Your workout data stays under your control.

Information We Collect

The information we collect depends on how you use Simple Muscle:

• Workout data: workout names, scheduled days, exercise plans, sets, reps, weights, durations, rest timer state, active workout state, completed sessions, exercise history, and weekly summary data.
• Preferences: weight unit, week-start preference, default rest duration, sync bookkeeping, and similar app settings.
• Account data: email address, display name, profile image if provided by a sign-in provider, provider account identifiers, verification records, session tokens, and authentication metadata such as IP address and user agent.
• Connected client data: if you connect an AI assistant or other MCP client, we store OAuth application, token, and consent records needed to authorize that connection.
• Messages you send us: email address and the content of support, feedback, privacy, or deletion requests.
• Website and server logs: standard technical logs may include requested pages, timestamps, IP address, device or browser information, and error details.
• Website analytics: on simplemuscle.ai and p.simplemuscle.ai, Plausible Analytics helps us understand aggregate visits and conversion events such as page views, referrers, device or browser type, approximate location, and clicks on key website calls to action.

Local Storage and Optional Sync

The Simple Muscle iOS app, when available, stores workout data locally on your device. If you do not create an account, that training data is not synced to the Simple Muscle server by the app.

If you sign in from the iOS app with an active paid plan, your workout templates, completed sessions, preferences, and related sync records are mirrored to the Simple Muscle server for backup, restore, multi-device sync, and connected features. The web dashboard and MCP connection can be used independently of that app subscription. Deleted synced items may leave limited tombstone records so deletion can propagate correctly across your devices.

Optional AI and MCP Connections

Connecting an AI assistant or other Model Context Protocol (“MCP”) client is optional. The iOS app does not automatically send your data to an AI service. Workout data you enter in the app is stored on your device and, when account sync is enabled, collected by syncing it to your Simple Muscle account as described above.

An AI or MCP client cannot access your personal account or workout data without an authorized connection. The standard connection flow asks you to review and approve the client on an authorization screen. Once authorized, Simple Muscle sends basic account identity to the client: your email address and, if present, your display name and profile image. The client can then request the workout data stored in your Simple Muscle account, including your weight-unit preference; workout names, schedules, exercises, targets, and notes; completed sessions; logged sets, reps, weights, and durations; and exercise history and progress. Workout data is returned when the connected client calls the relevant Simple Muscle tools; it is not automatically sent in bulk merely because you connect.

The connection can also let the client create, rename, schedule, archive, or delete workout plans; add, remove, or reorder exercises; and change exercise targets and notes. Completed training history is read-only for connected clients.

The connected assistant or client, the company that provides it, and any subprocessors it uses may process information returned through the connection. Their own terms, privacy policies, retention practices, model-training choices, and account controls apply. Simple Muscle does not control their independent use or retention of data they have already received. Review the connected service's privacy and data-control settings before approving.

You can disconnect Simple Muscle from the AI service or MCP client's connector settings to stop future access. You may also contact hello@simplemuscle.ai to request server-side revocation, or delete your Simple Muscle account. Revoking a connection prevents future access through Simple Muscle but does not delete information the third-party service received before revocation; contact that service for deletion under its policy.

How We Use Information

• Provide workout planning, set logging, rest timers, history, and progress views.
• Authenticate accounts through email one-time codes, Sign in with Apple, or Google.
• Back up, restore, and sync your training data when account sync is enabled.
• Operate authorized AI or MCP connections that can read or edit your workout data.
• Send transactional email, such as sign-in codes and account-related messages.
• Measure aggregate website usage and interest in launch or waitlist calls to action.
• Maintain security, prevent abuse, debug errors, and respond to support requests.
• Comply with legal obligations and enforce our Terms and Conditions.

Notifications, Live Activities, and Audio

The Simple Muscle iOS app, when available, may ask iOS for permission to send local rest-timer notifications. These notifications are scheduled on your device to tell you when rest is over. Live Activities and Dynamic Island views display current workout details, such as exercise name, set number, target value, and rest timer status, through iOS. You can control notification and Live Activity permissions in iOS settings.

Third Parties and Sharing

We do not sell your personal information or share it for cross-context behavioral advertising. We share information only as needed for the service, including:

• Infrastructure providers that host the app backend, database, website, and logs.
• Email delivery providers that send one-time passcodes and account email.
• Plausible Analytics for privacy-friendly website usage and conversion metrics.
• Apple or Google when you choose their sign-in options.
• The specific third-party AI assistant, MCP client, or other integration that you choose to connect and explicitly approve, as described in Optional AI and MCP Connections above.
• Law enforcement, regulators, or other parties when required by law or to protect rights and safety.
• A successor organization if Simple Muscle is involved in a merger, acquisition, financing, or asset transfer.

Retention

Local workout data remains on your device until you delete it, reset the app data, or uninstall the app. Synced workout and account data is retained while your account is active or as needed to provide sync, security, support, and legal compliance. Email one-time passcodes expire quickly, and mobile sessions are designed to expire if not refreshed. Backups, logs, and deletion tombstones may remain for a limited period, or longer where needed for security, legal, or sync integrity reasons.

Your Choices and Rights

• You can use the tracker without an account.
• You can sign out at any time; your local training data remains on the device.
• You can adjust notification permissions in iOS settings.
• You can disconnect a connected AI or MCP client through that service's connector settings, contact us to request server-side revocation, or delete your Simple Muscle account.
• Depending on where you live, you may have rights to access, correct, export, delete, or object to certain uses of your personal information.

To make a privacy, access, correction, export, or deletion request, email hello@simplemuscle.ai. We may need to verify your request before acting on it.

Security

We use reasonable administrative, technical, and organizational safeguards for the service. The iOS app, when available, stores account bearer tokens in the iOS Keychain. No method of storage or transmission is perfectly secure, so we cannot guarantee absolute security.

Children

Simple Muscle is not directed to children under 13. If you believe a child provided personal information without appropriate consent, contact us and we will review the request.

International Use

Your information may be processed in countries other than where you live. When we transfer or process information internationally, we use safeguards appropriate to the nature of the information and the service.

Changes to This Policy

We may update this Privacy Policy as Simple Muscle changes. The updated version will be posted on this page with a new last-updated date. If changes materially affect your rights or the way we use your information, we will provide additional notice when appropriate.

Contact

For privacy questions or requests, email hello@simplemuscle.ai.