Steel Log Privacy Policy

Last updated: August 6, 2026

Steel Log ("we," "our," "the app") is a workout tracking app with an optional community. This policy explains what information we collect, why, and how it's handled.

Information stored only on your device

Progress photos - stored only on your device and never uploaded, including when you have an account.
Everything, if you use Steel Log without an account - for guests, all workouts, routines, measurements, and records stay on your iPhone and are never sent to our servers.

Information we collect

Account information - your email address; your name if you sign in with Apple and choose to share it; the display name, username, and bio you set on your profile; and your profile picture if you choose to add one.
Training data (signed-in users) - the workouts, routines, folders, labels, and custom exercises you log are synced privately to your account so they're backed up and available if you reinstall or switch devices. This data is visible only to you unless you explicitly share a workout to the community.
Body measurements (signed-in users) - your weight log and any other measurements you track sync privately to your account the same way. They are never shared to the community.
Apple Health (optional) - if you connect Apple Health in Settings, Steel Log reads the heart rate and active calories recorded during your workout (typically by an Apple Watch) and attaches the average/max heart rate and calories to that workout in your history, where they sync privately like any other workout detail. The full heart-rate series is read only on demand to draw the chart on a workout's detail screen and is never stored. Cardio fitness figures recorded by your Apple Watch - your VO₂ max estimate and cardio recovery - are read from Apple Health the same way: they are shown to you inside the app and are never stored on our servers or uploaded anywhere. With your permission, finished workouts are also written back to Apple Health so they count toward your Activity rings. You can disconnect Apple Health at any time in Settings.
Shared workouts (optional) - if you choose to share a workout to the community, that workout's summary (title, date, duration, volume, sets, exercises, and any note you attach) is shown to other users according to the visibility you pick (everyone, or your followers). Sharing is always your choice, workout by workout.
Group challenges (optional) - if you join a group challenge, your display name and your progress number for that challenge are visible to the other members of that challenge while it runs.
Public challenges (optional) - a public challenge's leaderboard shows your rank, display name, @username, profile picture and total to every signed-in Steel Log user, including people who have not joined it: a public challenge can be opened from Discover and its standings read by anyone signed in. Making your account private does not hide you there - your display name, @username and picture appear like everyone else's, and the app tells you so when you join. Your total then updates automatically for as long as the challenge runs; joining is the only point at which you are asked. That total is calculated from the workouts you log rather than from anything you have posted, so workouts you keep private still count toward it - but only the total is shown, never your exercise names, your individual workouts, or their dates.
How you join a challenge - joining either kind is always your own action. Nobody can add you: an invitation creates a request that does nothing until you accept it, and ignoring it is enough to decline. A challenge's visibility is fixed when it is created, so a group challenge you joined cannot later be turned into a public one.
Published routines (optional) - if you publish a routine to the public catalog, that routine and the profile it's published under become publicly visible to other users browsing the catalog. Your routines are private until you publish them, and you can unpublish a routine at any time.
Invite links (optional) - if you create an invite link, it opens a public web page that shows your @username to anyone who has the link. Invite pages are not indexed by us, but anyone the link is forwarded to can open it. You choose whether to create and share a link.
Community activity - comments, likes, follows and follow requests, blocks, mutes, and reports you make are stored so the community works.
Purchase information - subscription status and transaction history for Steel Log Pro, handled by Apple and our subscription platform RevenueCat.

What other users can see

Your profile (display name, username, bio) and anything you post are visible to other users according to your choices: public posts are visible to everyone in the community; followers-only posts are visible to approved followers. Members of a group challenge you join can see your display name and your progress in that challenge, and a public challenge's leaderboard shows your rank, display name, @username, profile picture and total to every signed-in Steel Log user, whether or not they have joined it. Routines you publish to the public catalog are visible to everyone, and an invite link you create shows your @username on a public page. You can make your account private (follow requests require your approval), block or mute other users, and delete any of your posts or comments at any time. One thing a private account does not cover: it does not hide you on the leaderboard of a public challenge you join, where your name, @username and picture appear in full.

How we use it

We use your information to operate your account, run the community features you choose to use, process subscriptions, and provide customer support. We do not sell your personal information, and we do not use your fitness data for advertising.

Who we share it with

Supabase - hosts our backend database and authentication.
RevenueCat - manages subscription purchases and entitlements.
Apple - processes App Store payments and, if you use it, Sign in with Apple.
Resend - delivers transactional emails (sign-in links, account notices).

Each of these providers only receives what's necessary to perform their function for Steel Log, and each has its own privacy practices.

Your choices

You can delete your account and all associated data at any time from Settings → Account → Delete account. This permanently removes your profile, shared workouts, comments, likes, follows, and other community activity from our servers. Deleting your account does not automatically cancel an active subscription - cancel that separately from your Apple ID subscription settings to stop future billing.

Data retention

We keep your data as long as your account is active. When you delete your account, your data is removed from our systems, except where retaining certain records is required by law (for example, transaction records for tax purposes).

Children's privacy

Steel Log is not directed at children under 13, and we do not knowingly collect information from children under 13.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page and, where appropriate, notify you in the app.

Contact us

Questions about this policy or your data? Reach us at [email protected].