Privacy Notice

Version 2026-11-10 · Last updated 10 November 2026

This notice explains what personal data is processed when you use the RepWake apps for iOS and Android and the website repwake.app (together, “RepWake”), why, and what you can do about it.

1. Who is responsible
2. What we process and why
3. Camera and rep counting
4. What other users can see
5. Advertising
6. This website
7. Who receives data
8. Transfers outside the EEA
9. How long we keep data
10. Deleting your account
11. Your rights
12. Children
13. Changes
14. Contact

1. Who is responsible

The controller responsible for your personal data under the GDPR is:

We have not appointed a data protection officer, because the law does not require us to.

2. What we process and why

For each kind of data we name the legal basis under the General Data Protection Regulation (GDPR). You are not obliged to give us any data, but RepWake cannot run without an account and the data marked “performance of a contract”.

Your account

• Guest account. When you first use the app, it creates a guest account: a random account ID, a display name, a friend code, your time zone and the platform (iOS or Android). A guest account contains no name or email address unless you add them.Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Sign in with Apple or Google (optional). If you connect your account, we receive from Apple or Google the ID they assign to you, your email address (with Apple this can be a private relay address), whether it is verified, your name and, with Google, the address of your profile picture. For Sign in with Apple we also store, in encrypted form, the token we need to revoke the sign-in when you delete your account.Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Merging accounts. If you connect a guest account to an Apple or Google sign-in that already has a RepWake account, the guest account’s alarms, workouts and progress are moved into that account, and we keep a record that the two accounts were merged.Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Sign-in sessions. To keep you signed in, we store a session record with an identifier of your app installation (on Android the Android ID, on iPhone the identifier for vendor; neither is an advertising ID), the platform, the app’s user-agent string and the time the session was last used. We store only a hash of the session token.Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in keeping accounts secure (Art. 6(1)(f) GDPR).
• Profile and preferences. Your display name, your avatar, your outfit choices for the mascot, your privacy settings, the answers you give during onboarding (such as how hard you find waking up) and your default exercise, target, sound and alarm options.Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Acceptance of the terms. The version of the Terms of Use and of this notice that you accepted, and when.Legal basis: our legitimate interest in being able to show which terms apply (Art. 6(1)(f) GDPR).

Alarms and workouts

• Alarms. The label you give it, the time, repeat days, time zone, exercise, target, sound choice and options of each alarm, so that they can be restored and shown on your other devices. Alarms ring from your phone, using local notifications; we do not send push notifications through our servers.Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Workout results. For each workout: the exercise, the target and the number of repetitions counted, start and end time, duration, your time zone, how it ended, an average confidence value of the counting, the counting engine and your device model. From these we calculate your streaks, totals and personal records.Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Skips and rewards. When you turn off an alarm by watching an ad, or unlock a cosmetic item with an ad, we record that this happened, when, for which alarm, and the confirmation we receive from the ad network (ad network, ad unit, reward and a transaction ID). We need this to verify the reward and to show the skip on your profile.Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Friends. Friend requests you send or receive and whether they were accepted, and the users you have blocked.Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Reports. When you report another user's profile, we store who reported whom, the reason you picked and when, so we can review it. The reported user is not told who reported them.Legal basis: our legitimate interest in keeping the app safe (Art. 6(1)(f) GDPR).

Stays on your phone

• Camera images and video (see section 3).
• Alarm sounds you import. We store only an anonymous reference so the alarm knows which sound to play; we never receive the audio file or its name.
• Your display settings, such as the time format.

Technical data and security

• Server requests. Like every internet service, our servers process your IP address with each request. We use it to deliver the response and to limit abusive request rates, and our server logs record requests (time, IP address, address called, result, a request ID and, for some events, your account ID) for troubleshooting and security. We do not use this data to build profiles.Legal basis: our legitimate interest in running RepWake securely and reliably (Art. 6(1)(f) GDPR).
• Messages you send us. If you email us, we process your email address and what you write in order to answer.Legal basis: our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR) or, where your message concerns your use of RepWake, performance of a contract (Art. 6(1)(b) GDPR).

We do not use analytics, crash-reporting or tracking tools of our own in the apps, we do not collect your precise location, and we do not make decisions about you that are based solely on automated processing and have legal or similarly significant effects.

