The short version, in plain words. Questions? Email hello@tapreps.com.
Account info (name, email, password stored only as a secure hash). Client info trainers add (name, optional email/phone, goals, location for nearby places). Check-ins clients log: weight, sleep, energy, soreness, meals with estimated macros, hydration and workout progress. Basic technical data (IP address for security and rate limits, device push-notification tokens if you turn alerts on).
When a client snaps a meal, the photo is sent to our AI provider to estimate food and macros. We keep only a small thumbnail and the numbers — not the full photo. Our AI provider is set to not keep or train on your data.
Only to run Tapreps: show plans, track progress, send the alerts and emails you asked for, and keep accounts secure. We never sell personal data and we don't use it for ads.
Only service providers that help us run Tapreps: Cloudflare (hosting and database), Stripe (payments — we never see full card numbers), our email provider (sign-in and invite emails), and our AI provider (workout drafts, meal estimates, message drafts). Each only gets what it needs.
Weight, meals and similar check-ins can be sensitive. Clients share them with their own trainer by choice. Trainers at one gym can never see another gym's data.
Clients can ask their trainer, or us, to see, fix or delete their data. Gym owners can delete clients anytime. You can turn push alerts on or off on each device. Email hello@tapreps.com for any privacy request — we answer within 30 days.
Data is encrypted in transit, passwords are hashed, and access is limited to each gym. We keep data while the account is open and delete it within 30 days after it closes.
Tapreps is not for children under 13. Gym accounts require age 18+.
Depending on where you live (for example California or the EU), you may have extra rights such as access, deletion and opting out of "sale" — we don't sell data. Contact us to use them.