Privacy Policy

FreeReps is a self-hosted health data server. Your data stays on your own infrastructure — we never collect, store, or transmit your health data to any third-party service.

The FreeReps iOS app reads the following data from Apple Health and sends it to your FreeReps server:

• Activity and energy: steps, distances, active and resting energy, exercise, move and stand time, flights climbed, time in daylight, effort scores
• Body measurements: weight, body fat, lean body mass
• Vitals: heart rate, heart rate variability, resting and walking heart rate, heart rate recovery, respiratory rate, blood oxygen, VO2 max, body and wrist temperature
• Blood pressure
• Sleep analysis and mindful sessions
• Workouts (type, duration, distance, heart rate, GPS routes) and activity summaries (Move, Exercise, Stand rings)
• Caffeine and water intake
• State of mind entries

The app does not read clinical records, medications, vision prescriptions, ECG recordings, audiograms, symptoms, reproductive health data or nutrition beyond caffeine and water. In the server's settings you can switch off any of the data above; the app then stops sending it.

If you use Health Auto Export instead, it sends the data types you configure in it to the same server.

This data is sent exclusively to your self-hosted FreeReps server. No data is sent to Meltforce, Apple (beyond HealthKit), or any other third party.

If you connect them, your server reads data from Oura, Withings and Hevy using credentials you register yourself. Those credentials and the resulting access tokens are stored in your own database. Alpha Progression CSV exports you import from the app or the web interface are stored there as well. The requests go from your server to the provider directly; they do not pass through Meltforce.

All health data is stored in a PostgreSQL database on your own server. You are responsible for the security and backup of your data. FreeReps supports Tailscale for encrypted, authenticated access.

FreeReps does not track you. Neither the app nor the server contains analytics, advertising SDKs or telemetry. There are no third-party tracking domains.

FreeReps itself uses no third-party services. Your server talks to the data providers you connect, and to nothing else.

Since all data is stored on your own server, you have full control over deletion. You can delete data directly from the database at any time. Uninstalling the app removes all local configuration from your device.

FreeReps is not directed at children under 13. We do not knowingly collect data from children.

Updates to this policy will be posted on this page with a revised date.

For questions about this policy, open an issue on GitHub.