3. Camera and rep counting

To count repetitions, RepWake asks for access to your camera. The camera image is analysed on your phone by a pose-estimation model that finds body positions such as shoulders, elbows and knees. No image and no video is stored, and none is sent to us or to anyone else. Only the result of the workout (section 2) is sent to our servers. We do not use the camera to identify you. You can withdraw camera access at any time in your phone’s settings; without it, rep counting does not work.

Optional: help improve rep counting

Under Settings → Privacy → Improve rep counting you can choose to share movement data. This is off unless you turn it on. If it is on, the app uploads short recordings of body keypoints for a workout: the positions of 17 points of the body in each frame as numbers, the events and repetitions the app counted, the number of repetitions you say you actually did, the size of the camera frame, your device model, the platform and the app version. These are coordinates, not pictures: they contain no face, no background and no sound.

We use these recordings only to test and improve how RepWake counts repetitions. When you turn the setting off, the recordings stored for your account are deleted.Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with the same switch.

4. What other users can see

• Public leaderboard: only if you join. New accounts are not listed. The first time you open the leaderboard, the app asks whether you want to join; you can also join or leave at any time under Settings → Privacy → Public leaderboard. While you are listed:
  • other RepWake users can see your display name, your avatar and mascot outfit, whether you use a guest account, your rank and your statistics (such as streak, workouts and records), and can open your public profile and send you a friend request from it;
  • your display name, your rank and the ranked value (streak, repetitions or skips) are shown on the public leaderboard on this website, where anyone on the internet can see them without an account. Your avatar, account ID and email address are not shown there.
  When you leave, you disappear from the leaderboards in the app and on the website within a few minutes. We cannot remove copies that other people or search engines made while you were listed, so choose a display name you are comfortable showing in public.
• Skips. While Settings → Privacy → Public ad skips is on, the number of alarms you turned off with an ad, and when you last did so, is shown on your profile, and if you have joined the leaderboard you also appear on the skips leaderboard in the app and on the website. This setting is on when you start, but as long as you have not joined the leaderboard only your friends can see your profile. You can turn it off at any time.
• Friends. People you accept as friends can see your profile and statistics, even if you are hidden from the public leaderboard. Anyone who has your friend code can send you a friend request; share the code only with people you want to hear from. You can block anyone from their profile: this ends the friendship, hides you from each other's profiles and leaderboards and stops their requests.

Your email address is never shown to other users or on the website.Legal basis: for the public leaderboard and public profile, your consent (Art. 6(1)(a) GDPR), which you give by joining and can withdraw at any time by leaving; for friends, performance of a contract (Art. 6(1)(b) GDPR).

5. Advertising

RepWake is financed by rewarded video ads from Google AdMob, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. An ad is loaded and shown only when you choose to watch one, to turn off an alarm without exercising or to unlock a cosmetic item.

To deliver and measure ads, the AdMob software in the app processes data such as your IP address, your device’s advertising ID, device and app information, and how you interact with the ad. Google and its advertising partners are responsible for this processing themselves; see how Google uses information from apps that use its services and Google’s privacy policy.

• Consent in the EEA, the UK and Switzerland. Before the first ad, Google’s consent form asks whether Google and its partners may store or access information on your device and use your data for personalised advertising. If you decline, you are shown non-personalised ads where available. You can change your decision at any time in the app’s settings under “Privacy options”.
• iPhone. iOS additionally asks whether the app may track you (App Tracking Transparency). If you choose “Ask App Not to Track”, your advertising identifier is not available to the ad network.
• Android. You can reset or delete your advertising ID in your device settings under Privacy → Ads.
• US state privacy laws. Where these laws apply, the privacy options let you opt out of the “sale” or “sharing” of personal information for targeted advertising by the ad network. We ourselves do not sell your personal information.

When you finish a rewarded ad, Google confirms the reward to our server together with your RepWake account ID and a transaction ID, so that the alarm can be turned off or the item unlocked.Legal basis: your consent for storing information on your device and for personalised advertising (Art. 6(1)(a) GDPR); otherwise our legitimate interest in financing a free app with advertising that you choose to watch (Art. 6(1)(f) GDPR); for verifying the reward, performance of a contract (Art. 6(1)(b) GDPR).

