Brogression privacy policy

Effective 2026-10-02

Brogression is a strength-training log. It works out your sets, records what you lift, and lets you share your training with a small crew you invite. This policy says what that takes, who can see it, and how to get rid of it.

What we collect, and why

You need an account to use Brogression, because your training lives on our server so it's there on any phone you sign in on, and so your crew can see it. Here's what we keep.

Your account. Your email address, so you can sign in. If you sign in with Google or Apple, they send us your email and, from Google, your name (Google; Apple only if the build forwards it). We use your first name to suggest a display name and don't use the rest. Google also sends a link to your profile picture. It's stored with your sign-in account and never used. Apple may give us a private relay address instead of your real one.

Your profile. Your display name, your units (lb or kg), your equipment (bar, plates, smallest jump, collars), and two settings: whether you're hidden from leaderboards and whether bodyweight tracking is on.

Your training. Your program and its settings, your training maxes and how they changed, every session you log (date, exercises, sets, weights, reps), conditioning work (activity, time, distance, effort), and custom exercises you create. If you import history from another app or a CSV file, the file is read on your phone. We store the sessions it contains, plus the file's name and how many sessions and sets it held. The file itself is never uploaded.

Your notes. Notes you add to a set or a session.

Bodyweight, if you turn it on. Your weight and, if you enter it, your body-fat percentage, with dates.

Crew activity. Crews you create or join, Respect you give, challenges you create (title, rules and an optional link), and attempts you log on them (a number and an optional note).

Blocks and reports. If you block someone, we store that you did until you unblock them or delete your account. If you report someone, we email our support address your account email address, your display name, the reported person's display name and id, your crew's name, the reason and any details you typed, and the content you reported (a name, a challenge or attempt, or a conditioning label). We don't keep reports in the app's database; they live in our support mailbox. Tap the ⋯ menu on a crewmate's feed card, roster name or challenge attempt (or Report on a challenge) to report or block them. Blocking hides you and the other person from each other at once: profiles, sessions, conditioning, custom exercises, the feed, leaderboards, Respect and challenges. In the crew roster, each of you then shows as a "Blocked member". Unblock from the roster or from Brofile → Blocked people. A report is emailed to us and acted on within 24 hours; see the Terms.

Server logs. Our hosting and database providers log requests, including your IP address and device type. We don't use these logs to track you. They exist to keep the service running and to investigate problems.

We use all of this to run the app for you and your crew. We don't use it for anything else.

What your crew can see, and what stays private

Crews are invite-only. Nobody can find you by searching, and there's no public profile.

People in a crew with you can see:

• your display name, units and equipment settings
• whether you've turned on bodyweight tracking and whether you're hidden from leaderboards (never the bodyweight entries themselves)
• your sessions: dates and times, exercises, sets, weights, reps and conditioning
• the plan each session ran from, including the training max it used and your day names
• your PRs and estimated maxes
• your place on the crew leaderboards, unless you hide yourself in Brofile
• the custom exercises you create (name, category, equipment)
• who gave Respect on your sessions (the app shows a count, but crewmates can technically read who gave it)
• challenges and attempts posted in that crew, including attempt notes

Sessions you import don't show in the crew feed or on leaderboards, but they are stored under the same sharing rules as the rest of your training, so don't treat them as hidden from your crew.

Your program settings and training-max history are kept in tables only you can read. But each session carries a snapshot of the plan it ran from, and crewmates can read that snapshot, so they can work out your training maxes from your sessions.

Only you can see:

• your email address
• your set and session notes
• your bodyweight and body-fat log
• your import history
• the list of people you've blocked
• personal challenges you didn't post to a crew

Anyone you give your crew's invite code to can see the crew's name and how many members it has before joining.

What we don't collect

No photos, location, contacts, age, birthdate, phone number, payment details or messages. Brogression has no chat, comments or direct messages.

The Toolbox calculators ask for things like sex, height and tape measurements. Those stay on your phone and are never saved or sent anywhere.

