The short version
- If you don’t create an account, your data never leaves your device. SetWell works fully offline with no sign-in.
- If you sign in to sync, we store your workout data and account email on our cloud provider so it can sync across your devices.
- We show you no ads, and we use no third-party analytics or tracking SDKs.
- We do not sell or share your personal information for advertising.
- You can access, export, or delete your data and account at any time.
1. Who we are (Data Controller)
The data controller responsible for your personal information is:
- Clayton Cranford
- 31441 Santa Margarita Pkwy Ste A-113, Rancho Santa Margarita, CA 92688, United States
- Email: info@setwell.io
- Website: www.setwell.io
2. Information we collect
2.1 Information you provide
- Account information. If you choose to sync, we collect the email address associated with your account. If you sign in with Apple or Google, we receive your email address and, where you permit it, your name, from that provider. If you use Sign in with Apple’s “Hide My Email” feature, we receive only Apple’s private relay address.
- Workout content you create. Exercises, workout templates, logged sessions, and individual sets — including values such as weight, reps, duration, calories, distance, dates and times, and any notes you add.
- App settings and preferences (for example, display and unit preferences) that you choose to sync.
- Photographs you submit for workout import. If you use the workout-scanning feature, the photo you take or select is sent to our servers and on to our AI transcription provider (see Section 4) so the workout written in it can be read. We do not store the photograph. It exists only for the length of that single request, and is never written to our database or file storage. We keep a record that a scan occurred — the account and a timestamp — to enforce usage limits and prevent abuse.
- Communications. If you contact us for support, we receive your message and contact details.
2.2 Information collected automatically
SetWell does not include advertising SDKs, third-party analytics, or cross-app tracking. We do not build advertising profiles and we do not track you across other companies’ apps or websites.
When you use cloud sync, our infrastructure provider (see Section 4) processes limited technical data that is inherent to operating any internet service — such as your IP address and request timestamps — to authenticate requests, enforce rate limits, and protect against abuse. This is used for security and reliability, not advertising.
2.3 Information we do not collect
We do not collect your precise location, your contacts, microphone or audio data, or payment information.
Your camera and photo library. SetWell accesses them only at the moment you choose to scan a workout, and only for the photo you pick or take. We do not browse, index, or read your photo library, and no photo is retained (see Section 2.1).
Apple Health. The Health integration is write-only. If you turn it on, SetWell saves your finished workouts to Apple Health. It never reads any Health or HealthKit data from your device, so no Health data is collected, transmitted, or shared with anyone.
3. How we use your information
- To provide the App’s core features and store the workout data you create.
- To sync your data across your devices when you are signed in.
- To read a workout from a photograph you submit, and turn it into a workout you can edit and save.
- To enforce fair-use limits on workout scanning and protect the service from abuse.
- To authenticate you and keep your account secure.
- To maintain, troubleshoot, and improve the reliability of the service.
- To respond to your support requests.
- To comply with legal obligations and enforce our terms.
4. How your data is stored and who we share it with
We do not sell your personal information and we do not share it with third parties for their own marketing. We use the following service providers (“sub-processors”) strictly to operate the App:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase (database, authentication & hosting) | Stores your synced workout data and account, and manages sign-in | Account email, workout content, technical/security data |
| Apple — Sign in with Apple | Optional authentication | Authentication token, email (or private relay address), optional name |
| Google — Google Sign-In | Optional authentication | Authentication token, email, optional name |
| Anthropic (AI transcription) | Reads the workout written in a photo you submit, only when you use workout scanning | The photograph, and the names of exercises in your library so the workout can be matched to them |
These providers process data on our behalf under their own security and privacy commitments. We may also disclose information if required by law, to protect our rights or users’ safety, or in connection with a business transfer (e.g., a merger or acquisition), subject to this policy.
5. Legal bases for processing (EEA/UK users)
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR/UK GDPR:
- Performance of a contract — to provide the App and cloud sync you request.
- Legitimate interests — to keep the service secure and reliable and to prevent abuse.
- Consent — where required; you may withdraw consent at any time by signing out or deleting your account.
- Legal obligation — where we must retain or disclose data to comply with law.
6. Data retention
We retain your synced data for as long as your account exists. Data you keep only on your device is retained until you delete it or uninstall the App. When you delete your account, we delete or irreversibly anonymize your associated cloud data within 30 days, except where we must retain limited records to comply with legal obligations. Uninstalling the App removes the on-device copy of your data but does not by itself delete data already synced to the cloud — use the account-deletion option described below for that.
Photographs submitted for workout scanning are not retained by us. The image is held only for the duration of the request that reads it and is never stored. Our AI provider may retain submitted content briefly under its own policy for safety and abuse monitoring; it is not used to train models on your data. What we keep is a record that a scan happened — your account and a timestamp — which is deleted along with your account.
7. Your rights and choices
- Use the App without an account. You can decline to sign in; your data then stays on your device only.
- Access and portability. You can view your data in the App and request a copy.
- Correction. You can edit or correct your workout data directly in the App.
- Deletion. You can delete your account and associated cloud data from within the App (Account settings) or by contacting us at info@setwell.io.
- Withdraw consent / sign out. Signing out stops syncing on that device.
Depending on where you live, you may also have the right to object to or restrict certain processing and to lodge a complaint with your local data protection authority. We will not discriminate against you for exercising your rights. To make a request, email info@setwell.io; we may need to verify your identity before responding.
8. Data security
We protect your data using industry-standard measures, including encryption in transit (HTTPS/TLS) and access controls that restrict each account to its own data. No method of transmission or storage is 100% secure, but we work to protect your information and to promptly address any issues.
9. International data transfers
Our providers may process and store data in countries other than the one you live in, including the United States. Where required, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) for these transfers.
10. Children’s privacy
SetWell is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us at info@setwell.io and we will delete it.
11. Your California privacy rights
If you are a California resident, the CCPA/CPRA gives you rights to know, access, delete, and correct your personal information, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information as those terms are defined under California law, and we do not use it for cross-context behavioral advertising. In the preceding 12 months, the categories of personal information we collected are “identifiers” (email) and “internet/electronic activity and user content” (your workout data and related technical data), as described in Section 2. To exercise your rights, contact info@setwell.io.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the App. Your continued use of SetWell after an update means you accept the revised policy.
13. Contact us
If you have questions or requests regarding this policy or your data, contact us at:
Website: www.setwell.io
31441 Santa Margarita Pkwy Ste A-113
Rancho Santa Margarita, CA 92688
United States