Privacy Policy

REPcount by Albrektsson Innovations AB

Last updated: March 7, 2026

1. Introduction

REPcount ("we", "us", "our") is operated by Albrektsson Innovations AB, a Swedish limited company (org. nr 559573-9003), with its registered office in Sweden. We provide the REPcount mobile and web application ("the App") available at repcount.life. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you use our App.

By using the App, you consent to the data practices described in this Privacy Policy. If you do not agree with this policy, please do not use the App.

2. Information We Collect

A. Information You Provide Directly:

• Account Information: name, email address, password (securely hashed by our authentication provider)
• Profile Information: gender, age, weight, height, fitness level (1-10), country, profile photo/avatar
• Journal Entries: mood (1-10), energy (1-10), stress (1-10), sleep hours, weight, personal notes
• Challenge & Program Content: challenge names, cover images, commitment goals, digital signatures
• Influencer Applications: display name, bio, social media links, contact information, business details, banking/payout information

B. Information Collected Automatically:

• Device timezone and language/locale (derived from your browser or device settings — no GPS location data is collected)
• Exercise session data: repetition counts per exercise type, session duration, pause count
• App usage data: subscription status, experience points (XP), level, challenge and program participation
• Push notification device tokens (via our notification service provider)

C. Information from Third-Party Services:

• Subscription management provider: subscription status, purchase events, entitlement data
• Authentication provider: authentication tokens, email verification status
• Notification service provider: notification delivery status

3. Camera Data

• Camera video is processed ENTIRELY ON YOUR DEVICE (client-side). No video, images, frames, or raw camera data is ever uploaded to, transmitted to, or stored on our servers or any third-party servers.
• The AI model runs locally in your browser or app. Only pose landmark coordinates are used for real-time exercise counting within the app.
• Only the final numerical repetition counts (simple integers) are saved to our database.
• Camera access requires your explicit permission and can be revoked at any time through your device settings.
• We do not perform facial recognition, biometric identification, or any form of surveillance.

4. Health & Fitness Data

With your explicit permission, the App may access health data from Apple HealthKit (iOS) or Google Health Connect (Android).

• We may read step count data to display your daily activity within the App.
• Health data is used solely to display your fitness activity in the App and is NOT used for advertising, data mining, or any purpose other than providing you with the service.
• We do NOT sell, rent, share, or disclose health data to any third party for marketing or advertising purposes.
• Health data access can be revoked at any time through your device's health settings.
• In compliance with Apple's HealthKit guidelines, we do not store personal health information in iCloud.

5. How We Use Your Information

We use your information for the following purposes:

• Provide, maintain, and improve the App and its features
• Track and display your exercise performance and progress
• Facilitate social features including challenges, programs, friend activity, and group progress
• Send push notifications (session reminders, challenge updates, friend requests, achievement notifications)
• Process subscriptions and payments through the respective app stores and our subscription management provider
• Generate AI-powered meal plan suggestions and fitness goals (your name, fitness level, and session count are sent to a third-party AI service for this purpose)
• Calculate influencer commissions and process payouts
• Respond to support requests and communicate with you
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

6. Third-Party Services & Data Sharing

We share data with the following categories of third-party services solely for the purpose of operating the App:

• Cloud Infrastructure Provider: Database storage, user authentication, and server-side processing. All user data is stored on secure, certified cloud infrastructure.
• Subscription Management Provider: Your user ID and purchase events are shared for subscription and payment processing.
• Push Notification Provider: Your user ID and device token are shared for notification delivery.
• AI Service Provider: Your name, fitness level, and session count are shared when you use AI-powered meal plan and goal generation features.
• App Store: Payment processing for subscriptions.

We do NOT sell your personal data to any third party.

We do NOT share your data for advertising or marketing purposes.

We do NOT use third-party advertising networks or tracking pixels.

Each third-party service processes data in accordance with their own privacy policies, which we encourage you to review.

7. Children's Privacy

REPcount is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13 without verifiable parental consent.

Children under 13 may only use the App through Family Challenge or Kids Challenge features, which must be created and supervised by a parent or legal guardian. When a parent or guardian creates a Family or Kids challenge, they consent to the collection of the following data for their children:

• Name, age, and avatar image
• Exercise session data (repetition counts and session duration)

We do NOT collect camera data or health data from children's profiles. Children do not have independent accounts and cannot use social features.

