Privacy Policy

1. Who we are

Workout. Done. is a local-first workout planning and training application. It does not require an account to create or run workouts.

2. Information we handle

Workout names, exercises, sets, rests, targets, notes, preferences, session history, performance values, statistics, and import/export files are stored on your phone or Wear OS device so the app can provide its features. Workout and session data is not stored on a Dan Vento web server.

When you pair the companion apps, Workout. Done. transfers the workout catalog, recommendations, preferences, active-session state, and completed results through the Android/Wear OS Data Layer and Google Play services. The watch keeps the data needed for cached workouts and recovery.

Firebase Analytics is enabled by default for pseudonymous usage events, and Firebase Crashlytics is enabled by default for crash and diagnostic data. Both start when the phone or watch app is first opened. We do not send workout names, exercises, sets, rests, targets, notes, session histories, performance values, statistics, import/export files, or other workout content to Firebase as custom Analytics events, user properties, or Crashlytics keys. RevenueCat processes subscription entitlement and transaction information, and Google Play Billing processes payments. Dan Vento does not receive or store your payment card details.

• Firebase Privacy and Security
• RevenueCat Privacy Policy
• Google Privacy Policy

3. Why information is used

Information is used only to save and restore workouts, settings, sessions, and results; transfer compatible data between the phone and watch; validate premium subscription entitlements; understand aggregated usage; diagnose crashes; prevent abuse; improve the app; and respond to support requests.

Depending on the processing, our legal bases may include providing the service you request, performing a subscription contract, legitimate interests in app security and reliability, and consent where applicable.

4. Sharing

We do not sell, rent, or trade personal information. Information may be processed by the listed providers only when needed for app operation, subscription validation, diagnostics, analytics, security, or legal compliance. Providers may process information outside the European Economic Area under their own safeguards.

5. Website cookies and analytics

Workoutdone.app is a static informational website. It does not set first-party marketing or analytics cookies and does not include advertising trackers. The hosting provider may process ordinary server access logs, such as an IP address and request time, to deliver and secure the site.

6. Local storage, backup, and deletion

App data remains on your devices until you delete it in the app, remove the app, or manage it through your device. Android backup and device-transfer behavior is controlled by your operating-system and Google-account settings. Provider-held diagnostic, analytics, and subscription records are retained according to the relevant provider policy and configured service settings.

7. Your rights

Where applicable law, including the GDPR, applies to you, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent where applicable and complain to your local data-protection authority. Email contact@workoutdone.app to make a request; we may need to verify it and may retain information where the law requires it.

• European Commission GDPR guidance

8. Children

Workout. Done. is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can review and delete it where appropriate.

9. Changes

We may update this Privacy Policy when the app, website, providers, or applicable law changes. The updated version will be posted on this page with a new effective date.