Never uploaded at all
Photos you attach to your own exercises stay in local storage and are never sent anywhere. Your password stays too, as a hash the app cannot reverse and never puts on the wire. Delete the app and this goes with it.
Weighted writes every set to your phone first, then syncs it to an account nobody else can read. A new phone costs you nothing. None of it is sold, and the app carries no advertising.
Photos you attach to your own exercises stay in local storage and are never sent anywhere. Your password stays too, as a hash the app cannot reverse and never puts on the wire. Delete the app and this goes with it.
Workouts, sets, custom exercises, weigh-ins, templates and your profile photo sync so they survive a reinstall or a new phone. They travel over HTTPS and sit behind row level security, which means the database itself refuses to hand your rows to another account.
Twenty named events, from opening the app to finishing a workout. No screen views, no taps, no session replay. Each carries a random id minted on your device, the app version, and at most a count or a label: how many sets, which plan. Never your email, your name or your bodyweight.
This website is a separate matter, and right now it is the simple case: the fonts, images and stylesheets all come from this domain, nothing on the page contacts anyone else, and there is no cookie, which is why no banner asks you about one. The one thing this site can put on your device is the currency you choose on the pricing page, and only if you choose one: it stays in your own browser, it is never sent anywhere, and clearing your site data removes it. A visitor counter is built and switched off. When it is switched on it will be PostHog in Europe, cookieless, and this paragraph changes on the same day.
The full policy covers your rights, how long things are kept and how to have an account deleted. Anything unclear in it is worth mailing about: support@weightedapp.com