Privacy Policy
ABP Kettlebell · Last updated: 29 October 2026
ABP is a kettlebell training log. This policy says what data the app handles, where it lives, and what we will never do with it. It is written to be read, not skimmed past.
The short version
- Your data is yours. Every session, movement, program, and number you log belongs to you.
- We never share your individual data with anyone outside ABP and the service provider that stores it for us (Supabase, below). Nobody else.
- No third-party analytics, no tracking.
What we collect
If you use ABP without an account, everything stays on your device and we collect nothing at all.
If you sign in (with Apple — the only sign-in method), your account syncs the following to our servers:
| Data | Why |
|---|---|
| Email address (via Sign in with Apple) | Account identification |
| Sessions you log | The point of the app |
| Movements you create | So a movement added on one device is there on the next |
| Programs you save | Same reason |
| Settings and preferences | App configuration |
| Timezone | Correct week boundaries for streaks |
That's it.
About movements you create. The built-in movement library ships with the app and is identical for everyone, so it is never uploaded. Only movements you write yourself — a name, and optionally a description and muscles — are synced, and they are treated exactly like your sessions: scoped to your account, never shared, exported and deleted with everything else.
What we do not collect
- Location
- Contacts
- Photos
- Calendar
- Hardware or advertising identifiers. With an account, the app keeps one random id of its own per install, used only to tell which of your devices is the active one.
- Behavioral analytics — we don't log which screens you open or how often
There are no third-party analytics SDKs in the app. No Mixpanel, no Amplitude, no Google Analytics, no Facebook SDK. We use server-side logs only. ABP does not use the IDFA or any cross-app identifier.
Where your data lives
Synced data is stored in Supabase, hosted on AWS infrastructure in the us-east-1 (US East) region. Your email is encrypted at rest, and every row of your data is scoped to your account by database-level Row-Level Security.
The app is local-first: everything also lives on your device, and the app works fully offline.
Aggregate stats
We may publish anonymous aggregate numbers like "1,000 sessions logged on ABP this week." When we do:
- The stat is computed by a server-side query that counts rows.
- No user-identifying information is in the result.
- The result is a single number, not a list.
- Only the aggregate number is ever published.
No aggregate stat is computed today. If we ever publish one, an opt-out will live in Settings before the first count runs, and opting out will exclude your sessions and your created movements; nothing else changes.
As of this update, no aggregate stat has been published yet — no count of any kind is being computed today.
We may one day count which movement names people add, to decide what belongs in the built-in library. If that ever happens it will be counts of names and nothing else — never your descriptions, never linked to you — and the same opt-out covers it. It is not built today.
Exporting your data
A full export — a JSON archive plus a CSV of your sessions — is available in Settings. Export is part of ABP Pro. Your data is never held hostage: your complete history stays readable in the app for free, and deleting your account is always free.
Deleting your data
You can delete your account in the app, at no cost, whether or not you have Pro. Deletion is immediate: it revokes your Sign in with Apple credential, removes your account, and permanently deletes all your data from the live database, right away. Encrypted backup copies kept by our hosting provider for disaster recovery expire within their retention window (currently seven days). No "we keep it in case you come back" tricks.
Who can access your data
Today, one person: the founder, who is also the developer and operator. Any future team member would be subject to a written data-access policy first. Database access is logged and requires explicit authentication. We do not bulk-export user data for any reason except encrypted disaster-recovery backups, a lawful subpoena (we would notify you when legally permitted), or your own export request.
Children
ABP is not directed at anyone under 16, and we do not knowingly collect data from anyone under 16. If you believe someone under 16 has created an account, contact us at [email protected] and we will delete it.
Changes to this policy
If we ever change this policy in a way that materially weakens these protections, we will:
- Notify all users via in-app message and email.
- Give you at least 30 days to export your data and delete your account if you disagree.
- Never apply weaker protections retroactively to data collected under stronger ones.
Contact
Questions about privacy: [email protected]
ABP Kettlebell is operated by ABP Ventures LLC, Raleigh, North Carolina.