← Back to prtty

Privacy Policy

Last updated: March 17, 2026

The short version

We collect only what's needed to run prtty. We don't sell your data. We don't use tracking cookies. We don't run third-party analytics. Your workout data is yours.

What we collect

Account information

Email address, username, and a hashed password. We never store your password in plain text.

Workout data

Exercises, sets, reps, weights, RPE, notes, body measurements, workout plans, programs, and WOD scores — everything you log in the app.

Media

Photos or videos you upload to your workouts (form checks, progress pics, etc.).

What we don't collect

  • No tracking cookies or third-party analytics.
  • No location data.
  • No device fingerprinting.
  • No advertising identifiers.

Cookies

We use a single authentication token (JWT) stored in your browser's local storage to keep you logged in. That's it. No tracking cookies, no analytics cookies, no cookie banners.

How we store your data

Your data is stored in a PostgreSQL database with encrypted connections. All traffic is served over HTTPS/TLS. Database backups are performed regularly.

Who can see your data

  • Your workout data is private by default. Only you can see it.
  • If you use Garage Mode (live sessions) or Crews, participants in those sessions can see shared workout activity.
  • If you use the sharing feature, anyone with the link can view what you explicitly share.
  • We don't sell, rent, or share your personal data with third parties.

Data retention

We keep your data for as long as you have an account. If you delete your account, we delete your data. Backups containing your data may persist for up to 30 days after deletion.

Your rights

You can:

  • Export all your data at any time (CSV or JSON) from the app.
  • Delete your account and all associated data.
  • Correct your information by editing your profile.
  • Request a copy of all data we hold about you.

These rights apply regardless of where you live. We aim to meet or exceed the requirements of PIPEDA (Canada), GDPR (EU), and CCPA (California).

Children

prtty is not intended for users under 16. We don't knowingly collect data from anyone under 16. If we learn we have, we'll delete it promptly.

Changes to this policy

If we make significant changes, we'll notify you through the app or by email. Minor clarifications may be made without notice.

Contact

Questions or requests about your data? Email us at [email protected]