Plain-English summary. We collect the minimum needed to run your account: your email, the workout data you log, your progress photos, your subscription status, and basic crash diagnostics. Your data is stored on our own backend, never sold, and there are no ads and no third-party tracking. You can export or permanently delete everything at any time.
01 Introduction
Muscle Training Club ("MTC", "we", "us") operates the MTC mobile application and this website. This policy describes what we collect, how we use it, who we share it with, and the controls you have. By creating an account and using the app you agree to the practices described here.
MTC requires an account to use. When you sign up we create a record on our backend so your workouts, routines and progress photos are saved and available across the devices you sign in on.
02 Data we collect
All of the data below is linked to your account and stored on our backend so the app works across your devices. We do not collect a postal address, a phone number, or your real-world name.
Data you provide
- Email address — used to create and sign in to your account. Authentication is handled by Clerk (see Sharing). We do not offer social / third-party login, so we don't receive data from Google, Apple, Facebook or similar sign-in providers.
- Training data — the workouts, sets, reps, weights, RPE, routines and notes you log.
- Progress photos — if you add progress photos, they are uploaded to and stored in our cloud object storage (Cloudflare R2) under your account, so they sync across your devices. They are not shown to other users.
Data collected automatically
- Stable account identifier — an internal user ID that ties your data together across our systems.
- Purchase history — your subscription status and purchase history (e.g. whether you have an active Pro subscription), managed through RevenueCat. The app stores process the payment itself; we never receive your card details.
- Crash & performance diagnostics — when the app errors or runs slowly, we collect crash reports and basic performance data through Sentry to fix problems. These diagnostic reports include your account identifier so we can investigate an issue you report. They do not include the contents of your training data.
03 How we use it
We use your data only to run the service you asked for and keep it reliable. Specifically, we:
- Provide and maintain the app and your account, and sync your data across your devices.
- Compute trends, estimated 1RM and plateau flags from the workouts you log.
- Verify your subscription so Pro features unlock correctly.
- Provide customer support you request.
- Diagnose crashes and improve performance and security.
04 Legal basis (GDPR)
Where the GDPR or UK GDPR applies, we rely on the following bases: performance of our contract with you (to provide the app and your account), your consent where required (which you may withdraw), our legitimate interests in keeping the service secure and improving it, and compliance with legal obligations.
06 No tracking or ads
MTC does not show advertising and does not track you across other apps or websites. We do not use any advertising SDK, and we do not access or use your device's advertising identifier (Apple's IDFA or Android's Advertising ID). We do not build advertising profiles, and we do not share your data with data brokers or ad networks.
07 Retention
We keep your data for as long as your account is active or as needed to provide the service. When you delete your account, your account record, training data and progress photos are deleted from our systems (your photos are purged from object storage as part of the same deletion), and any residual copies are removed from backups within 30 days, except where we are legally required to retain certain records. See Data Deletion Instructions.
08 Your rights
Depending on your region you may have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. You can export your training data to CSV at any time from Settings → Data → Export Workout Data (CSV), and you can delete your account and data directly in the app (see Data Deletion Instructions). To exercise any other right, email privacy@highness.club.
09 Security
We use encryption in transit (HTTPS) and rely on the encryption-at-rest provided by our infrastructure providers, along with scoped access controls and per-account isolation of your data. No method of transmission or storage is 100% secure, but we work to protect your data using industry-standard safeguards.
10 Children
MTC is not directed to children under 13 (or the minimum age in your region). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
11 Changes to this policy
We may update this policy from time to time. Material changes will be announced in-app and the "last updated" date above will change. Continued use after changes constitutes acceptance.
12 Contact us
Questions about privacy? Reach our data protection contact at privacy@highness.club or via the contact page.