Skip to content

Legal

Privacy Policy

💪
SIGMA
💪
GAINS

Effective Date: October 5, 2026

Last Updated: October 15, 2026

This policy explains what information SigmaGains ("we", "us") collects when you use the SigmaGains app and website (the "Service"), how we use it, and the choices you have. We collect only what we need to run the Service.

1. Information We Collect

  • Account Info: If you sign in with Apple or Google, your name, email address (Apple may give us a private relay address), and profile picture. We never see your password. A guest account has no name or email; it is identified only by a random ID stored on your device.
  • Workout Data: The workouts, exercises, sets, reps, weights, and notes you log.
  • Usage and Device Data: Pages viewed, which buttons and screens you use (the element, not its text), which features you use (for example that you started or finished a workout, how long it lasted, or that you logged a set and which kind, never the exercise, weight, reps or notes), how responsive the app was, device and browser type, whether you use the website or the iOS or Android app, app build, and IP address (which can indicate your approximate location), collected by our servers and by PostHog (analytics). These events are tagged with your account ID so we can follow up on a bug you report. We never send PostHog your name, your email address, or your workout content.
  • Crash Reports: When the app hits an error, PostHog receives the error message, the code location (stack trace), the page it happened on, the app build, and your account ID. Email addresses are removed from error text before it is sent. Our servers report their own errors to Sentry, tagged with your account ID only.
  • Session Recordings: PostHog records how you move through the app (taps, scrolling, which screens you open, and how long each step took) so we can see what went wrong when something breaks. All text on screen and everything you type is masked before it leaves your device: we can see that text was there, not what it said. The contents and headers of requests to our servers are never recorded, and sign-in codes or tokens in a link are replaced with the word "redacted". You can turn recording off in Settings → Privacy → Session Recording; it stops at once and stays off on that device. It is on unless you turn it off.
  • Feedback: When you send feedback from the app, we receive your message with the app version, device type, the screen you sent it from, and your account ID (never your email). It is delivered to a private channel on our Discord server that only the SigmaGains team can read.
  • On Your Device: Your sign-in tokens, settings, and a cached copy of your data are stored locally so the app is fast and works offline. Rest-timer notifications and Live Activities are created on your device and are optional.

We do not collect your contacts, photos, precise location, or data from Apple Health or Google Health Connect, and we do not use advertising cookies or trackers.

2. How We Use Your Information

  • To sign you in and to store, sync, and show your workouts and progress
  • To fix bugs, keep the Service reliable, and prevent abuse
  • To understand which features are used so we can improve them
  • To respond when you contact us

We do not sell your personal information, show ads, share your data for advertising, or track you across other companies' apps and websites. Where the GDPR or UK GDPR applies, we rely on performing our contract with you (running the Service) and our legitimate interests (security, reliability, and improving the Service).

3. Sharing Your Information

We share data only with service providers that process it on our behalf to run SigmaGains:

  • Apple and Google (sign-in)
  • Amazon Web Services and Turso (hosting and database, United States)
  • PostHog (product analytics, crash reports, and session recordings in the app)
  • Sentry (error monitoring for our servers)
  • Discord (delivers feedback you send from the app to our team's private channel)

We may also disclose information if required by law, to protect the safety and rights of our users or others, or as part of a merger or sale of the Service, in which case this policy will continue to apply to your data. Links to third-party sites, such as our Discord community, are governed by their own policies.

4. Retention and Deletion

  • We keep your account and workout data until you delete it.
  • Profile → "Delete account" (or "Delete guest data") permanently deletes your account and workout data from our database right away. It also asks PostHog to delete the analytics events, crash reports, and session recordings tagged with your account ID (and with the guest ID you used before signing in, if you moved guest workouts into your account). If you can no longer sign in, Delete My Data explains how to ask us to delete it.
  • Guest accounts that are not used for 13 months are deleted automatically.
  • Copies in server logs, backups, and error reports are removed on their normal schedules, within 90 days. PostHog processes deletions in batches, so analytics data can take a few weeks to disappear from its systems after you delete your account. Until then, and for as long as you keep your account, PostHog keeps it on its own retention schedule (recordings for a shorter period than events); you can ask us to delete it at any time.

5. Security

Data is encrypted in transit (HTTPS) and access to our systems is restricted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

6. Your Rights

Depending on where you live (for example under Canada's PIPEDA, the GDPR, or U.S. state laws such as the CCPA), you may have the right to:

  • Access or get a copy of your personal information
  • Correct it
  • Delete it (anytime, in the app)
  • Object to or restrict certain processing, or withdraw consent
  • Complain to your local privacy regulator

To make a request, contact us on our Discord server(opens outside the app). We respond within 30 days and will not treat you differently for exercising your rights. You can turn off notifications anytime in your device settings, turn off session recordings in Settings, and stop analytics entirely by enabling your browser's Do Not Track signal, which the app honours for both events and recordings.

7. Children

SigmaGains is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect their personal information; if we learn we have, we will delete it. Parents can contact us to request deletion.

8. International Transfers

SigmaGains is operated from Canada, and our providers store and process data in the United States and other countries. Privacy laws there may differ from those where you live; where required, we rely on safeguards such as standard contractual clauses for these transfers.

9. Changes to This Policy

We will post any changes on this page and update the date above. If a change is significant, we will also notify you in the app before it takes effect.

10. Contact Us

For questions or privacy requests, contact us on our Discord server. Please do not post personal details in a public channel; we will follow up in a direct message.

discord.gg/upvPusXVFE(opens outside the app)

Back