Legal

Privacy Policy

Effective date: March 15, 2026 · Last updated: May 18, 2026

Contents

Who We Are
Information We Collect
How We Use Your Data
Data Storage & Security
Data Sharing
Your Rights
Data Retention & Deletion
Children's Privacy
Changes to This Policy
Contact

01 Who We Are

ShaRPE ("we", "our", or "us") is an independent fitness tracking application developed and operated by an individual developer. ShaRPE is accessible at sharpeapp.com and related domains.

This Privacy Policy explains how we collect, use, and protect your personal information when you use the ShaRPE application.

02 Information We Collect

We collect only what is necessary to provide the service. We do not collect data beyond what is listed below.

Account Information (via Google Sign-In)

Your Google account display name
Your Google account email address
Your Google account unique identifier (UID)

Workout Data (user-generated)

Exercise names, sets, reps, weights, and RPE values you enter
Workout dates and session notes
Custom exercises and training routines you create
Personal records and training preferences

App Preferences

Display settings (theme, unit preference)
Sync timestamps for conflict resolution

      We do not collect location data, biometric data, payment information, device identifiers, or usage analytics beyond what Firebase provides for basic app functionality.
    

03 How We Use Your Data

Your data is used exclusively for the following purposes:

Authenticating your identity and securing your account
Storing and synchronizing your workout history across devices
Calculating e1RM estimates, RPE progressions, and training statistics
Restoring your data when switching devices or reinstalling the app
Displaying your name within the app interface

We do not use your data for advertising, profiling, or any purpose other than operating the core application features.

Legal Basis for Processing

      We process your personal data under the following legal bases: (a) Contract performance — processing is necessary to provide you with the ShaRPE service you signed up for; (b) Legitimate interests — to maintain app reliability, prevent abuse, and ensure security; (c) Legal obligation — where required by applicable law. For users in Turkey, processing is carried out in accordance with the Law on Protection of Personal Data (KVKK No. 6698).
    

04 Data Storage & Security

Your data is stored in two places:

On your device — via IndexedDB for offline access and performance
In the cloud — via Google Firebase Firestore, secured to your account

All cloud data is protected by Firebase Security Rules, ensuring only you can read or write your own data. Authentication is handled by Google Firebase Auth with App Check enabled to prevent unauthorized API access.

Data in transit is encrypted via HTTPS/TLS. We do not have access to your Google account password.

05 Data Sharing

We do not sell, rent, or share your personal data with third parties for commercial purposes.

We use the following third-party services to operate the application:

Google Firebase — Authentication, database, and hosting (Google LLC, USA)
Google reCAPTCHA — Bot protection and App Check verification (Google LLC, USA)

Google Firebase is governed by Google's Privacy Policy. Google reCAPTCHA is governed by the Google Cloud Data Processing Addendum — effective April 2, 2026, Google acts as a data processor for reCAPTCHA data collected on this site.

We may disclose data if required by law or to protect the rights, property, or safety of users.

International Data Transfers

Your data is transferred to and processed in the United States via Google Firebase infrastructure. This transfer is carried out under Google's Standard Contractual Clauses (SCCs) and the Google Cloud Data Processing Addendum, which provide appropriate safeguards for your personal data. For users in Turkey, this transfer is conducted in accordance with Article 9 of KVKK, based on the explicit consent given at sign-in and Google's binding adequacy commitments.

06 Your Rights

Regardless of your location, you have the following rights over your data:

Access — Export all your workout data directly from the app (Settings → Export)
Correction — Edit any workout entry at any time within the app
Deletion — Delete your entire account and all associated data from Settings → Delete Account. This action is immediate and irreversible
Portability — Export your data in JSON format at any time

For users in the European Economic Area (EEA), you additionally have rights under the GDPR including the right to lodge a complaint with your local supervisory authority.

07 Data Retention & Deletion

Your data is retained for as long as your account is active. When you delete your account via Settings → Delete Account:

All workout data is permanently deleted from Firestore
All settings and preferences are permanently deleted
Local data on your device is cleared
Your Google Sign-In association is removed

Deletion is processed immediately and cannot be undone. We do not retain backups of deleted accounts.

08 Children's Privacy

ShaRPE is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.

09 Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via a notice within the application. The "last updated" date at the top of this page will always reflect the most recent revision.

Continued use of ShaRPE after changes are posted constitutes your acceptance of the updated policy.

10 Contact

For any privacy-related questions, requests, or concerns, please contact us at:

ShaRPE
Email: support@sharpeapp.com
Website: www.sharpeapp.com

We aim to respond to all privacy inquiries within 30 days.