Privacy Policy

Summary

The short version:

• Your workouts are stored on your device by default.
• With WLog PRO and an account, they are also backed up to your private cloud account so you can sync across devices.
• Progress photos never leave your device.
• The Nutrition food log is kept on your device, and in your own cloud backup only if you have WLog PRO and an account — like your workouts. The other places it can go, all triggered by you, are described under Nutrition.
• We collect usage and crash data to fix bugs and decide what to build next.
• WLog shows no ads. To measure our own advertising, the app reports installs and app opens to Meta and, on iPhone, reads Apple's Search Ads attribution token. No workout or health data is included.
• Health data from Apple Health or Health Connect stays between your device and your own cloud backup. It is never used for advertising. If you turn on Health sync in Nutrition, WLog writes your logged foods to your health store; it never reads nutrition data.
• The optional daily wellness features (water log, step reminders, movement breaks) are off until you turn them on. Your water log and your step count stay on your device, and your step count is never sent to analytics. See Health data.
• AI features send the plan you import — and, only if you switch on the weekly AI review, your recent training numbers (and, if you also agree, your daily nutrition totals) — to Google's Gemini. The images, files and pasted text you import, and the AI's reply, are kept for 30 days so we can fix import mistakes, then deleted. The meal text you type into "Describe it" is sent to Gemini but not stored by us. AI features are for people aged 18 or over.
• If you choose to share a program, that program is stored in our cloud database and anyone with its link can view it. You can stop sharing at any time. See Sharing programs.
• If you ask ChatGPT or Claude to build a program with the WLog connector, we receive only that program, never your conversation, and its public link is deleted after 180 days. See Programs built in ChatGPT or Claude.
• If you invite a coach, they see only what you chose to share, read-only, until you stop sharing. Coaches use a web panel that has its own usage analytics. See Sharing with a coach.
• Purchases are handled by Apple and Google. We never see your card details.

Who we are

WLog ("WLog", "we", "us") is a workout tracker and gym log application for iOS, Android, Apple Watch and Wear OS, developed and operated by Mustafa Ali Dikçinar as an independent developer. For privacy law purposes we are the data controller for the personal data described on this page.

This policy covers the WLog mobile apps, the Apple Watch and Wear OS apps, and this website. It applies from the date shown above and replaces any earlier privacy policy published for this app.

What we collect

We only collect what the app needs to work. The table below lists every category of data, why we handle it, and whether it ever leaves your device.

We do not collect your precise location, your contacts, your calendar, your browsing history outside the app, or audio from your microphone. WLog does not display third-party ads.

How we use it

We use the data above to:

• Provide the core product — store your training history and show your progress over time.
• Sync your data between your phone, your watch and any other device you sign in on.
• Unlock PRO features for subscribers and restore purchases.
• Send workout reminders, rest-timer notifications and, if you enable them, meal and streak reminders, a Monday summary and daily wellness reminders (water, step pace and movement breaks).
• Look up a food by its barcode and, when you use "Describe it", read the foods and amounts in your meal text.
• Turn a plan you import into routines and, if you switch it on, write your weekly AI review.
• Diagnose crashes and fix bugs.
• Understand which features are used so we can prioritise development.
• Measure whether our own advertising leads to installs and subscriptions.
• Respond when you contact support.
• Detect abuse and protect the service from automated attacks.

We do not use your data for profiling that produces legal effects, automated decision-making about you, or resale of any kind, and WLog itself shows no ads.

Legal bases

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR:

• Performance of a contract — providing the app, your account, cloud sync, AI plan import, food barcode lookup and subscriptions.
• Consent — health data access, notifications, camera and photo access, Face ID for progress photos, the weekly AI review (including its nutrition option), "Describe it" AI food logging, Health sync for nutrition, and the daily wellness features (reading your steps for step reminders, and writing your water log to your health store). You can withdraw consent at any time in your device settings or, for the AI features, Health sync and the daily wellness features, in the app.
• Legitimate interests — crash reporting, security, abuse prevention, understanding feature usage to improve the product, keeping imported images, files, pasted text and AI replies for 30 days to improve plan import, and measuring our own advertising.
• Legal obligation — retaining transaction records where tax or consumer law requires it.

Service providers

We use a small number of established providers to run the app. Most of them process data only on our instructions; Apple, Google, Meta and Open Food Facts also handle the data they receive under their own privacy policies.

We may also disclose data if we are legally required to do so, or to establish, exercise or defend legal claims. If WLog is ever transferred to another owner, your data may transfer with it — you will be notified before that happens and before any different privacy policy applies to you.

