Who we are and what this covers
RepsBaby! is operated by SitBackMedia, a sole proprietorship operated by Jason Shields (“SitBackMedia,” “we,” “us,” or “our”). This policy explains how information is handled by the RepsBaby! mobile app, public website, authentication API, support process, and hosted password-reset pages.
Account information we collect
When you register, we collect your name, email address, password, an app-generated device name, and confirmation that you are at least 13 years old. The age confirmation is validated during registration but is not stored as a birth date or profile field. Passwords are stored as one-way password hashes, not as readable passwords. Authentication tokens are recorded on the server so the app can access your account.
If you request password recovery, we process your email address and maintain a time-limited password-reset record. Resetting your password revokes existing API tokens.
Workout information and cloud backup
RepsBaby! stores active workouts, exercises, sets, reps, resistance values, workout history, reports, and generated-workout choices locally so workout entry remains available when your connection is interrupted. Signed-in versions that support cloud backup also synchronize active and completed workout records with your RepsBaby! account. This allows eligible workout history to be restored after reinstalling the app or signing in on another supported device.
Workout backup is included with every signed-in RepsBaby! account and is not part of the paid Remove Ads entitlement. Appearance preferences remain device-local.
Native authentication credentials are stored using the device’s secure credential storage. Expo web development uses browser session storage for its temporary authenticated session.
Technical and security information
Our hosting and application systems may process IP addresses, request times, device or browser information, requested URLs, error details, and similar server logs. We use this information to deliver the service, diagnose problems, prevent abuse, enforce rate limits, and protect accounts.
Information you send to support
If you contact us, we receive the email address and other information included in your message. Do not send passwords, authentication tokens, unnecessary health details, or other sensitive information through ordinary email.
Advertising and purchases
The iOS and Android apps may display non-personalized advertisements supplied by Google AdMob after selected completed workouts. AdMob may process device identifiers, IP address, approximate location derived from IP, general device information, app interactions, advertising data, diagnostics, and consent choices to deliver, limit, secure, and measure ads. RepsBaby! does not request permission to track you across other companies’ apps and websites for personalized advertising.
Where required, Google’s User Messaging Platform presents consent and privacy choices before ads are requested. An advertising privacy-choices control appears in Account & Settings when Google requires it. The app is intended for ages 13 and older and is not directed to children under 13.
You may purchase a lifetime Remove Ads entitlement through Apple or Google Play. The applicable app store processes payment details, while RevenueCat helps verify purchase status, restoration, product information, and the ad-free entitlement. SitBackMedia does not receive your full payment-card details. RevenueCat associates entitlement status with a RepsBaby! account identifier and may process purchase history, device, diagnostic, and service-interaction information needed to provide that functionality. The same active entitlement may apply across supported platforms when you use the same RepsBaby! account.
How we use information
We use information to create and secure accounts, authenticate devices, synchronize and restore workouts, provide password recovery, respond to support and privacy requests, maintain the website and API, prevent fraud and abuse, comply with law, and improve service reliability.
We do not use analytics or advertising trackers on the public website, and we do not sell personal information.
Cookies and browser storage
The public informational pages do not require analytics or advertising cookies. Laravel may use essential session and security cookies on hosted password-reset pages or other interactions that require request protection.
Browser-based Expo development may keep an authenticated session in session storage, which is cleared when that browser session ends.
When information is shared
We may share information with service providers that help operate hosting, databases, email delivery, security, app distribution, advertising, consent management, and purchase verification, including Apple, Google AdMob, and RevenueCat. They may process information only as needed to provide those services or meet their legal obligations.
We may also preserve or disclose information when reasonably necessary to comply with law, respond to valid legal process, prevent harm or fraud, enforce our terms, or protect rights and safety. If the business is reorganized or transferred, information may be included subject to this policy and applicable law.
Retention and security
We retain account, synchronized workout, and security information for as long as needed to provide the account, protect the service, meet legal obligations, resolve disputes, and enforce agreements. RepsBaby! retains up to 250 completed workouts per account. Deleted workouts are retained as limited synchronization records when needed to prevent them from reappearing on another device. Password-reset records expire under configured security limits, and logout revokes the current device token.
We use reasonable technical and organizational safeguards, including encrypted network transmission, but no storage or transmission system can be guaranteed completely secure. Device-local copies remain subject to the security and backup practices of your device.
Your choices and privacy rights
You may sign out, delete individual completed workouts, or permanently delete your account from Account & Settings after confirming your current password. Successful in-app account deletion removes the account, synchronized workout records, authentication tokens, password-reset records, and server sessions, then clears that account’s workout history and monetization identity data stored by RepsBaby! on that device. An eligible Remove Ads purchase remains associated with the Apple or Google Play account that purchased it and may be restored where eligible. See the account deletion instructions for both in-app and support-assisted options.
You may also contact us to request access or correction of server-side account information. We may need to verify your identity before completing a request.
Rights vary by location and may include access, correction, deletion, portability, restriction, or objection. Some information may be retained when legally required or necessary for security, fraud prevention, or legal claims.
Children, changes, and contact
RepsBaby! is not directed to children under 13, and we do not knowingly collect their personal information. A parent or guardian who believes a child provided information should contact us so we can review and delete it where appropriate.
We may update this policy as the service changes. The updated date above identifies the current version. Privacy questions and requests can be submitted through our Contact page.