Privacy Policy

We collect the following categories of data when you use BarMetrics:

Account Information

When you register, we collect your name, email address, and password (stored in hashed form). Coaches may also provide a timezone preference. Athletes may be invited via email by their coach. Athletes may also provide profile details used for coaching and competition planning: date of birth, gender, height, body weight, phone number, and location (country, state, city, ZIP code).

Training Data

This includes training blocks, session structures, exercise prescriptions, set logs (prescribed and actual weights, reps, RPE), movement records, and personal records (PRs). Coaches create programming data; athletes generate performance and logging data. Athletes can record body weight entries, which are visible to their coach. If their coach asks and the athlete agrees, athletes can import nutrition from Apple Health or Health Connect: daily totals of dietary protein, carbohydrates, fat and calories, plus the other nutrients the source app records (such as fiber, sugar, sodium, vitamins and minerals), from the one source app the athlete picks. We do not store individual foods or meal times. Nutrition entries logged by hand earlier stay in the athlete's history. Athletes can also choose to import their body weight (one reading a day) and how long they slept each night from Apple Health or Health Connect. Body weight entries logged by hand are never replaced by an import. See Health Data below. For athletes competing in meets, we store meet registrations (federation, division, weight class, weigh-in weight), attempt plans, and meet-day details such as venue, flight, and schedule.

Readiness and Feedback Data

Athletes may submit pre-session check-ins that include self-reported scores for sleep quality, soreness, hydration, nutrition, and stress levels, plus optional notes about pain or how they feel. After a session, athletes may rate how hard it felt (session RPE, 1–10) and add optional notes; older app versions recorded a 1–5 star rating instead. If an athlete imports sleep from Apple Health or Health Connect, the hours slept are shown next to their check-in.

Forms, Check-Ins, and Comments

Coaches may send athletes questionnaires (intake forms and recurring check-in forms) whose questions are written by the coach; athlete answers are free text and may include whatever information the athlete chooses to share, including health-related information. Responses may be automatically evaluated against coach-configured rules to flag answers for the coach's attention. Coaches and athletes can also exchange per-session comments, which are stored so both parties can view the discussion history.

Signed Agreements

When a coach requires you to sign an agreement, such as a release of liability, we store the text you signed along with your typed name, the date and time you signed, and the IP address and device you signed from. For athletes under 18, we also store the name, relationship to the athlete, email address, IP address and device of the parent or legal guardian who signs on their behalf.

Videos and Voice Recordings

If your coach uses the Session Review add-on, athletes can film their sets in the mobile app and send the clips to their coach. Clips include sound, so they may capture your voice, other people nearby and your surroundings. Coaches can record review videos in the browser. A review records the coach's camera and microphone, plus any drawing the coach adds over the clip. It does not record the coach's screen. We store each clip and review with its date, length, size and the session or set it belongs to.

Payment Information

Subscription payments are processed through Stripe. BarMetrics does not store your full credit card number, CVV, or other sensitive payment details. Stripe handles payment data in accordance with PCI-DSS standards. We store Stripe identifiers (customer, subscription, and payment references), subscription status, and billing period information. We also receive event notifications from Stripe (such as invoice and payment events) and retain their contents for up to 90 days for reconciliation and support, after which the detailed contents are deleted. For coaches who accept payments from athletes through BarMetrics (see Coach Payments below), we store the coach's Stripe Connect account identifiers and payout-readiness status.

Device and Usage Data

We collect basic technical information necessary to operate the Service, including browser type, device type, and session timestamps. When you use the mobile app, we also record your device model, operating system version and app version, including with each video you upload, so we can troubleshoot device-specific problems; this is never shown to your coach or other users. If you enable push notifications, we store a push subscription endpoint for your device.

The BarMetrics mobile app stores your training data locally on your device (in an on-device SQLite database) so it works offline, and synchronizes that data with our servers when connectivity is available. This on-device copy, including any health data imported from Apple Health or Health Connect, is excluded from iCloud and Android device backups.

We use the data we collect for the following purposes:

• Service delivery: To provide, maintain, and operate the BarMetrics platform, including displaying training programs, tracking performance, calculating analytics, and enabling coach-athlete communication.
• Notifications: To send in-app notifications (such as new PR alerts, variance alerts, and coach notes) and push notifications (such as session reminders) when you have opted in.
• Billing: To process subscription payments, manage plan changes, and communicate about billing-related matters.
• AI features: If your coach has the AI add-on, to produce AI training analysis and drafts for your coach. See AI Features below.
• Service improvement: To understand usage patterns through anonymized, aggregated data, identify issues, and develop new features. We never use health data imported from Apple Health or Health Connect for this.
• Account security: To authenticate your identity, protect against unauthorized access, and detect fraudulent activity.
• Communication: To send transactional emails related to your account, such as password resets, email confirmations, and athlete invitation links.
• Analytics: To understand how the web platform is used via Google Analytics, only when you consent through the cookie banner.

BarMetrics does not sell your personal data. We share data only in the following limited circumstances:

• Coach-athlete relationship: Coaches, and staff in the coach's organization who have access to the athlete, can view their athletes' training data, session logs, readiness scores, performance records, bodyweight entries, and imported health data: nutrition totals, body weight and hours slept (including the name of the source app). Athletes can view training programs assigned to them by their coach. An athlete's coach can watch the athlete's clips, and the athlete can watch the coach's reviews of them.
• Stripe: Payment information is shared with Stripe to process subscriptions and manage billing. Stripe's privacy policy governs their handling of your payment data. Stripe also powers payments from athletes to their coaches (Stripe Connect): when an athlete pays a coach through BarMetrics, payment is processed on the coach's connected Stripe account, and coaches complete Stripe's onboarding (including identity verification) directly with Stripe.
• Discord: If a coach connects a Discord server and an athlete links their Discord account, we store the athlete's Discord user ID and username and post training updates — such as the athlete's name and new personal records — to the configured Discord channels. Discord's privacy policy governs data on their platform. Athletes choose whether to link Discord and can unlink at any time.
• Google: Push notifications to the mobile app are delivered through Google Firebase Cloud Messaging, and notification content (such as titles that may include names or training details) passes through that service. The mobile app also uses Google Firebase Analytics as described below. Web pages load fonts from Google Fonts, which means your IP address and browser information are sent to Google when a page loads.
• Tigris and Fly.io: Video clips and review recordings are stored with Tigris, an object storage service run on Fly.io's infrastructure. Our servers, which also convert videos into playable formats, run on Fly.io.
• Mailgun: Transactional email (confirmations, password resets, invitations) is delivered through Mailgun, which processes recipient email addresses for that purpose.
• AI model provider: If a coach enables the AI add-on, the data described in AI Features below is sent to a third-party AI model provider, which processes it on our behalf as a sub-processor to produce AI training analysis and drafts for that coach. The provider does not use this data to train its models and deletes it within 30 days, except where it must keep it longer to enforce its usage policies or comply with the law.
• Push notification services: If you enable push notifications, your device's push subscription endpoint is used to deliver notifications through standard web push protocols (VAPID-authenticated).
• Legal requirements: We may disclose data if required by law, subpoena, or court order, or to protect the rights, safety, or property of BarMetrics, our users, or the public.

The BarMetrics mobile app uses Google Firebase Analytics to collect usage data — screens viewed and app events, including details of completed sessions and logged personal records (movement, weight, and reps) — and a device-scoped app-instance identifier. This data helps us understand how the app is used and improve it. It is not used for advertising, and we do not sell it. Firebase's handling of this data is described in Google's privacy documentation. You can disable analytics in the app under Profile → Settings. The web platform uses Google Analytics 4 to understand usage of the app. Analytics runs only if you accept the cookie banner; declining (or ignoring) it keeps analytics storage disabled. We do not use advertising trackers, and we do not sell your data. Health data imported from Apple Health or Health Connect is never sent to Firebase Analytics or Google Analytics.

We retain your data for as long as your account is active and as needed to provide the Service. Specifically:

• