Privacy

workout.free is a workout log. This page describes what it stores and why, in plain terms.

What we store

• Your account: your email address, and a salted hash of your password if you set one (never the password itself).
• What you log: workouts, lift and cardio entries, notes, body weight check-ins, and exercise names you’ve added.
• Your profile, if you fill it in: date of birth, gender, height, and your preferred units.
• Google sign-in, if you use it: Google’s identifier for your Google account and its email address. We ask Google only for your identity and email, nothing else.
• Rate limits: to slow down password guessing, we count sign-in and sign-up attempts for a short time, keyed on salted hashes of the network address and email rather than the values themselves.

Cookies

One cookie, workoutfree, which keeps you signed in for 30 days. It’s set when you use the app, not when you read these pages. There are no advertising cookies.

Visit counts

We count visits to these pages and the app with Tinylytics, so we can see which pages people use. Your browser loads its script from tinylytics.app on every page. It is not given anything you log in the app.

Who can see your data

Only you, unless you choose otherwise. Nothing you log is sold.

Public profiles are opt-in. If you pick a handle and switch on your public profile, anyone can see your lifts and cardio at workout.free/@yourhandle, along with the name you choose. Notes and body weight are shown only if you switch each of them on. Your email, date of birth, gender and height are never shown. Public profiles can appear in search engines. Switch it off at any time and the pages disappear.

The site’s operator can see account-level totals (such as how many workouts an account has logged, and when) to run the service, but the admin tools do not display your entries, weights or notes.

Where it’s kept

On workout.free’s own server, in a database backed up nightly. Pages load fonts from Google Fonts, and the app loads its styling code from jsDelivr, so your browser contacts those services to download them.

Taking your data with you

Export everything you’ve logged as CSV or JSON from Settings in the app, whenever you like. Files you import are read once to add your workouts and are not kept.

Deleting your account

Open Settings in the app and use Delete account. Your account and everything you’ve logged are deleted immediately. Copies in backups age out as the backups are replaced.

Changes

If this changes, this page will be updated and the date at the top will change.