Draft. Not yet reviewed, and not yet in effect.

Privacy policy

Version 2026-10-18. Effective date: to be set at launch.

Wayted is a workout tracker made by Ham Digital LLC ("we"), which is responsible for your data under this policy. It says what we hold about you, why, who else handles it, how long we keep it, and how to get it back or have it deleted.

Residents of Washington State and other places with consumer health data laws: our Consumer health data policy covers that data specifically.

What we hold

• Your account: the email address, name and profile picture address that Apple, Google or Microsoft give us when you sign in. With Apple you can hide your email, and we then only ever see the forwarding address Apple gives us. With Apple we also keep a token Apple issues, used only to tell Apple to end the link between your Apple ID and Wayted when you delete your account. We never see or store a password.
• Your training: workouts, sets, weights, reps, times, routines, notes and custom exercises you create.
• Your settings: units, language, theme and rest-timer preferences.
• Friends: who you've added, and requests you've sent or received.
• Support requests you send us from the app.
• Notifications: if you allow them, an address for each of your devices that Apple's push service issues, and the language the app is showing on it, so we can tell you about friend requests, friends' workouts and replies to your support requests in your language. Each kind can be turned off in the app, and signing out of a device stops it receiving them.
• Crash reports: when the app fails, a technical report of what went wrong, tagged with your account's ID, email address and name so we can tell who it happened to. They never include your training data.

We do not hold body measurements, bodyweight, heart rate or any other data about your body. We record the weight you lift, not the weight you are. We don't read from Apple Health or any other health service.

If you turn on Apple Health in the app, the workouts you log in Wayted on that account, past and future, are written to Apple Health on the phone (not ones imported from other apps): that each was strength training, when it started and ended, and an estimate of the active calories it burned. To make that estimate the app asks for your body weight, and keeps it only on that phone: it is never sent to us or anyone else, and signing out deletes it. That is all it writes, and Wayted never reads anything back. What is in Apple Health stays on your phone and with Apple, under Apple's controls, and not with us. You can turn it off in the app, or in the Health app, at any time. Deleting your data or your account in Wayted leaves those workouts in Apple Health unless you choose to remove them too.

Why we hold it

To run the app: to keep your training on your devices in step, to show you your progress, and to show friends you've accepted the training you've chosen to share. We don't sell your data, use it for advertising, or share it with anybody for their own purposes.

Where the law asks us to name a legal basis for each use (in the EU and the UK, for example):

• To provide the service you asked for: your account, training, settings, friends and support requests.
• Our legitimate interest in a working, safe service: crash reports, and records kept to stop abuse.
• Your consent: notifications, which you can turn off in the app or in your phone's settings at any time.

Who can see it

You, on your own devices. Friends you've accepted can see your name, picture and training. Anyone with a link to your profile can see your name, and nothing else.

Who handles it for us

• Supabase: the database and sign-in service that store your account and training.
• Cloudflare: hosts this website and the exercise photographs.
• Sentry: receives crash reports, tagged with your account's ID but not your email address or name. Email addresses, request contents and cookies are removed from a report before it leaves your phone.
• Expo: delivers notifications to your devices through Apple, carrying the notification's text, such as a friend's name.
• Apple, Google and Microsoft: confirm who you are when you sign in.
• Apple: distributes the app and takes payment for Wayted Pro. We never see your card details.
• RevenueCat: keeps track of which purchases unlock Wayted Pro, using an identifier for your account and the receipts Apple provides. It does not receive your name, email address or training.

Your account and training are stored in the United States, and crash reports, notifications and purchase records pass through it too, and the website is served from wherever Cloudflare is nearest to you. Where data leaves the EU or the UK, it goes under the safeguards those services offer for it, such as the European Commission's standard contractual clauses.

How long we keep it

Until you delete your account. Crash reports are kept for up to 90 days. Our database backups keep a copy of deleted data for up to 7 days before it is gone from them too. Deleting your account removes your training, your name and picture, your friends, your settings and the support conversations you started, permanently, from our servers and from your friends' phones.

Two things are kept. The email address you signed in with and the link to your Apple, Google or Microsoft sign-in stay, with nothing else attached, so that signing in again starts a fresh account in the same place and an account suspended for abuse cannot be undone by deleting it. And a report somebody else made about you, or a reply you wrote in somebody else's support conversation, stays part of their record.

Your rights

• See and take your data: export everything as a spreadsheet from Account in the app.
• Correct it: edit any workout or setting in the app.
• Delete it: in the app under Account, or on our account deletion page.
• Object or withdraw consent: turn notifications off, or ask us to stop any use based on our legitimate interests.
• Complain: if you're in the EU or the UK, to your country's data protection authority. We'd like the chance to put it right first.

For anything you can't do in the app, contact us below and we'll answer within 30 days.

Children

Wayted isn't for children under 13, or under 16 in the EU and the UK, and we don't knowingly hold their data. If you think a child has an account, contact us and we'll delete it.

Contact

Ham Digital LLC, a Pennsylvania limited liability company. Email support@wayted.app, or use Account → Contact us in the app.