Legal

Privacy Policy

Effective Date: May 10, 2026 · Last Updated: June 15, 2026

This Privacy Policy describes how Woddie ("we," "us," or "our") collects, uses, and shares information about you when you use the Woddie app and related services (the "Service"), available at woddie.info. By using the Service, you agree to the collection and use of information in accordance with this policy.

01

Information We Collect

We collect the following categories of information:

  • Account information: your email address and password (stored as a secure hash) when you register.
  • Workout photos: images of gym whiteboards you upload so our AI can parse them into structured workout templates. These images are processed to extract workout details and are not used for any other purpose.
  • Performance data: workout logs you submit, including weights, repetitions, times, heart rate, calorie summaries, and other metrics you choose to record against a workout template.
  • Optional profile data: gender and age, if you choose to provide them during onboarding.
  • Cycle tracking data (optional, opt-in only): if you enable cycle tracking, we collect period start and end dates, cycle length, and daily logs including energy level and symptom notes. This data is encrypted at rest — see Section 04.
  • Third-party integration data: if you connect Strava, we store OAuth access credentials to retrieve your workout activity data on your behalf. If you enable Apple Health on iOS, workout activity, heart rate, and calorie data is read on-device; heart rate and calorie summaries may be stored alongside your matched workout results.
  • Basic technical information: server logs, device type, and usage statistics necessary to operate and improve the Service.
02

How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, operate, and maintain the Service, including parsing whiteboard photos into workout templates using AI
  • To store and display your personal workout history and performance data
  • To improve, personalize, and expand the Service
  • To communicate with you, including responding to inquiries and sending important notices
  • To comply with legal obligations and enforce our policies

We do not use your data to serve advertisements.

03

Sharing Your Information

We do not sell, trade, or rent your personal information to third parties.

We use third-party AI services solely to process whiteboard images you submit. These services receive image data only for the purpose of parsing workout content and are contractually prohibited from using it for any other purpose.

If you connect a third-party integration such as Strava, we retrieve activity data from their API on your behalf using OAuth credentials you authorize. Strava's own privacy policy governs how they handle your data independently of Woddie.

We may share aggregate, anonymized data that does not identify any individual for analytical or business purposes.

We may disclose information if required by law, court order, or to protect the rights, property, or safety of Woddie, our users, or others.

04

Apple Health (HealthKit)

If you enable Apple Health on iOS, Woddie reads workout heart rate and active energy (calorie) data from HealthKit to enrich the sessions you log. This data is read on your device.

Our use of Apple Health data is strictly limited:

  • We use it solely to display and enrich your own workout results inside the app.
  • We never use Apple Health data for advertising or marketing.
  • We never sell, rent, or share your Apple Health data with third parties, and we never use it for data mining.
  • Apple Health data is not stored in iCloud. Heart rate and calorie summaries that we match to a workout may be stored alongside that result in your account, as described in Section 01.

You can revoke Woddie's access to Apple Health at any time from the iOS Settings app, under Privacy & Security → Health.

05

Data Security

We implement appropriate technical and organizational security measures to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include:

  • Encryption of data in transit using TLS/SSL protocols
  • Secure storage with access controls and authentication
  • Password hashing — we never store your password in plain text
  • Cycle tracking data is encrypted at rest using AES-256-GCM with a unique per-user key derived from a server-side master key — cycle data stored in our database cannot be read without the key specific to your account

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

06

Data Retention and Account Deletion

We retain your account and performance data for as long as your account is active or as necessary to provide the Service. Workout photos are processed and may be deleted once the corresponding template has been created. When information is no longer needed, we securely delete or anonymize it.

How to Delete Your Account

You can delete your account and all associated data at any time using one of the following methods:

  • In-app: Open the Woddie app, go to Account Settings, scroll to the bottom, and tap Delete Account. Your account and all data will be permanently deleted immediately.
  • Email: Contact us at support@woddie.info with your email address and a request to delete your account. We will process your request within 30 days.

Upon deletion: All personal information, workout data, cycle tracking data, profile data, and associated records are permanently removed from our servers. This action cannot be undone.

07

Children's Privacy

Our Service is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@woddie.info. We will take steps to remove such information from our servers.

08

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within a reasonable time frame.

09

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes are effective when they are posted on this page.