Parents or guardians may request access to, correction of, or deletion of their child's data at any time by contacting support@repcount.life.

If we discover that we have collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete such information promptly.

This policy is designed to comply with the U.S. Children's Online Privacy Protection Act (COPPA), the EU General Data Protection Regulation (GDPR) provisions regarding children's data, and other applicable children's privacy laws.

8. Data Storage & Security

Your data is stored on secure cloud infrastructure that provides:

• Encryption in transit using TLS/SSL
• Encryption at rest using AES-256 encryption
• SOC 2 and ISO 27001 certified data centers

Profile images are stored as encoded data within our database. Passwords are securely hashed by our authentication provider and are never stored in plaintext.

Database security rules restrict data access to authorized users only. Your personal data is accessible only to you and, where applicable, to other participants in your challenges or programs (e.g., exercise progress shared within a group).

While we implement commercially reasonable security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

9. Data Retention

• Active Accounts: Your data is retained for as long as your account remains active.
• Exercise Sessions & Journal Entries: Retained for the life of your account to provide historical progress tracking.
• Account Deletion: Upon request, your personal data will be deleted within 30 days. Some anonymized or aggregated data may be retained for analytical purposes.
• Influencer Records: Commission and referral records are retained for 7 years after account closure for tax and legal compliance.
• Backup Data: May persist in encrypted backups for up to 90 days after deletion.

10. Your Rights

All users have the right to:

• Access: Request a copy of your personal data by contacting support@repcount.life.
• Correction: Update inaccurate information through Profile Settings in the App.
• Deletion: Request deletion of your account and personal data by contacting support@repcount.life.
• Notification Control: Opt out of push notifications via in-app Notification Settings or device settings.
• Privacy Control: Control visibility of your progress to friends via the "Show Progress to Friends" toggle in Notification Settings.
• Withdraw Consent: Revoke camera or health data access through your device settings at any time.

11. Rights for EU/EEA Users (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Object: Object to processing of your data based on legitimate interests.
• Right to Lodge a Complaint: File a complaint with your local data protection supervisory authority.

Legal Basis for Processing:

• Contract Performance: Processing necessary to provide your account and the App's features.
• Consent: Camera access, health data access, push notifications, and AI feature usage.
• Legitimate Interest: App improvement, security, and fraud prevention.

Data Controller: Albrektsson Innovations AB, Sweden. Website: repcount.life. Contact: support@repcount.life

12. Rights for California Users (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information.
• Right to Opt-Out of Sale: We do NOT sell your personal information. No opt-out is necessary.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Correct: You may request correction of inaccurate personal information.

We do not use or disclose sensitive personal information for purposes other than providing the App's services.

To exercise your CCPA/CPRA rights, contact us at support@repcount.life. We will respond within 45 days.

13. International Data Transfers

Your data is processed and stored on cloud servers primarily located in the United States.

For users in the European Union/EEA: International data transfers are covered by Standard Contractual Clauses (SCCs) and our cloud provider's data processing terms, which provide adequate safeguards for the transfer of personal data outside the EU/EEA in compliance with GDPR.

By using the App, you acknowledge and consent to the transfer of your data to the United States and other countries where our service providers operate.

14. Push Notifications

We use a third-party service to deliver push notifications. Types of notifications include:

• Session reminders based on your timezone
• Challenge and program updates
• Friend requests and activity notifications
• Achievement notifications

You can control notifications through:

• In-app Notification Settings (toggle individual notification types)
• Device settings (disable all push notifications)

Your user ID is mapped to your device's push notification token. No additional personal data is shared with our notification provider beyond what is necessary for notification delivery.

15. Cookies & Local Storage

The App uses browser localStorage (not cookies) to store:

• Voice preferences (selected voice, rate, pitch) for exercise counting audio
• Influencer referral codes (stored for 30 days)
• Language/locale preferences

We do NOT use third-party tracking cookies, advertising cookies, or analytics pixels. We do NOT use Google Analytics, Facebook Pixel, or similar tracking services.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

We will notify you of material changes by posting the updated policy within the App or by sending a notification to your registered email address. The "Last updated" date at the top of this policy indicates when the most recent changes were made.

Your continued use of the App after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Albrektsson Innovations AB
Website: repcount.life
Email: support@repcount.life

For GDPR-related inquiries, you may also contact your local data protection supervisory authority.

We will make reasonable efforts to respond to all privacy inquiries within 30 days.

---