Privacy Policy

Last updated: 3 October 2026

Grasp is a workout planner and logger. This policy explains exactly what it stores, where, and what we can see. It is short because the app does very little with your data.

• Grasp needs an account. Training is a record of your own body kept over years, and leaving it on a single device that can be lost is not looking after it — so signing in is what makes the backup, and the move to a new phone, possible.

  Your training is stored on your phone and backed up to your account. Nothing else is done with it: it is not sold, not shared, and not used to build a profile of you. Only the first sign-up needs signal — the planning and the weights are worked out on your phone, so every session after that works with no connection at all.

  The app has no advertising, no analytics, and no tracking. We do not sell or share your data with anyone.

  You can export everything and delete your account from inside the app, at any time.

Where your training lives

Everything — your workouts, sets, weights, routines, equipment, saved gyms and timers, and settings — is stored in a database file on your phone, and that copy is the one the app reads. It is what lets Grasp work with no signal.

That same data is backed up to your account so it can be restored if you lose the phone or move to a new one. That backup is the only copy that ever leaves the device.

Use Account → Export training to keep your own copy.

The one thing that happens before you sign in

When Grasp starts, it asks Expo's update servers whether a newer version of the app is available. This is how fixes reach you without waiting for a store release.

That request carries the app's version, your device platform (Android or iOS), and a random installation identifier generated on your device. Like any internet request, it also reveals your IP address to the server handling it.

It does not carry your training, your email, your name, or anything you have entered into the app. The identifier is random, is not linked to you, and is not used to build a profile or to track you between apps.

We mention it because "nothing leaves your phone" would otherwise be untrue, and a privacy policy that is nearly true is not worth reading.

If you create an account

We store:

• Your email address, so you can sign in.
• Your first name, if you typed one when signing up or if Google or Apple handed one over. It is used to greet you by it and for nothing else. Deleting your account deletes it along with everything else.
• Your training: workouts, exercises, sets, weights, reps, the routines you build, your saved gyms and interval timers, and the settings that shape how workouts are generated.
• Two answers from setup, if you gave them: where you heard about Grasp, and why you track your training. Both are optional and both can be skipped.
  These are the only things Grasp stores that do not change how the app works for you. They exist so we know where people are finding us and what they are here for, which is how a free app with no adverts decides what to build next. They are not shared, not sold, and not used to target anything at you.
• Anything you entered for the energy estimate, if you chose to: body weight, height, year of birth, and sex. All four are optional and can be left blank or cleared at any time — the app then either uses a rougher estimate or shows none at all. They are used for that calculation and nothing else.

We do not store your date of birth (the year alone is all the calculation uses), photographs, location, contacts, or health records from any other app.

The data is held on servers operated by Supabase in Frankfurt, Germany. It is protected so that only your account can read it.

Signing in and syncing means your device connects to those servers, which necessarily see your IP address, as any server does when you connect to it.

Signing in with Google, Apple, or Facebook

You can sign in with an email address and password, or with your Google, Apple, or Facebook account. Which one you choose changes who checks that you are you — it does not change what Grasp stores.

When you use one of those, they confirm your identity and hand us your email address, and a first name if they have one. That is the whole of it. We do not receive your contacts, your friends, your photos, your posts, or anything else you do on their services, and we cannot see them. Grasp never posts anything anywhere on your behalf, and asks for no permission to.

Signing in this way means Google, Apple, or Facebook know that you have an account with Grasp, in the same way they know about any other app you sign in to with them. What you train is never sent to them.

Apple's Hide My Email gives us a relay address instead of your real one. Grasp works exactly the same way with it, and we have no way of telling the difference.

Apple sends your name once, the first time you authorise the app, and never again. Apple's own sheet lets you edit it, or replace it with anything you like, before you agree — whatever you put there is all we ever receive.

What we never collect

No advertising identifiers. No analytics or usage tracking. No location. No microphone, camera, contacts, or calendar access. Grasp does not request these permissions.

We do not track what you do in the app — which screens you open, how long you spend, what you tap. The only thing recorded automatically is a crash, described below.

The two setup questions above are the exception, and the difference is worth stating: they are things you chose to tell us once, not a record of your behaviour collected while you used the app. You can leave both blank and nothing about Grasp changes.

We do not sell your data, share it with advertisers, or use it to train anything.

If the app crashes

When Grasp fails in a way it cannot recover from, it records what went wrong so it can be fixed: the error message and technical stack trace, which version of the app and which update were running, your platform, operating system version and device model, and when it happened.

It does not record what you were doing, what you had logged, or anything you typed. It is not a log of your activity — nothing is recorded while the app is working.

The report is stored against your account, in the same Supabase database in Frankfurt as your training. It is not sent to any third party. Grasp does not use Sentry, Crashlytics, or any other crash-reporting service, so nobody outside this project ever sees it.

If a crash happens with no connection, the report waits on your phone and is sent the next time there is one. Deleting your account deletes these along with everything else.

Deleting your data

In the app: Account → Delete account. This permanently removes your account and everything backed up to it. It cannot be undone.

Deleting your account does not delete the copy on your phone. To remove that, delete the app.

Keeping your own copy

Account → Export training gives you everything, as a spreadsheet (CSV) or a complete backup (JSON). It reads from the copy on your phone, so it works with no signal, and you can do it as often as you like.

Children

Grasp is not intended for children under 13, and we do not knowingly collect data from them.

Health and safety

Grasp suggests training weights based on what you have logged. It is not medical advice, and it cannot see your form, your health, or how you are feeling. Talk to a doctor before starting a new training program, particularly if you have an injury or health condition.

This website

This website (grasp.alsouq.tech) counts visits so we can see whether anyone reads it. The count is a daily tally and nothing else: which page was opened, in which language, roughly which country (worked out from your browser's time zone, not your IP address), whether the device is a phone, tablet or computer, which site linked here, and whether the App Store button was pressed.

It sets no cookies, stores nothing in your browser, and keeps no IP address, no browser details and no visitor id, so two visits from you are two anonymous counts that cannot be linked to each other or to you. Nothing is sent at all if your browser asks not to be tracked (Global Privacy Control or Do Not Track). The tallies are kept in the same EU-hosted database as the app's backups, and only we can see them. This counter is separate from the app and never touches your training data.

Changes

If this policy changes in a way that affects what we collect, the app will say so before the change takes effect.

Contact

Questions or requests about your data: grasp@alsouq.tech