RepRats Consumer Health Data Privacy Policy

Effective date: October 13, 2026

This policy is for people in Washington State and Nevada. Washington's My Health My Data Act and Nevada's consumer health data law (SB 370) give you extra rights over "consumer health data". This page explains which information in RepRats could count as consumer health data under those laws, what we do with it, and how to use your rights. It adds to our Privacy Policy, which covers everything else.

RepRats is an app made by Denys Nazarenko, an individual in Ontario, Canada, operating as Four Eights ("we", "us"). Contact: support@reprats.app.

1. What we collect

RepRats does not ask for health information. Some of what you log could still count as consumer health data:

• Your workouts: exercises, sets, reps, weights, rest times, effort ratings (reps in reserve, perceived exertion), warm-up sets, dates and durations.
• Notes you type on a set, exercise or workout, including any health details you choose to write.
• Exercises you ask the app to avoid, and your training preferences, such as how fast you expect to lose strength during a layoff.
• Workout history you import from a Strong or Hevy export.
• The weights and reps the app suggests, and the date you acknowledged the training safety notice.

2. Where it comes from

From you, when you log or import workouts, and from the app, which calculates suggestions, records and progress from what you log.

3. Why we use it

Only to provide the app you asked for: to store and sync your training log, calculate records and progress, suggest weights, reps and swaps, keep the service secure, answer your support requests and meet legal obligations. We never sell it and never use it for advertising.

We use it for usage analytics only if you choose Share when the app asks, or turn Share usage data on yourself in Settings; otherwise these events are not sent. With your Share, when you log a workout an event records that a workout was logged, when, and whether the coach was used, and after a workout an event counts how many coach suggestions you kept or changed. These events never contain your exercises, weights, reps or notes. You can withdraw your choice at any time with Share usage data in Settings. Our other usage analytics contain no consumer health data. They are on by default unless your App Store account is set to Canada (or to a country in the European Economic Area, the United Kingdom or Switzerland) or the app cannot tell the country; see section 1 of the Privacy Policy. Apart from this, we do not collect or use consumer health data without your consent.

4. Who we share it with

• Google Firebase (our service provider), which stores and syncs your data. Your workout data is stored in Toronto, Canada. Our server functions, which process it when you delete your account, run in the United States.
• PostHog (our service provider), which receives the workout events described above only if you chose Share, and the other usage events described in the Privacy Policy when Share usage data is on.
• Cloudflare, which forwards email sent to support@reprats.app, and Google (Gmail), which hosts our support inbox, if you write to us about it.
• Apps you choose: when you share a workout card, the image goes to the app or action you pick in the iOS share sheet. That is your choice, and we do not receive it.
• When the law requires it, or to protect someone's safety or our legal rights, and to a new owner if RepRats is sold or transferred, as the Privacy Policy describes.

We have no affiliates that receive consumer health data. No third party collects consumer health data about your activity across other apps or websites through RepRats.

5. Your rights

You can ask us to:

• confirm whether we collect, share or sell your consumer health data (we never sell it);
• give you a copy of it, and a list of the third parties and affiliates we have shared it with;
• delete it;
• stop collecting or sharing it, or withdraw consent you gave.

How: to delete everything at once, use Delete account in the app's Settings. If you were signed in on another device, the copy cached there stays in the app's storage on that device until you remove the app from it. The app does not show it to any other account. For any other request, write to support@reprats.app from the email address on your account, with "Consumer health data request" in the subject. If you use Sign in with Apple with Hide My Email, include the Apple relay address shown in the app's Settings in your message, or sign in and use Delete account. We may need to confirm it is you. We answer within 30 days; if the law allows more time and we need it, we tell you why. We do not charge for requests.

Appeals: if we refuse your request, you can appeal by replying to our answer with "Appeal" in the subject. We will reply within 45 days and explain our decision. If we deny your appeal, you can complain to the Washington State Attorney General (atg.wa.gov/file-complaint) or the Nevada Attorney General (ag.nv.gov).

6. Security and retention

We protect consumer health data as described in section 7 of the Privacy Policy: database rules let each signed-in user read and write only their own data. We keep it until you delete it or your account, as section 5 of the Privacy Policy describes.

7. Changes

If we change this policy in a way that matters, we will update the effective date and tell you by email or in the app at least 30 days before it takes effect. We will ask for your consent before we collect, use or share consumer health data in a new way that needs it.

8. Contact

Denys Nazarenko, operating as Four Eights, Ontario, Canada
Email: support@reprats.app