Privacy Policy

Last updated: April 12, 2026

Overview

repsheets is a workout tracking Progressive Web App (PWA) that uses Google Sheets as its data storage backend. This policy explains what data we access, how we use it, and your rights as a user.

Data We Access

Google Account Information
When you sign in, we access your Google account name and email address solely to identify you within the app and display your profile.

Google Sheets
With your permission, we read from and write to Google Sheets files you select. This data includes workout routines, exercises, sets, reps, and weight entries that you create within the app.

Google Drive (limited)
We use the drive.file scope to access only files that were created by or explicitly opened in repsheets. We do not access your broader Google Drive.

How We Use Your Data

• Workout tracking: Reading and writing workout data to your chosen Google Sheet.
• Authentication: Maintaining your signed-in session and refreshing your access token so the app works without repeated sign-ins.
• Offline access: Caching your workout data locally on your device (via IndexedDB) so the app works without an internet connection.

We do not use your data for advertising, analytics, or any purpose beyond the core workout tracking functionality described above.

Data Sharing and Third Parties

We do not sell, rent, or share your personal data or Google user data with third parties.

The only external service involved in authentication is a Cloudflare Worker used solely to handle OAuth token refresh. This service does not store your data and does not have access to your Google Sheets content.

If you use Coach mode and share your Google Sheet with other users, that sharing is managed entirely through Google's own sharing controls. repsheets does not independently transmit your data to other users.

Data Storage and Retention

• Google Sheets: Your workout data lives in your own Google Sheet, in your own Google account. We have no independent copy.
• Local cache: Workout data is cached on your device for offline use. You can clear this at any time by clearing your browser's site data.
• Tokens: Authentication tokens are stored locally on your device and are used only to communicate with Google's APIs on your behalf.

We do not maintain any server-side database of your personal information or workout data.

Your Rights

You can revoke repsheets' access to your Google account at any time via Google Account permissions. Revoking access will sign you out of the app and prevent further reads or writes to your Google Sheets.

Security

We use Google's OAuth 2.0 flow for authentication. Access tokens are stored locally on your device and transmitted only over HTTPS. We do not store credentials on any server.

Changes to This Policy

If we make material changes to this policy, we will update the "Last updated" date above. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy, please contact:
Eric Heflin
ejheflin@gmail.com