Ads and attribution

WLog shows no ads. We do advertise WLog elsewhere, and the app reports a small set of signals so we can tell whether those ads work:

• Meta. Each time the app starts, the Meta (Facebook) SDK tells Meta that the app was installed and opened, together with the device information that SDK collects and an anonymous ID it creates.
• Subscription events. The Meta anonymous ID is passed to RevenueCat, so that when RevenueCat reports a subscription event to Meta it can be matched to the install.
• Apple Search Ads. On iPhone, RevenueCat collects Apple's attribution token, which tells us which Apple Search Ads campaign and keyword, if any, an install came from.
• Advertising identifiers. On iPhone, WLog does not ask for permission to track you across other companies' apps, so it does not receive the device's advertising identifier (IDFA). On Android, the Google Analytics and Meta SDKs may read the device's advertising ID; you can reset or delete that ID in your Android settings. The Wear OS app declares Android's advertising-ID permission but contains no analytics, advertising or crash-reporting component and does not read the ID.

None of these signals contains your workouts, body measurements, photos or health data.

Health data

WLog can integrate with Apple Health (HealthKit) on iOS and Health Connect on Android. This integration is entirely optional and off until you grant permission.

• On the phone, WLog writes your finished workouts, with their duration and the calories burned (measured by your watch when you trained with one, estimated otherwise), and reads and writes body weight. The phone does not read your heart rate. A workout you run on an Apple Watch is saved to Apple Health by the watch; a workout you run on a Wear OS watch is saved to Health Connect by your phone.
• On Apple Watch, WLog reads heart rate and active energy while a workout is running and saves the session to Apple Health as a workout.
• On a Wear OS watch, WLog reads heart rate and calories from the watch's sensors through Health Services while a workout is running. It asks for the watch's body-sensor (heart rate) and physical-activity permissions first; without them the workout runs with no heart rate or calories.
• Both watch apps send those readings to the WLog app on your phone. The session's average heart rate and calories are saved with that session and, if you use cloud backup, backed up with it.
• Only if you turn on Health sync in Nutrition settings, the phone writes the energy, protein, carbs, fat and fiber of each food you log as a nutrition record. It does not read nutrition data from your health store.
• Body weight read from the health store is shown with your body measurements in the app.
• Steps (optional, off by default). Only if you turn on step reminders in Profile → Notifications & reminders → Daily wellness, WLog reads your step count from Apple Health or Health Connect on your phone. It reads it in the background (iOS background delivery; a background read on Android) to decide whether to send you at most two step reminders a day. WLog keeps only the current day's count needed for that check. Your step count is never synced to WLog's cloud and never sent to analytics or the AI features. Analytics only records that a step reminder was sent or opened, not how many steps you took.
• Water (optional, off by default). Your water log is kept on your device only and is not part of WLog's cloud backup. WLog writes it to Apple Health or Health Connect only if you turn on that option. Water you log on your Apple Watch or Wear OS watch is sent to your phone. Analytics records only that you logged water and your settings choices, never the amount; it does not include anything read from your health store.
• Movement breaks (optional, off by default). Movement breaks are local notifications. Analytics records how you used one (start, complete or abandon).
• All daily wellness reminders are local notifications scheduled on your device.
• Health data is used solely to show your progress in the app and to record your WLog sessions in your platform's health store.
• We never use health data for advertising or marketing, and we never sell or share it with data brokers.
• Health data is not sent to the AI features.
• You can revoke access at any time in the Health app (iOS) or Health Connect settings (Android) without losing your WLog training history.

Nutrition

The Nutrition tab lets you log what you eat against daily targets. This is how it handles your data:

• Your food log lives on your device. Foods, amounts, meals, daily targets, saved meals, custom foods and your streak are kept in the app's local database. With WLog PRO and an account they are also backed up to your own cloud backup (Google Firebase) so they follow you to a new phone, exactly like your workouts; deleting nutrition data or your account deletes that backup too. The barcode cache, the AI log counter and your Health sync choice stay on the device.
• The food library is built into the app (USDA FoodData Central, which is public domain, plus WLog's own entries for local dishes). Searching it sends nothing anywhere.
• Barcode scanning uses the camera only while the scanner is open, and the camera image is processed on your device. When a barcode is scanned, the barcode number is sent to Open Food Facts to look up the product — nothing else, and no account ID. Product data is cached on your device.
• "Describe it" is an AI feature, described under AI features. It only runs when you tap it and agree to a one-time consent sheet.
• Health sync is off until you turn it on. See Health data.
• Reminders. Meal reminders, an evening streak reminder and a Monday summary are local notifications scheduled on your device.
• Analytics. Nutrition events go to Google Analytics like the rest of the app and never include food names, meal text, barcodes or amounts.
• Deleting it. Open Nutrition → Settings → Delete nutrition data to erase your food log. Deleting your account erases it too.

Product data from Open Food Facts is available under the Open Database License; © Open Food Facts contributors.

