Privacy Policy
Last updated: 6 September 2026
StrengthOS is a training-log app. This policy explains what data StrengthOS handles. The short version: what you log stays on your device. StrengthOS has an account so it can keep you signed in; it does not upload your log, and it contains no advertising and no cross-app or cross-site tracking. It does use one analytics service, PostHog, described below.
What StrengthOS stores on your device
StrengthOS stores the workouts you log, your routines, your records and estimated maxes, and your app preferences. All of it is written to the app's own storage on your device, and none of it is uploaded. Signing in does not sync it; two people signing in on one device still share one log.
Your account
StrengthOS requires an account, created with Sign in with Apple or Sign in with Google. Either way the provider gives us two things: an identifier that stands for you within our apps, and an email address — your real one or, with Apple's Hide My Email, a private relay address Apple manages. We never see your Apple or Google password. Accounts made with different providers are joined only when their verified email addresses match; otherwise they are separate accounts.
On our server we store that identifier, that email address, and session records — which app you signed in to, an identifier for the device, and timestamps — so you stay signed in and can see and revoke your sessions. That is the complete list; your log is not on it.
What we do not do
- We do not receive, store or transmit what you log in the app.
- We do not sell, rent or share your data with anyone.
- We do not track you across other companies' apps or websites, build an advertising profile of you, or serve advertising.
- We use two third-party SDKs that receive data: PostHog, limited to the events listed under “Product analytics” above, and Firebase Crashlytics, which receives the crash reports described there. We do not use an advertising SDK.
Product analytics
StrengthOS uses PostHog for product analytics. It records how the app is used so we can find what is broken and what is confusing. It is deliberately narrow, and this list is exhaustive:
- Screen views — the name of the screen you opened, e.g. "today" or "settings".
- Sign-in outcomes — that a sign-in succeeded or failed, and which provider (Apple or Google) was used. Cancelling a sign-in sheet records nothing.
- Error reports — the type of an error and where in the app it happened.
- Crash reports — if the app crashes, the technical report of where it stopped: the stack, your device model and its iOS version. No part of your data is in it.
- Every event carries the app's name, so events from StrengthOS can be told from those of our other apps.
What analytics never receives: your lifts, loads, reps, training history, body measurements, or any answer you gave during setup. Those values are not sent to PostHog by any code path in the app.
These events are not linked to you. The app never sends your user id, your email address or your name to PostHog, and never asks it to build a profile of you. PostHog does receive the technical information any network request carries, including your IP address, and it acts as our processor under our instructions. It does not sell your data or use it for advertising, and we do not combine these events with data from other companies' apps or websites.
Deleting your data
To delete your account, email resources@thetinyapp.com and we will remove the account, its email and every session from our server within 30 days; existing sign-ins stop working once that is done. What is stored on your device goes when you delete the app.
If your device backs up to iCloud, your StrengthOS data may be included in that backup. That backup is between you and Apple under Apple's terms; we have no access to it.
Children
StrengthOS is not directed at children under 13, and we do not knowingly collect data from them.
Changes
If this policy changes, the date at the top of this page changes with it. If StrengthOS ever gains a feature that sends your log anywhere, this policy will say so plainly before that feature ships.
Contact
Questions about this policy, or a deletion request you would rather make by email? Write to resources@thetinyapp.com.