PlateOS beta privacy policy

Last updated: 5 November 2026 · Effective from: 5 November 2026 · Version: beta (0.10.3)

PlateOS is a gym app for your iPhone. This page explains, in plain English, what happens to your data in the app during the beta, and on this website.

What the app collects, and when

• Your account. You sign in to use the app. You can sign in with Apple, with Google, or with a six-digit code sent to your email address. We get your email address from the sign-in method. Apple may give us a private relay address instead of your real one, and the app asks Apple for your email address only, not your name. If you use Google, our sign-in service may also store the name and picture link on your Google account. The app does not show or use them. We also hold a random account number made for you. Our sign-in service stores these when you sign in.
• Sign-in codes. If you ask for an email code, our email provider, Resend, sends it from [email protected], so it handles your email address for that.
• Your age. Before you can sign in, the app asks for your year of birth (optional) or for you to tick that you are 13 or older. See Children. If you give your year of birth, it stays on your iPhone. It is never sent to our server.
• What we save to your account. Saving your training to your account is part of how the app works. Once you press Continue (see Saving to your account), the app saves what you create in it:
  • Your workouts: sessions, exercises, sets (weight, reps, time, distance), rest days, notes you type, cardio you log (including calories you type in from a gym machine), race and conditioning results you enter, and exercises and workouts you make yourself.
  • Your plans: planned workouts, favourites, your repeating cycle and your best times. We keep the last 10 saved versions of each, so you can go back.
  • Your settings: units, plates and the bar, rest times, week start, text size, theme and appearance, your training style, experience, disciplines, HYROX division, country, gym setups, rep ranges, whether you have agreed to the health-information switch, and your other app choices: body-weight unit, how sets are logged, training days and split, rest-day suggestions, how progress is worked out, rest alerts and nudges, whether the weekly review notification is on, and the switches for how calories are shown, including whether eating targets are on (the switches only).
  We save only what the app creates. Anything made outside the app stays outside it.
• Body weight you log yourself. This is saved to your account only if you say yes to a separate question about the app keeping health information. It is never ticked for you. If you say no, or later withdraw, your logged weights stay on your iPhone only, and any we hold are erased from our server. Weights read from Apple Health are never saved to your account.
• Bug reports (your choice). If you tap Send report on the feedback button (the ladybug), the app sends what you typed or said as text and whatever you left ticked: the screen you were on, app and iOS version, iPhone model, a trail of recent taps and screens, and a screenshot. The trail can include the names of exercises, plans and favourites you tapped, what voice logging heard (words and numbers), messages the app showed you, values you edited, and log lines from your Apple Watch. Email addresses, links and long numbers in it are masked. You can add a name (optional). The report also carries a random number made for this install, which is not a device ID, so repeat sends can be limited. If you are signed in, the report is linked to your account. Nothing is sent until you tap Send report. If you choose “Email instead”, it goes from your own Mail app. A screenshot, if you add one, is deleted at our next clean-up sweep after its report is deleted. Reports are deleted after 180 days. When a report arrives, our email provider, Resend, sends an alert email to the owner’s mailbox, which is on Google Mail. The alert holds the report number, the kind of report and the screen. It does not hold what you wrote. Alerts sent before 5 November 2026 also held the text of the report. An AI assistant may also read the report (see Where it is kept and who can see it). See How long we keep it for how long the alerts are kept.
• Backup file (your choice). If you turn it on, the app writes a file (encrypted if you set a passphrase) to a folder you choose, such as iCloud Drive. It never comes to us. It is a separate extra copy, in your own folder, and it is not needed for your account.
• Apple Health workout (your choice). If you allow it, a finished workout is saved to Apple Health, with the calories your iPhone or Apple Watch measures. While a session runs, the app records a live strength workout, which also lets your Apple Watch show it. The app does not read your heart rate.

