Privacy Policy

1. Who we are

RepFuel is provided by the business below, which is responsible for your personal data (the data controller / "data user").

• Business: ACK Solutions, registration no. 202603248890 (KT0621523-M)
• Address: 56, Kampung Baru, Batu 14, 47100 Puchong, Selangor, Malaysia
• Phone: +60 18-247 5667
• Privacy contact: contact@myrepfuel.com

2. Information we collect

• Account details: your name, email address and a securely hashed version of your password (we never store your actual password).
• Profile and body stats you enter: sex, age, height, weight, optional body-fat percentage and body measurements, activity level, goals, weekly workout goal and unit preferences.
• Fitness and nutrition logs: workouts, sets, routines, custom exercises, notes, food entries, saved foods and weigh-ins, including any history you import from Hevy.
• AI requests: meal descriptions, meal photos, spoken food diaries and coach questions you choose to submit, together with the profile and recent logs the AI needs to answer. Coach conversations are kept on your device, not on our servers; each message is sent to our AI provider to produce the reply. See "How long we keep it" for photos and recordings.
• Subscription details: if you upgrade to Pro, payments are processed by Stripe. We receive your subscription status and a customer reference, never your full card number.
• Notifications: if you turn on rest-timer alerts or reminders, a push-notification address for your device (issued by your browser's push service, or by Apple for the RepFuel iPhone app). If you keep summary and tips emails on, we use your email address and workout totals to send the weekly summary, and new members get two getting-started emails (in their first days; the second mentions how many workouts and food logs they have). One click in any of them unsubscribes.
• Security and service records: a sign-in session cookie; your time zone and last activity date; counts of AI features used and the technical cost of each AI request (to apply plan limits and fair use); a security log of account events such as sign-ins, failed sign-in attempts, password resets, plan changes and account deletion, with the date, time and IP address; and error reports when something breaks (the page and technical details, not your logs).
• Website analytics (only if you accept, and only on our public pages): with your consent, Google Analytics records visits to our public pages (home, programs, legal and sign-up pages): pages visited (without any codes in the address), device and browser type, approximate location (country/city), and whether you signed up. It is switched off inside the signed-in app, so it never sees your workouts, food logs or other activity, or your name, email or body stats.
• Invites: your invite code, who joined with it, when, and whether the invite earned free Pro. A friend who opens your link sees your first name; you see their first name and their starter-quest progress (active days). To stop people inviting themselves, we compare a new account's email (with aliases removed) to existing accounts, keep a random device identifier in your browser (stored by us only as a one-way hash), and check whether a new account signs up from the same network address as the inviter's recent sign-ins.
• Feedback you send us: your message, an optional screenshot, the app page you were on, and your app version and device or browser type, linked to your account so we can reply and fix the problem.
• Consent records: what you agreed to (Terms, Privacy Policy and health-data consent), the version of the wording and policies, and when you gave or withdrew it.

3. How we use it

• To provide the app: calculating your targets, storing your logs, showing progress, streaks and projections.
• To provide AI features: estimating nutrition from your meals, turning what you say into food entries, answering coach questions and turning coach plans into routines, using your profile and recent logs.
• To send what you've asked for: rest alerts, training reminders and the weekly summary (you can turn each off in Profile → Settings).
• To keep accounts safe and the service working: preventing abuse and automated sign-ups, investigating suspicious sign-ins, fixing errors, applying plan limits and fair use, and providing support.

We do not use your data for advertising and we do not sell or rent it to anyone.

4. Service providers

We use a small number of trusted providers to run RepFuel. They process data on our behalf and for these purposes:

• Cloudflare: hosting, database, network security, sending account emails, the bot check on sign-up and sign-in (Turnstile), transcribing voice recordings into text (Workers AI), and cookie-free visitor statistics (Web Analytics: page views and performance, without identifying you).
• Anthropic (Claude): AI processing of meal descriptions, meal photos, transcribed food diaries and coach questions. Under Anthropic's commercial terms, this data is not used to train their models.
• Stripe: payment processing for Pro subscriptions.
• Push services (Apple, Google or Mozilla, depending on your device): delivering notifications you've turned on.
• Google Analytics: statistics about visits to our public pages, only if you accept analytics cookies (never inside the app).
• USDA FoodData Central and Open Food Facts: food search and barcode lookups. Only the search words or barcode are sent, never your account details.

5. Where your data is processed

Some of our providers process your information outside Malaysia:

• Cloudflare (hosting, database, emails, voice transcription): its global network, so data may be handled in the data centre nearest you and stored in another country.
• Anthropic (AI features): the United States.
• Stripe (payments) and Google Analytics (public-page statistics, only if you accept): the United States and other countries where they operate.
• Push services (Apple, Google or Mozilla): wherever your device's push service runs.

Health information (body stats, measurements, food and workout logs) is stored and processed abroad only with your explicit consent, which names processing outside Malaysia and which we record with its wording and date. The app asks anyone who agreed to an earlier wording before saving anything new. Account and security data (your name, email, password hash, sign-in and security records) is transferred because it's necessary to provide the account you asked for. Website analytics is transferred only if you accept analytics cookies; we record which wording you saw and when. Our main providers (Cloudflare, Anthropic, Stripe and Google) process personal data under their data-processing terms, which limit how they may use it and require security measures. Push services deliver notifications under their own platform terms, and the food databases receive no personal data. Laws abroad may differ from Malaysia's. You can stop AI processing, or withdraw consent, at any time (see "Health information").

