OrthoRep Privacy Policy

Last updated: November 5, 2026

Entity: ORTHOREP LLC, Washington State


Summary

  • OrthoRep is a local-first app. Your workouts, routines, records, and profile are stored on your iPhone and Apple Watch, not on OrthoRep servers.
  • There is no OrthoRep account and no sign-in. Nothing you log is uploaded to us.
  • Workouts move directly between your paired iPhone and Apple Watch using Apple’s Watch Connectivity framework.
  • Apple Health is used only if you turn it on, and Health data never leaves your devices through OrthoRep.
  • Purchases are handled by Apple through the App Store. We never see your payment details.
  • The only data OrthoRep sends off your device is anonymous product analytics (PostHog), and you can turn that off in Profile › Data & Privacy.
  • We do not sell your personal data or health information, and we do not use advertising or tracking SDKs.
  • You can export everything you have logged at any time (Profile › Export Data). Deleting the app deletes its data from that device.
  • The orthorep.app website sets no cookies and runs no analytics.

Introduction

This Privacy Policy explains what information OrthoRep ("the App") handles, where it is kept, and the choices and rights you have. It covers the OrthoRep iPhone app, the OrthoRep Apple Watch app, and the orthorep.app website. "We", "our", and "us" mean ORTHOREP LLC, a Washington limited liability company.

Because OrthoRep stores your training data on your own devices, most of this policy describes what stays on your iPhone and Apple Watch rather than what we collect. We have written it to match what the App actually does.


Information the App Stores on Your Devices

The following information is created by you or by your devices and is stored only on your iPhone and Apple Watch. It is not transmitted to ORTHOREP LLC.

Health & fitness data

  • Workout sessions, exercise logs, sets, reps, weight, and reps in reserve
  • Routines, workout templates, and planned exercises
  • Personal records, estimated one-rep maxes, progression and weight suggestions calculated on your device
  • Average and maximum heart rate for a workout, when your Apple Watch or a Bluetooth heart rate monitor supplies it
  • Body weight, and a body weight snapshot saved with each workout for bodyweight exercises

Profile and preferences

  • Sex, birth year, height, body weight, experience level, training goal, equipment, and unit preferences you enter during setup or in Settings
  • App settings such as rest timer defaults, plate inventory, and whether Apple Health and Watch sync are turned on

Access and consent records

  • A cached copy of your App Store access state (trial, Annual, Monthly, Lifetime, or none), so the App works offline
  • A record of the dates on which you accepted the current versions of our legal documents, kept on the device and included in your export

OrthoRep does not ask for your name, email address, phone number, or device location, and does not collect precise geolocation. PostHog derives an approximate location (country, region and city) from the IP address of each analytics request. It is not linked to your name or any account, and we use it only for aggregate product analytics. The App never asks for or uses your device’s location services.


Information That Leaves Your Device

Anonymous product analytics (PostHog)

To understand which features are used and where people get stuck, the iPhone app sends anonymous usage events to PostHog, a product analytics service, hosted in the European Union. This is on by default and you can turn it off at any time in Profile › Data & Privacy ("Share anonymous usage data"). Turning it off stops future events immediately and discards any events waiting to be sent. The Apple Watch app sends no analytics.

What is sent:

  • Event names with counts, durations, and yes/no values. Examples: app opened, onboarding completed, workout started and finished (number of sets, duration, whether it was logged on iPhone or Watch), set logged (time to first set), exercise added (the bundled library exercise’s catalog ID; custom exercises are reported only as "custom"), routine created (days per week, exercise count), export completed, paywall viewed, plan selected, purchase or restore result, access state changes
  • Setup answers used for segmentation: experience level, training goal, and an equipment category (for example "home gym")
  • Your current access state and plan name (for example "trial", "annual") as person properties
  • Screen names as you move through the App
  • Properties the PostHog SDK adds automatically: a random identifier the SDK generates and stores on your device, device model, iOS version, App version, language, time zone, and screen size. Like any internet service, PostHog’s servers also see the IP address of the request and use it to derive an approximate location (country, region and city).