Service providers

We use a few companies to run Brogression. Each gets only what it needs for its job:

• Supabase

  What it does

  Database and sign-in

  What it receives

  Everything listed under "What we collect", and server logs with IP addresses

• Vercel

  What it does

  Hosts the app

  What it receives

  Request logs with IP addresses

• Resend

  What it does

  Sends sign-in, confirmation and password-reset emails, and our report emails

  What it receives

  Your email address and the email's link or code; for a report, the report email described under "What we collect"

• Google

  What it does

  Sign-in, if you choose it

  What it receives

  Handles the sign-in and tells us your email, your name and a profile-picture link

• Apple

  What it does

  Sign-in, if you choose it

  What it receives

  Handles the sign-in and tells us your email and, only if the build forwards it, your name

These providers process data on our behalf. Your data is stored in the United States (Supabase's US East region, in Northern Virginia).

What's kept on your phone

To work with no signal, Brogression keeps a copy of your data on your phone: your profile and email, your program, your crews, your history and charts, your crew's feed and leaderboards, any workout in progress, and finished sessions waiting to sync. It also keeps a sign-in token (a cookie on the web, app storage in the iOS app), which is what keeps you signed in, and remembers which history view you last opened (until you close the app), when you dismissed the install prompt (web only; the iOS app has no install prompt), and an invite code you followed (for 24 hours).

Signing out or deleting your account erases all of it. Sessions that haven't synced yet are erased too; the app warns you first.

No ads, no tracking, no selling

Brogression has no ads, no analytics and no tracking tools. We don't sell your data, share it with advertisers or data brokers, or use your training data for advertising or data mining.

How long we keep it

We keep your data until you delete it or delete your account. Edits and deletions in the app take effect on our server right away.

Server logs are kept briefly and then deleted: 1 day at Supabase and up to 12 hours at Vercel. Resend keeps the emails it sends for us, including sign-in emails, for 30 days. We don't keep backups of the database. Data you delete can stay in those logs and emails until they age out.

Deleting your account

Go to Brofile → Delete account, type DELETE, and confirm. You need a signal for this. It can't be undone.

What's removed:

• your login, email and profile
• your programs, training maxes, sessions, sets, conditioning and notes
• your bodyweight log and import history
• your crew memberships, the Respect you gave and the people you blocked
• challenges you created, along with everyone's attempts on them, and your attempts on other people's challenges
• the copy of your data on this phone

What happens to shared things:

• A crew where you're the last member is deleted.
• A crew you own with other members goes to whoever has been in it longest.
• Crews you created stay with their members, without your name attached.
• Custom exercises that crewmates also logged are handed to those crewmates, so their history keeps working. The exercise name stays; nothing else about you goes with it.

What stays for a while: server logs at Supabase and Vercel and sent emails at Resend, until they age out as described above. That includes Supabase's record of your sign-ins, with your email address and IP address, which is kept for 1 day and not stored in our database.

If you signed in with Apple: deleting your account doesn't yet disconnect Brogression from your Apple Account. You can remove it yourself in your iPhone's Settings, under your Apple Account's Sign in with Apple list.

If you can't sign in and want your account deleted, email team@brogression.app from the address on the account.

Exporting your data

Go to Brofile → Your data.

• Export CSV: every set you've logged.
• Export JSON: your profile, programs, training-max history, sessions with sets and notes, your custom exercises and bodyweight log.

Conditioning, challenges and crews aren't in either export yet. Email team@brogression.app if you need them.

Children

Brogression isn't meant for children under 13, and we don't knowingly collect data from them. If you think a child under 13 has an account, email team@brogression.app and we'll delete it.

Security

Data travels between your phone and our servers over encrypted connections. Database rules decide what each account can read, so your private data is only returned to you and crew data only to your crew. No system is perfectly secure. If we learn of a breach that affects your data, we'll tell you.

Changes

If this policy changes, we'll update it here and change the effective date at the top.

Contact

Questions about this policy or your data? Email team@brogression.app.