Workset Privacy Policy

This Privacy Policy explains how Workset, an iPhone workout logger, handles your information. Workset is published by Synaptic Cybersecurity Alliance, Inc. (“we”, “us”).

The short version

Workset has no account, no server, and no analytics. Your training history is a database on your iPhone, and we cannot see it. We do not collect, receive, transmit, or sell any personal information. The only time the app reaches the internet is when you tap play on an exercise video, which hands off to YouTube.

What Workset stores, and where

Everything the app records stays on your device, in an app database that only Workset can read:

• Workouts, exercises, sets, weights, reps, times and distances
• Training programs — built in, imported, or written by you
• Body measurements you enter, including bodyweight
• Gyms, equipment notes, and app preferences

There is no account to create and nothing to sign in to. Because the data lives only on your phone, deleting the app deletes it — so exporting a backup periodically is worth doing.

What we collect: nothing

We operate no server for Workset and receive no data from it. The app contains no analytics, no advertising, no tracking identifiers, no crash-reporting service, and no third-party SDKs of any kind. There is no telemetry to disable, because none was written.

Health and fitness information

Bodyweight is used to pre-fill sets and to calculate a strength score. Sex is optional, and used for exactly one purpose: selecting the correct curve for that score, because the published strength standards are sex-specific. Both are stored on your device and are never transmitted. Workset does not currently read from or write to Apple Health; if that changes, this policy will be updated before the feature ships.

Backups and program files

A backup is a file the app writes when you ask it to, into a folder you choose — iCloud Drive, On My iPhone, or anywhere else the Files app can reach. Once written, that file is governed by whatever service you put it in; Workset keeps no copy and has no way to retrieve it. Importing a program reads a file you select, and nothing is fetched from anywhere.

Exercise videos and YouTube

An exercise can carry a link to a demonstration video. Nothing loads until you tap play. When you do, the video plays through YouTube’s official embedded player, which means YouTube — not us — receives the request, including your IP address and the standard information any web request carries. That interaction is governed by Google’s privacy policy, not this one. We use the youtube-nocookie.com player, which withholds tracking cookies until playback actually begins.

This is the only circumstance in which Workset makes a network request.

Information Apple may provide to us

Although the app sends us nothing, distributing through Apple means Apple can share some information with us as the developer, independently of anything Workset does:

• Crash reports and usage analytics, but only if you have opted in to sharing them with developers in iOS Settings. These are aggregated and are not linked to you.
• TestFlight feedback, if you are a beta tester and choose to send it. This can include a screenshot, your comments, and the email address associated with your Apple ID.
• App Store download and purchase totals, in aggregate.

We receive this from Apple under Apple’s privacy policy and use it only to fix defects and understand whether the app works.

Children

Workset is not directed to children under 13 (or the equivalent age in your jurisdiction), and collects no information from anyone, including children.

Your rights

Because we hold no data about you, there is nothing for us to disclose, correct, or delete on request — and no request is necessary. You control your data directly: export it at any time, and delete the app to erase it. If you have sent us TestFlight feedback or an email and want it deleted, write to us and we will do so.

Security

Workset relies on iOS app sandboxing and the device encryption that applies whenever your iPhone has a passcode. No data is transmitted to us, so there is no server-side store to breach. Backups you export are ordinary files, protected by whatever service or device you store them on — treat them as you would any personal record.

Changes

We may update this policy; we will revise the “Last updated” date and, for material changes, provide a more prominent notice. Changes are also reflected on the Privacy screen inside the app.

Contact

Synaptic Cybersecurity Alliance, Inc. — privacy@synapticcyber.com.