6. This website

repwake.app sets no cookies, uses no analytics or advertising scripts and loads no fonts or other resources from third parties. The leaderboard page loads the current ranking from our own server; it shows only users who joined the leaderboard (section 4). When you open a page, the web server processes your IP address, the page requested, the time and your browser’s user-agent string in order to deliver the page and to keep the server secure.Legal basis: our legitimate interest in operating the website (Art. 6(1)(f) GDPR).

7. Who receives data

We do not sell personal data. We share it only with:

• Hosting. The provider of the servers on which our application and database run. It processes data on our behalf under a data-processing agreement.
• Google (Google Ireland Limited / Google LLC) for advertising (section 5) and, if you use it, Sign in with Google.
• Apple (Apple Distribution International Ltd. / Apple Inc.), if you use Sign in with Apple.
• Our email provider, when you write to us.
• Authorities or courts, where the law obliges us to, or where this is necessary to establish or defend legal claims.
• Other users and, if you join the leaderboard, the public, as described in section 4.

Apple and Google also process data when you download the app from their stores. They do this as independent controllers under their own privacy policies.

8. Transfers outside the EEA

Some of these recipients, in particular Google and Apple, also process data in the United States and other countries outside the European Economic Area. Where personal data is transferred to a country that the European Commission has not recognised as providing adequate protection, the transfer is based on an appropriate safeguard, such as the EU–US Data Privacy Framework for certified companies or the European Commission’s Standard Contractual Clauses. Write to office@solotechai.com if you would like more information about the safeguard for a particular recipient.

9. How long we keep data

• Account data (profile, alarms, workouts, statistics, skips, friends, wardrobe) is kept until you delete your account. Alarms you delete are first only marked as deleted, so that your other devices can remove them too.
• Sign-in sessions expire 60 days after they were last renewed and are invalidated when you sign out.
• Movement data you chose to share (section 3) is kept until you turn the setting off or delete your account.
• No backup copies. We do not keep backup copies of the database, so data you delete is not retained elsewhere. This also means that deleted data, including a deleted account, cannot be restored.
• Server logs are kept only for as long as they are needed for troubleshooting and security.
• Emails are kept for as long as needed to handle your request and any follow-up.

A guest account exists only on the device that created it. If you uninstall the app or sign out without connecting the account, we can no longer match it to you; delete the account in the app first if you want its data removed from our servers.

10. Deleting your account

In the app, open Settings → Delete account. This immediately and permanently deletes your account and everything that belongs to it from our servers: profile, alarms, workouts, statistics, skips, friendships, shared movement data and sign-in sessions. If you used Sign in with Apple, we also ask Apple to revoke that sign-in. Entries in our server logs that mention your account ID expire with the logs. Deletion cannot be undone.

If you cannot use the app, write to office@solotechai.com from the email address of your account, or tell us your friend code, and we will delete the account for you.

11. Your rights

Under the GDPR, and subject to its conditions, you have the right to:

• access the personal data we hold about you and receive a copy (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data erased (Art. 17);
• have processing restricted (Art. 18);
• receive your data in a portable format (Art. 20);
• object, on grounds relating to your particular situation, to processing that we base on legitimate interests (Art. 21);
• withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal (Art. 7(3)).

You can do much of this yourself in the app: edit your profile, change your privacy settings and delete your account. For anything else, write to office@solotechai.com. We answer within one month. If you use a guest account, tell us your friend code so that we can find your account.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work. In Austria this is:

Residents of US states with privacy laws (such as California) have the right to know what personal information we collect, to have it corrected or deleted, and not to be discriminated against for using these rights. We do not sell personal information. For the ad network’s use of data, see section 5.

12. Children

RepWake is not directed to children under 16, and our Terms of Use require users to be at least 16. We do not knowingly collect personal data from children under 16. If you believe a child has used RepWake, write to office@solotechai.com and we will delete the data.

13. Changes to this notice

We update this notice when RepWake or the law changes. The version date is at the top of this page. If a change is material, we tell you in the app before it takes effect.

14. Contact

See also the Terms of Use and the Impressum.