6. Cookies and storage on your device

We use one essential cookie to keep you signed in. The app also keeps some data on your device so it works smoothly and offline: an in-progress workout, changes you made without a connection (sent automatically when you're back online), your routines, coach chat history, cached copies of your recent data and display preferences. Signing out removes your personal data from the device; changes that haven't synced yet are lost if you sign out or clear your browser data before they're sent. If you accept analytics cookies, Google Analytics sets cookies to measure how RepFuel is used. They're off until you choose, and you can change your choice anytime with “Cookie settings” in the site footer or on your Profile page. We do not use advertising cookies.

7. Health information

Body stats, measurements and food and workout logs are health information, which is sensitive personal data. We process it only with your explicit consent, which you give separately when you sign up, and only to provide the service to you. You choose what to enter. You don't need to delete your account to change your mind. In Profile → Your data → Privacy and consent you can:

• Turn off AI features: nothing more is sent to our AI provider. AI food estimates, the coach, coach-built routines and AI progress reports stop; everything else keeps working.
• Withdraw health-data consent: straight away, we stop saving new workouts, food, weigh-ins and body stats, AI features stop, and reminders and the weekly summary stop using your history. For 30 days you can still view and download what's stored, or give consent again; after that, your workouts, food logs, weigh-ins, measurements and body stats are deleted automatically. Your account, routines and saved foods and exercises stay, so you can start again later.

To stop any other use, or if you can't use the app, email contact@myrepfuel.com. We'll acknowledge your email within 2 working days, stop the processing it covers as soon as we've confirmed the request comes from you (unless the law permits or requires us to continue it), and tell you when that's done and what, if anything, will be deleted and when. Withdrawal does not undo processing that already took place. RepFuel is not a medical service and does not provide medical advice.

8. How long we keep it

• Your account, profile and logs: until you delete them or your account. If you withdraw health-data consent, your workouts, food logs, weigh-ins, measurements and body stats are deleted 30 days later unless you give consent again.
• Meal photos and voice recordings: we don't store them. They're sent to our providers only to produce your result: Cloudflare transcribes recordings, and Anthropic analyses photos and text. Anthropic may keep API inputs and outputs for up to 30 days under its own policy (longer only where needed to investigate abuse or meet legal requirements), and doesn't use them to train its models.
• Website analytics (only if you accepted analytics cookies): Google Analytics keeps visit details for 14 months, then deletes them; only summarised totals are kept after that.
• Security log: 12 months, then deleted automatically.
• Error reports: deleted 30 days after the error last happened.
• AI cost records (date, feature and cost of each AI request, no content): 7 years, as accounting and tax records, then deleted automatically.
• Feedback: until it has been dealt with and is no longer needed, and never longer than your account; deleted with your account.
• Consent records: while your account exists; after deletion, kept without anything that identifies you. Analytics-cookie choices are recorded with a random ID only (no account or IP address).
• Payment records: Stripe keeps the records of any payments for as long as financial and tax laws require.

Deleting your account (Profile → Your data) immediately removes your account, profile, logs, routines, custom exercises and foods, and notification registrations. What remains has nothing that identifies you: security-log events and AI cost records are kept only as anonymous counts (your account ID and IP addresses are removed), and error reports lose any link to you. Stripe's payment records are kept by Stripe as described above. You can also delete individual workouts, food entries and weigh-ins at any time, or email contact@myrepfuel.com and we'll act on your request within 30 days.

Some copies take longer to disappear: our database provider keeps recovery backups for up to 30 days, after which deleted data is gone from them too; and data already sent to a provider (for example, AI requests kept by Anthropic for up to 30 days) is deleted on that provider's schedule described above. We don't restore deleted data from backups except to recover from a technical failure.

9. Security and data breaches

Data is encrypted in transit (HTTPS). Passwords are hashed with PBKDF2, sign-ins are rate-limited and protected against automated attacks, and access to production data is restricted. No system is perfectly secure, so please use a strong, unique password. If a personal data breach happens that is likely to affect you, we'll investigate it, notify the authorities where the law requires, and tell you without undue delay what happened and what you can do.

10. Age

RepFuel is for people aged 18 and over, and we do not knowingly collect personal data from anyone younger. If you believe someone under the minimum age has an account, contact us and we'll delete it.

11. Your rights and choices

• Access and portability: download your workouts and body data any time in Profile → Your data, or ask us for a copy of everything we hold.
• Correction: edit your profile and logs in the app, or ask us.
• Deletion: delete entries or your whole account in the app, or ask us.
• Withdraw consent or limit processing: turn off AI features or withdraw health-data consent in Profile → Your data → Privacy and consent; turn off analytics, notifications or the weekly email in the app; or email contact@myrepfuel.com to stop any other use. See "Health information" for what stops working.

Contact contact@myrepfuel.com for anything you can't do in the app; we'll respond within 30 days. Providing your name, email and password is required to have an account; everything else is optional, though some features need it (for example, targets need your body stats).

Malaysia: if you're in Malaysia, we process your personal data in line with the Personal Data Protection Act 2010 (as amended), for the purposes described above. You may request access to, correction of, or a copy of your personal data, and limit its processing, by contacting us.

12. Changes to this policy

If we make significant changes to this policy we'll update the date above and let you know in the app or by email. If a change needs your consent (for example, a new use of your health information), we'll ask for it in the app and won't treat you as having agreed until you do. We keep a record of each version you agreed to.