What is never sent: exercise names you type, workout or exercise notes, routine or template names, the weights and reps you lift, body weight, heart rate, or any Apple Health data. The App removes free-text fields, names, identifiers, and error details before an event leaves the device. Analytics are not used for advertising, and we do not combine them with any other source to identify you.

Apple services

  • App Store purchases (StoreKit). Purchases, trials, renewals, and restores are processed by Apple under your Apple ID. The App receives a signed receipt describing your access state and nothing else. We do not receive your payment card details, billing address, or Apple ID email.
  • Crash reports. OrthoRep does not run a third-party crash reporter. If you have chosen to share analytics and crash data with app developers in iOS Settings › Privacy & Security › Analytics & Improvements, Apple may share anonymized crash logs with us through Apple’s developer tools. Apple controls what is shared and how it is anonymized.
  • Apple Health (HealthKit). See the Apple Health section below. Health data is processed on your device and is not sent to us.

Nothing else. The App does not use cloud storage, a sign-in service, email or marketing tools, advertising networks, or third-party crash reporting. The App does not include any artificial intelligence service.


How We Use Information

Information on your device is used to provide the App’s features: logging workouts, keeping history, calculating progress, suggesting weights, detecting personal records, syncing between your iPhone and Apple Watch, and, if you choose, saving workouts to Apple Health.

Anonymous analytics are used to fix problems, understand how features perform, and decide what to build next.

The App Store access state is used to decide whether logging is unlocked. Workout history and export remain available whether or not you have access.


Apple Health (HealthKit)

OrthoRep only uses Apple Health if you turn it on, and iOS asks for your permission the first time you do. You can change permissions at any time in the iOS Settings app under Health › Data Access & Devices.

  • Save workouts to Health (iPhone and Apple Watch). When this is on, completed strength workouts and active energy are written to Apple Health so they count toward your Activity rings. On Apple Watch, OrthoRep runs a Health workout session during your workout, which is how it reads your heart rate and keeps the App running on your wrist.
  • Read body weight (iPhone). When this is on, OrthoRep reads your most recent body weight from Apple Health and updates your profile when it changes, for bodyweight exercises.
  • Read heart rate and energy. During a workout, OrthoRep reads heart rate, active energy, and resting energy from Apple Health to show live stats and save a workout’s average and maximum heart rate.

Health data obtained through HealthKit is used only to provide these features. It is stored on your devices, is never sent to ORTHOREP LLC or to our analytics provider, and is never sold, shared with advertisers, or used for marketing. Workouts you save to Apple Health stay in Apple Health until you delete them there.


Bluetooth Heart Rate Monitors

During a workout on iPhone you can connect a Bluetooth heart rate monitor. iOS asks for your permission to use Bluetooth. Heart rate readings are used to show live stats and are stored with the workout on your device only.


iPhone and Apple Watch Sync

The Apple Watch app runs on its own. Workouts started on the Watch are saved on the Watch and moved to your iPhone over Apple’s Watch Connectivity framework when the devices are together; routines and settings move from iPhone to Watch the same way. This happens directly between your paired devices. ORTHOREP LLC does not operate a server in between and does not receive the data.


Data Retention

  • Data on your devices: Kept until you delete it in the App, delete the App, or erase the device. There is no expiration. Because there is no cloud copy, data you have not exported is lost if the device is lost, reset, or the App is deleted.
  • Apple Health: Workouts written to Apple Health are governed by Apple Health. Delete them in the Health app.
  • Anonymous analytics (PostHog): Retained for up to 24 months from collection.
  • Purchase records: Held by Apple under your Apple ID and Apple’s privacy policy. OrthoRep keeps only a cached access state on your device.
  • Support correspondence: Emails you send to support@orthorep.app are kept for up to 24 months after the matter is closed.

