Draft, not yet reviewed by a solicitor. This page describes how the app is designed to work. It will be reviewed and finalised before the app is submitted to the Solana dApp Store. Nothing here is legal advice.
The short version
- Your wallet is your account. There is no email or password.
- Your workouts, body log and check-ins stay on your phone unless you switch sync on.
- Nothing about your health ever goes on the blockchain, not even as a hash.
- The app has no camera and no microphone permission.
- We do not sell your data and we do not show ads.
Who this is for
ChainReps is planned for ages 16 and up in the dApp Store. Minting the Elite Pass and getting a calorie estimate are for adults, 18 and up.
What we collect, and when
- Your wallet address. It is your account identifier. You sign in by signing a message with your Solana wallet (Sign-In With Solana). We never see your seed phrase or private key. A wallet address is pseudonymous, not anonymous, and it can be linked to other activity on the blockchain. It never appears on a screen other people can see; there you are your handle.
- A handle, if you choose one.
- Training data: workouts, sets, reps, weights, your plan, XP, streak, quests and league position. This is stored on your phone first. It is copied to our servers only if you switch on sync.
- Body stats you enter, such as weight, height and birth year. These count as health data. We ask for your explicit consent before they leave your phone, and you can withdraw it at any time.
- Coach check-ins: sleep, soreness, stress and energy answers, each day you choose to give them. They have their own consent switch, off by default, and the Coach works on your phone without it.
- Nutrition log, if you use it: meals, calories, protein, water and your goal. Its own consent switch applies as well.
- Game state: your Hero's look and wardrobe, your gym layout, and the Link and Fuel counters. The game never receives your calories, meals or weights; only a small daily Fuel number reaches it.
- Your health screening answers (the PAR-Q questions at sign-up) stay on your phone and are never sent anywhere.
- Purchase records for the optional Elite Pass. The mint itself is a public blockchain transaction.
- Crash reports if the app crashes, so we can fix it.
- A record of your consent choices, with the version of the text you saw, so we can show what you agreed to.
Camera and microphone
ChainReps does not use your camera or microphone and does not request those permissions. You log sets by hand.
Notifications
If you allow them, the app sets reminders on your phone, such as a Coach check-in or workout reminder. They are local notifications: nothing is sent from our servers, and they hold no health figures. You can turn them off in the app or in your phone's settings.
Where it is stored and who processes it
Data you sync is stored in the EU (Frankfurt). The services we use to run the app are:
- Supabase, which hosts the database and the sign-in functions.
- A Solana RPC provider, which relays wallet and pass-ownership requests.
- Sentry, which receives crash reports.
How long we keep it
| Data | Kept |
|---|---|
| Workouts, body log, plan | As long as your account exists |
| Coach check-ins and nutrition log | 180 days, then deleted automatically |
| A deleted account | 30 days, so you can change your mind, then permanently |
Your rights
You can export all your data as a file, correct it, delete it, or withdraw any consent at any time, from inside the app or by writing to [email protected]. Withdrawing sync stops new data from leaving your phone and offers to delete the copy we hold.
The Coach suggests and you decide. It does not make automated decisions about you with legal or similarly significant effects, and every suggestion comes with its reason.
What cannot be deleted
A minted Elite Pass or Forge avatar and its transaction live on the public Solana blockchain. Blockchain records are permanent and public, so we cannot erase them. Everything we hold ourselves can be deleted.
This website
This website sets no cookies and loads its fonts and pixel art from its own server. If we enable analytics it will be a cookieless service that does not track you across sites.