What never leaves your iPhone

These stay on your iPhone and are never saved to your account:

• Apple Health data of any kind. This includes workouts from other apps, calories, active and resting energy, body weight read from Health, food energy, and anything else the app reads from Health. The app never reads your heart rate, routes, sleep or steps. This includes run times you copy from a Watch workout into a HYROX result.
• Voice (optional). If you use voice logging, speech is turned into text on your iPhone, using Apple’s on-device speech models. Audio is held in memory for a few seconds and is never recorded, stored or sent anywhere. The text of what you said stays on your iPhone, apart from a bug report you choose to send. Dictating into a text box with the iPhone keyboard’s microphone is different: Apple handles that under its own settings, not ours.
• Your height, sex and year of birth. Whether you type them or the app reads them from Apple Health. Earlier beta builds could save them to your account if you had turned that on. The app now clears those copies the next time it saves your settings, and it never overwrites what is on your iPhone with a copy from the server.
• Names of training partners.
• Your activity trail (the list of recent taps and screens the app keeps for fixing bugs, which can include names you typed, such as a favourite or plan name, and what voice logging heard). It leaves your iPhone only inside a bug report you choose to send.
• Whiteboard photos. If you photograph a gym whiteboard to fill in a workout, the writing is read on your iPhone. The photo is not saved or sent anywhere.
• Personal notes to the app. Injuries, how you feel today, recovery taps, exercises you do not like, and what the app learns about how you talk.
• A safety copy. Before the app first saves your training to your account, it makes a temporary safety copy on your iPhone. It is not sent anywhere and is not included in iPhone backups. It is deleted once everything has been checked. If the check cannot finish, the copy stays on your iPhone until a later check succeeds, or until you delete your account or all your data.

Why we are allowed to use your data

• Saving your training to your account: contract (UK GDPR Article 6(1)(b)). Saving what you create is part of the service you signed up for, so it does not depend on your consent. Because of that, the way to say no is to export your data and delete your account. The Continue screen asks you to carry on after reading a notice. The app keeps a record on your iPhone that you pressed Continue.
• Body weight you log, and Apple Health features: your explicit consent (Article 6(1)(a) and Article 9(2)(a)). This is separate from the Continue screen, it is never ticked for you, and you can withdraw it at any time in You, then Your data. Withdrawing does not affect what we did before.
• Bug reports you send: legitimate interests in fixing faults (Article 6(1)(f)). You choose to send each one.
• Anonymous daily totals and live counts: legitimate interests in knowing how the service is used. See Analytics, ads and tracking.
• Beta sign-ups on this website: consent. See Beta sign-up.

Saving to your account: your first 15 days

When you first open the new version, one screen explains that the app now saves your training to your account. You can:

• Continue. The app saves everything you have logged and keeps saving as you train.
• Export my data. Make a file first. It is made on your phone and is not sent anywhere unless you share it.
• Keep on my phone for 10 days. You can do this once. After 10 days you can ask for 5 more days, once.
• Delete my account. This deletes your account and everything we’ve saved about you. Workouts already on your iPhone are not erased unless you choose to delete them too. We recommend exporting first, because deleting cannot be undone.

While you wait, nothing new is saved to your account. If you already had backup on, your workouts keep saving, and your plans, favourites and settings wait. On day 15 the app stays on that screen until you choose Continue or Delete my account. Export is still there. We do not delete anything for you, on your iPhone or on our server, and we do not save anything while you have not chosen.

Where it is kept and who can see it

• Your account and what we save to it are held by Supabase, our database and sign-in provider, in a project in London, UK. Supabase handles it on our behalf and under our instructions. It is sent over encrypted (HTTPS) connections only.
• Each account can only read and change its own rows. This is enforced by the database itself (row-level security). Other users cannot see your data. Friends and leagues are switched off in the beta.
• Who can see your data. You. Plinthwork Studio Ltd, which runs the app, can open the database to run the service and fix problems you report, for example by reading a bug report. The company uses an AI assistant (Claude, made by Anthropic) to help read and sort bug reports and to look into faults in the database. So the assistant can read the text, trail and screenshot of a bug report you send, and database content while it helps. Anthropic handles that under its own terms. We do not look at one person's training for any purpose other than running the service and fixing problems they report. Counts across all accounts (see Analytics, ads and tracking) do not identify anyone. We never sell your data, share it for advertising, or use it to profile you. Supabase handles it only as our processor.
• Apple and Google handle their own sign-in, and Apple handles TestFlight and your Apple Health data, under their own policies. Resend sends our sign-in emails (see above) and the alert email we get when a bug report arrives (see Bug reports above). Google runs the mailbox that receives the alert, and may handle it outside the UK.