AI features

The AI features — plan import, the weekly AI review and "Describe it" — are only for people aged 18 or over, in line with Google's Gemini API terms.

AI plan import

WLog can turn a camera photo, a screenshot, a PDF, a text or CSV file, or pasted text of a training program into structured routines. When you use this feature:

• Only the file you explicitly select, or the text you paste, is sent for processing — we do not scan your photo library.
• It is processed by Google's Gemini models, reached through Firebase, in order to extract exercises, sets and reps. Google handles that content under the Gemini API terms.
• The extracted routines are saved in the app like any other routine.
• To find and fix import mistakes, WLog keeps a copy of each image, PDF, text or CSV file and pasted text you import, together with the AI's full reply, in its cloud database for 30 days, tied to your user ID, and then deletes them automatically.
• We keep a log entry for each import: your user ID, the kind of input, file type and size, duration, the result and how many workouts and exercises it produced. If an import fails, the entry also holds the error message and up to the first 500 characters of the AI's reply, and the failure is reported to our crash reporting tool.

Automated extraction is not perfect. Always review an imported routine before training with it.

Describe it (AI food logging)

In Nutrition, you can type what you ate and have the app read the foods and amounts. It only runs when you tap it and agree to a one-time consent sheet. When you do:

• The meal text you typed is sent to Google's Gemini, reached through Firebase, which reads the foods and amounts. Google handles it under the Gemini API terms.
• When you state an amount, Gemini may also return a calorie and macro estimate. The app labels it as an AI estimate.
• WLog does not store the text on its servers. The 30-day retention described under AI plan import applies to imports only.
• Free users get 3 AI logs per day.

Weekly AI review

The weekly AI review is an optional feature that is not offered to every user. Where it is offered, it is off until you turn it on, and before anything is sent the app shows you what will be shared and asks you to agree. If you do, WLog sends the following to Google's Gemini to write the review:

• Your last 8 weeks of sessions: day, workout name and duration.
• Sets per exercise: weight and reps.
• Your best estimated one-rep maxes and personal records over those 8 weeks.
• Sets per muscle, your weekly goal and your streak.
• Body weight you logged, your goal, level, units and language.
• Only if you additionally agree to include nutrition: your daily totals (calories, protein, carbs and fat), your daily targets, which days were training days, and your body-weight entries for the reviewed weeks.

Your name, your e-mail address, your notes, the names of foods you logged, meal text, photos and data from Apple Health or Health Connect are not sent. You can switch the review off again at any time under Profile → Training preferences.

Sharing programs

WLog can turn one of your programs into a link (wlogapp.com/r/…) that you send to someone else. Nothing is shared until you tap share in the app. When you do:

• The program is stored in our cloud database: its name, its workouts, and for each exercise its name, sets and reps.
• So is the display name you type in the share sheet, which is shown to whoever opens the link. It does not have to be your real name.
• Only if you switch "show my results" on, we also store how many weeks you trained this program, how many workouts you finished, and one lift's starting and current weight. If you leave it off, none of this is stored.
• This data is public. Anyone who has the link can open it on the web or in the app, without an account. It is not listed or searchable, but we cannot control who you send the link to or who they pass it on to.
• The record also holds your user ID so that only you can change or remove it. The page that opens from the link does not show it.

Stopping: you can stop sharing a program from the app, which deletes the shared copy and makes its link stop working. Re-sharing the same program updates the same link. A copy someone already activated in their own WLog stays in their app; it is theirs.

Programs built in ChatGPT or Claude: if you add the WLog connector to an AI assistant and ask it to build a program, the assistant sends us only the program: its name, its workouts, and for each exercise its ID, sets and reps. We do not receive your conversation, your name or your account, and no WLog account is needed. The program is stored as a public link like the ones above, owned by WLog rather than by a person, and deleted automatically after 180 days. To stop abuse, we also keep a one-way hash of the network address that sent the request together with a counter, and delete it after two days. Your conversation itself is handled by the assistant's provider under its own privacy policy. See WLog in ChatGPT and Claude.

Invites and rewards: when someone activates a program you shared and finishes a first workout with it, WLog records which account invited which (user ID to user ID) so we can give the person who shared the program free PRO days. This record is not public. Only the two accounts involved can see it; the sharer is shown the name of the person who activated their program.

Sharing with a coach

You can let a coach follow your training on the WLog Coach web panel (coach.wlogapp.com). Nothing is shared until you send an invite from Profile → "My coach", or agree on the consent screen after importing a coach's program.

• You choose what they see: training history, programs, nutrition and body measurements, each switched on or off by you. The coach can read only those, cannot change any of it, and never sees your account details, custom exercises, saved foods, AI import logs or feedback.
• A short summary (recent workout counts, weekly goal, units and, if you share nutrition, your 7-day intake averages and targets) is kept with the link so the coach can see how your week is going.
• The link records your user ID, the coach's user ID, the name you gave and the scopes you picked. Invite links are single use and expire after 7 days.
• Stopping: "Stop sharing" in the app, or the coach ending coaching on the panel, deletes the link and the summary at once, and the coach loses access.

