Symmachos is built by one person who trains, not a company with a data strategy. Here's the honest version of what we collect and why, in plain English -- for both the app and this website.

To run your account: your email address, a hashed password (it comes out as gibberish even to us, so we genuinely can't see your actual password), and a display name.

To run the app: the workouts, exercises, day templates, and sets/reps/weights you log; food and macro entries, custom foods you add, and daily targets; bodyweight entries and goals; and progress photos you choose to upload.

If you use barcode scanning or the food search, the barcode or search term is sent to Open Food Facts (a free, public, open food database) to look up nutrition info. Nothing else about you goes with that request.

The gym directory used for check-in (name/address/location search) is sourced from OpenStreetMap, © OpenStreetMap contributors, available under the Open Database Licence (ODbL) -- see openstreetmap.org/copyright. If you turn on geofenced auto-check-in, your location is only checked while the app is open (never in the background) against gyms you've personally checked into before, stored on your device.

This site itself doesn't have accounts, doesn't set tracking or advertising cookies, and doesn't run analytics that fingerprint you. The one interactive part is the Find a Coach search: the location and radius you enter get sent to our API to look up nearby coaches and come straight back as a results list. That's it -- we don't store your search or log it against an identity, because there isn't one to log it against.

Standard web hosting logs (via Cloudflare) apply here the same as on any website -- request metadata like IP address and user agent, kept briefly for security and abuse prevention, not used to build a profile of you.

Account and log data lives in a Cloudflare D1 database. A copy is also kept on your device (in the app's local storage) so it keeps working offline and syncs when you're back online.

Progress photos are stored the same way as everything else you log, tied to your account only.

Foods added to the shared Food Library are visible to every account on the app (so we're not all adding "Chicken Breast, Cooked" separately), but only the person who added a food can rename or delete it. The built-in exercise library is visible to everyone and can't be edited by anyone.

Your workouts, sessions, bodyweight, macros, and photos are private to your account and not visible to anyone else, unless you explicitly turn on the Shared Progress feature to compare with a specific training partner.

If you're a coach using the Find a Coach directory, the profile info you choose to list (name, bio, general location) is visible to anyone browsing this website -- that's the point of a directory. Don't list anything there you wouldn't want a stranger to see.

We don't sell your data, full stop, and we don't hand it to third parties for advertising or marketing -- there's no ad network here to sell it to anyway. The only outside service the app talks to is Open Food Facts, for food lookups.

You can export everything tied to your account as a JSON file at any time from the app's account menu -- it's your data, you should be able to walk off with a copy.

To request deletion of your account and data, email ben.kyte@outlook.com -- there's no self-service delete button yet, just a real person reading it.

This app and website aren't intended for children under 16.

If this policy changes in a way that matters, it'll be noted here and in the app's in-app changelog rather than buried and hoped you don't notice.