Analytics, ads and tracking

None. The app has no analytics, no advertising, no tracking and no third-party software libraries. It does not use your data to track you across other apps or websites.

Anonymous daily totals. Each night we add up totals across all accounts, such as how many workouts and sets were logged and how many people trained. They hold no names, emails or account numbers. We keep these totals if you delete your account, and we keep a running total of accounts. They are not tracking and are not linked to any person. A total is kept only if at least 20 people are behind it, so it cannot be traced to you.

Live counts. We also look at the same kind of counts live, on a private page only the owner can open: for example how many workouts were logged this week, how many people are using the app, how often people come back and which exercises are most common. These counts never show one person, and any count based on fewer than 20 people is hidden.

How long we keep it

• Your account and what we have saved to it: until you delete your account. We do not yet delete inactive accounts automatically.
• Deleted items: when you delete a favourite or plan, we keep it for 30 days, then clear its contents. When you delete a workout, set or weight, we keep it, with its contents, marked as deleted so your other phones learn about it, until you delete your account. We do not yet clear those contents after 30 days.
• Plan versions: the last 10 saved versions of each favourite or plan. Older versions are removed.
• Bug reports: deleted after 180 days. If you were signed in when you sent one, deleting your account deletes it too. A screenshot is deleted at the next clean-up sweep after its report is gone. Reports sent while you were signed out are not linked to an account and are deleted after 180 days at the latest. Email us with the report number if you want one deleted sooner.
• Anonymous daily totals: kept.
• A record that an account was deleted: a random number and the time, kept so we can show we did it.
• Bug report alert emails: kept in the owner’s mailbox (Google Mail) until we delete them by hand. Alerts sent before 5 November 2026 also held the text of the report. Deleting your account does not remove them yet. Email us with your report number and we will delete the alerts for that report.
• Host service logs: our host’s logs for sign-in, database requests and server functions can hold IP addresses and device type. They are kept for about 7 days. Deleting your account does not clear them.
• Sign-in service log: our sign-in service keeps its own log of sign-ins, which may include your account number, email address and IP address. Deleting your account does not clear it yet.
• Our host’s own backups: may keep routine backups for up to 30 days after a deletion.
• On your iPhone: until you delete it or delete the app.

Deleting and exporting your data

• Export my data: You, then Account, then Export my data (CSV). This makes a file on your phone. It is not sent anywhere unless you share it. It is a copy of what your iPhone holds of what the app saves to your account, including rest days, notes and settings. It also has deleted items your iPhone still holds, but the iPhone forgets those after 30 days. Our server keeps deleted workouts, sets and weights for longer (see How long we keep it), and it may hold things this iPhone has not received yet, such as something saved from another phone. So the file can miss some of what we hold. Older versions of your plans are included when you are signed in and online. For anything the file does not show, email us and we will send it within one month. You, then Your data, then Export everything makes a wider file of what is on your iPhone, including things we never receive.
• Delete my account: You, then Account, then Delete my account. This deletes your account and everything we’ve saved about you. You need to be online. You can keep the copy on your iPhone or delete that too.
• Delete all my data: You, then Your data, then Delete all my data. If you are signed in, this deletes your account and what we have saved, as well as the data on your iPhone.
• You can also email us (see Who we are) for a copy of what we hold, or for it to be corrected or deleted.

What deleting your account removes: your account and sign-in details, and everything saved to your account: workouts, plans, favourites, cycle, best times, settings, logged body weight, plan versions, and bug reports linked to your account. It does not remove alert emails about your reports that are already in our mailbox (see below).

What remains after you delete:

• anonymous daily totals (see Analytics, ads and tracking);
• our host’s own backups, for up to 30 days;
• screenshots from your bug reports, until the next clean-up sweep;
• alert emails about your bug reports, in the owner’s mailbox, until we delete them (see How long we keep it);
• bug reports sent while you were signed out, for 180 days at the latest;
• a record that your account was deleted (a random number and the time).

Children

The app is for people aged 13 and over. Before you can sign in, it asks for your year of birth (optional) or for you to tick that you are 13 or older. If the year you enter says you are under 13, the app stops there: it keeps nothing, offers no sign-in, and sends nothing to our server. This check relies on what you enter. If you think a child under 13 has an account, email us and we will delete it.