If you are a coach: you sign in to the panel with Google or Apple. We store your account, the name you show to clients, the programs you build and your client links. The panel uses Google Analytics, which sets first-party cookies, to count how coaches use it: which pages and client tabs are opened, and actions such as signing in, accepting an invite, saving or sharing a program, adding an exercise, ending coaching and changing the panel language. These events are tied to your account's user ID. They never include your clients' names or data, invite links, or the contents of a program beyond catalogue exercise IDs, and the page addresses sent to analytics have client IDs and invite tokens removed. You can block these cookies in your browser without losing any panel feature.

Data retention

• Training and account data — kept while your account is active, and erased from our cloud database when you delete your account.
• Local data — kept on your device until you delete it in the app, delete your account or uninstall the app. This includes your Nutrition food log, which you can erase on its own under Nutrition → Settings → Delete nutrition data.
• AI import logs and exit feedback — kept until we clear them or you ask us to erase them. Deleting your account in the app does not remove them.
• Shared programs — kept until you stop sharing them in the app. Invite and reward records are kept while both accounts exist.
• Coach links — kept until you or the coach stop sharing; unused coach invites expire after 7 days.
• Imported images, files, pasted text and AI replies — deleted automatically after 30 days. Deleting your account in the app does not remove them sooner; email us and we will erase them.
• Crash reports — retained for up to 90 days.
• Analytics — retained in aggregated, pseudonymous form for up to 14 months.
• Support messages — retained for up to 24 months so we can follow up on recurring issues.
• Purchase records — retained by Apple, Google and RevenueCat as long as tax and accounting rules require.

Your rights

Depending on where you live, you have the right to:

• Access a copy of the personal data we hold about you.
• Correct data that is wrong or out of date — most of it is editable directly in the app.
• Delete your account and data. See Delete your account.
• Export your data. The app has no export button; email us and we will prepare a copy of the data in your account by hand.
• Object to or restrict processing based on our legitimate interests.
• Withdraw consent for health access, notifications, camera or photos at any time in your device settings, and for the AI features and Health sync in the app.
• Complain to your local data protection authority.

If you are a California resident, note that we do not sell your personal information, and we will not discriminate against you for exercising your rights. The signals the app sends to measure our own advertising are described under Ads and attribution.

To exercise any right, email privacy@wlogapp.com. We respond within 30 days.

Deleting your data

You can delete your account from inside the app, without emailing anyone: open the Profile tab, tap the card with your name, then Account, then Delete account (guests see Delete guest data). The app asks you to confirm it is you, and needs an internet connection. This is irreversible.

What deletion removes:

• Everything in your cloud account: your profile, workouts, training history, body measurements, custom exercises and saved routines.
• Your sign-in. If you used Sign in with Apple, the app also asks Apple to revoke its token.
• Everything the app stored on the device: workouts and saved routines, training history, body measurements, custom exercises, personal records, reminders, progress photos, your Nutrition food log and the app's saved settings.

What deletion does not remove:

• AI import log entries, which are stored under your user ID.
• Exit feedback entries, including the one written when you delete. They carry a one-way hash of your user ID, not the ID itself.
• Your customer record at RevenueCat and the purchase records held by Apple or Google.
• Analytics, crash reports and support messages already collected, until they expire as described above.

To have the remaining entries erased, email privacy@wlogapp.com. Full step-by-step instructions are on the Delete your account page.

Children's privacy

WLog is not directed at children under 13 (or the minimum age in your country, where that is higher), and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact privacy@wlogapp.com and we will delete it.

Resistance training carries injury risk for developing bodies. Minors should train under qualified supervision.

Security

Data in transit is encrypted with TLS. Cloud data is stored on Google Cloud infrastructure with access rules that restrict each account's records to that account. Authentication tokens are held in the platform keychain or keystore, and the app uses attestation to reject requests from tampered clients.

No system is perfectly secure. If you discover a vulnerability, please report it privately to privacy@wlogapp.com before disclosing it publicly.

International transfers

Our providers operate globally, so your data may be processed outside your country, including in the United States. Where data leaves the EEA or UK, transfers rely on the European Commission's Standard Contractual Clauses or an equivalent approved safeguard offered by the provider.

Changes to this policy

We update this policy when the app changes. The revision date at the top always reflects the current version. For material changes that affect how we use your data, we will notify you in the app or by email before the change takes effect.

Contact

Questions, requests or complaints about privacy: privacy@wlogapp.com.

For help using the app, see Support. For the rules of using WLog, see the Terms of Service.