the account emails it sends for a limited time.
• We keep the emails you send to support only for as long as we need them to handle your request.
• When you sign out, the app removes its copies of your account data from the device. Work that has not reached our servers yet, such as a workout recorded without a connection, stays on the device so that it can be sent when you sign in again.

7.Your rights

You can ask to access, correct, receive a copy of or delete your data, object to or restrict its processing, and, where we rely on your consent, withdraw it at any time. In the app you can edit your profile and measurements and delete your account. For a copy of your data or any other request, email support@rackyapp.com. We reply within 30 days.

You can also complain to a data protection authority: in Türkiye, the Personal Data Protection Authority (KVKK); in the EU, the authority of your country.

8.Children

Racky is for people aged 16 and over. During setup the app asks for your date of birth and does not let anyone under 16 continue. We do not knowingly collect data from children under 16. If you believe a child has created an account, contact us and we will delete it.

9.Security

Data travels encrypted (HTTPS/TLS) and is encrypted at rest by our hosting provider. Our servers allow each user to reach only their own data. Sign-in tokens are kept in your device’s Keychain.

10.Changes to this policy

If we change this policy, we will update the effective date above. If the change is important, we will also tell you in the app.

11.Contact