This website

• No cookies, no analytics, no tracking pixels, no third-party scripts or fonts. So there's no cookie banner.
• This website is hosted on Cloudflare. Like every website host, Cloudflare briefly keeps standard server logs, such as your IP address and browser type, to deliver the page and stop abuse. We don't use them to identify or profile you.
• The fonts are stored on this website, so loading a page does not contact Google Fonts or anyone else.

Beta sign-up (this website)

• What we collect. If you use the "Want updates?" form on the beta page: your email address. If you arrived from one of our own links, we also keep a short tag saying which one (for example the home page or Reddit), so we know where sign-ups come from. It is a label on our link, not tracking: nothing on this website tracks you. We also keep a record that you sent the form agreeing to be emailed about the beta, and when. The form no longer asks for your name.
• Why. To send you updates about the PlateOS beta, and to tell you when there is room if the beta is full. Nothing else: no marketing, and it is never sold or shared. You do not need to leave your email to get the beta: the TestFlight button on the page takes you to Apple.
• Lawful basis. Your consent (UK GDPR Article 6(1)(a)). You can withdraw it at any time.
• Where it goes. The form sends your details to a small program (a Cloudflare Worker) that sits in front of this website. It saves them in Cloudflare's storage, so nothing is lost if an email fails, and emails a copy to the owner's mailbox. Cloudflare handles this on our behalf and under our instructions. Cloudflare runs a global network, so your details may be handled outside the UK, under Cloudflare's data protection terms.
• Stopping misuse. To limit repeat sign-ups, the Worker keeps a scrambled (hashed) form of your IP address, which changes every day, for up to two hours. Your IP address itself is not stored with your sign-up.
• How long we keep it. Up to 180 days, then it is deleted, from Cloudflare storage automatically and from the owner's mailbox by hand. If you join the beta through TestFlight, Apple handles that under Apple's own policies. We delete your sign-up sooner if you ask.
• Your rights and withdrawing. To withdraw your consent, or to see, correct or delete your sign-up, email [email protected]. Withdrawing does not affect anything we did with your consent before you withdrew it.

Your rights

Under UK data protection law you can ask to see, correct or delete what we hold about you, ask for a copy you can move elsewhere, restrict how we use it, or object to uses based on our legitimate interests. Where we rely on your consent, you can withdraw it at any time. You can do much of this yourself in the app (see above). Because saving your training is part of the service, the way to stop it is to delete your account. For anything else, email us and we’ll reply within one month. For your account and for saving your training, we rely on the contract between us. For logged body weight and Apple Health features, and for beta sign-ups on this website, we rely on your separate consent, which you can withdraw at any time. See Why we are allowed to use your data.

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint, though we’d appreciate the chance to put it right first.

Who we are

Changes

If the app changes what it collects, for example when friends, leagues or other sign-in methods are switched on, this policy will change before they go live, and the date above will be updated.

Version beta (0.10.3), 5 November 2026 (late evening). The app is now called PlateOS and the company behind it, Plinthwork Studio Ltd, is named as the data controller. A line says PlateOS is for use in the UK only for now. The owner can also see live counts across all accounts, never one person, with any count based on fewer than 20 people hidden. Contact is [email protected].

Version beta (0.10.1), 5 November 2026 (later that day). Corrections so this policy matches what PlateOS really does: bug reports now say that a Resend alert email goes to the owner's Gmail (it holds only the report number, kind and screen; older alerts held the report text) and that an AI assistant (Anthropic's Claude) can read bug reports and database content to help sort and fix them; the export file may miss items the server still holds, and deleted workouts, sets and weights keep their contents on the server until you delete your account; the settings list, what the activity trail holds, keyboard dictation and IP addresses in service logs are described fully; sign-in codes come from [email protected].

Version beta (0.10), 5 November 2026. The app now saves what you create to your account for everyone (before, backup was optional). Plans, favourites, your cycle, best times and settings are now saved too. There is a 10 then 5 day wait before saving becomes required. Export and delete wording is clearer, retention periods are listed, and anonymous daily totals are described. Height, sex and year of birth never leave your iPhone. Sign-in with Apple, Google and email codes is listed as it is in the app.

← Back to PlateOS