Your Choices

  • Turn analytics off: Profile › Data & Privacy › Share anonymous usage data.
  • Apple Health: Profile › Apple Health, or the Health app’s data access settings.
  • Bluetooth: iOS Settings › Privacy & Security › Bluetooth.
  • Export your data: Profile › Export Data produces a single JSON file containing your workout history, routines, personal records, profile, and consent records. The export works offline and uses the iOS share sheet.
  • Delete your data: Delete individual workouts, routines, and records in the App. Deleting the OrthoRep app from your iPhone deletes all OrthoRep data on that iPhone; deleting it from your Apple Watch deletes the data on the Watch. Workouts already saved to Apple Health must be deleted in the Health app.

Your Rights

Regardless of where you live, you may:

  • Know and access what personal data we hold. For data on your device, use the App or the export. We do not hold a copy.
  • Correct your data by editing it in the App.
  • Delete your data as described above.
  • Port your data via the JSON export.
  • Withdraw consent for analytics (the toggle) or Apple Health (iOS permissions) at any time, without affecting prior processing.
  • Not be discriminated against for exercising these rights.
  • Complain to your state Attorney General or local data protection authority.

How to exercise your rights. Most rights can be exercised directly in the App. For anything else, email privacy@orthorep.app. We will acknowledge your request within 10 days and respond within 30 days, and we will tell you if we need up to 30 more days. Requests are free.

Please note that analytics data is anonymous. We cannot look up or delete analytics records by your name or email because they are not linked to either. Turning off sharing stops collection going forward.


Data Security

  • Data on your devices is protected by Apple’s iOS and watchOS Data Protection, which encrypts it when the device is locked, and by your device passcode.
  • Transfers between your iPhone and Apple Watch use Apple’s encrypted Watch Connectivity channel.
  • Analytics events are sent over TLS.
  • OrthoRep does not store your training data on any server, so there is no OrthoRep server copy to breach.

No security measure is perfect. If a breach affecting personal data we hold were to occur, we would notify you and the relevant authorities as required by law.


Children’s Privacy

OrthoRep is intended for people 13 or older, as the Terms of Use require, and users under 18 need a parent’s or guardian’s permission. The App does not ask for or verify your age. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has used OrthoRep and that we hold information about them, contact privacy@orthorep.app and we will delete any such data we hold.


Consumer Health Data Notices (Washington and Nevada)

ORTHOREP LLC is a Washington company and complies with Washington’s My Health My Data Act. Our Washington Consumer Health Data Privacy Notice describes the categories of consumer health data the App handles, the processors involved, and your rights under Washington law.

If you live in Nevada or your consumer health data is collected in Nevada, please also read our Nevada Consumer Health Data Privacy Addendum. We do not sell consumer health data.


California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know, delete, and correct personal information we hold, to opt out of its sale or sharing, and not to be discriminated against for exercising those rights.

We do not sell or share your personal information as those terms are defined by the CCPA/CPRA, and we do not use it for cross-context behavioral advertising.

Categories of personal information collected in the preceding 12 months: (F) internet or other electronic network activity information, limited to the anonymous app usage events described above; and commercial information, limited to your App Store access state. Health and fitness data is processed on your device only. Geolocation data, limited to approximate location (country, region and city) that PostHog derives from the request IP address, used anonymously for analytics only. We do not collect identifiers such as name or email, precise geolocation, or biometric information. We do not sell personal information, including that of consumers under 16.

To exercise California rights, email privacy@orthorep.app.


Additional US State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, Oregon, Texas, and other states with comprehensive privacy laws have similar rights to access, correct, delete, and port personal data, and to opt out of targeted advertising, sale, and profiling. We do not engage in targeted advertising, sale, or profiling with legal effects. To exercise these rights, email privacy@orthorep.app and we will respond within the time your state’s law requires.


Website

The orthorep.app website is a static site. It sets no cookies, runs no analytics or third-party scripts, and collects no information about visitors. If you email us, we receive what you send.


Changes to This Policy

We may update this Privacy Policy as the App or the law changes. We will post the new version at orthorep.app/privacy and update the "Last updated" date. If a change materially affects how consumer health data is collected or shared, the App will ask you to review and accept the updated notice before continuing.


Contact Us

Email: privacy@orthorep.app

Entity: ORTHOREP LLC, Washington State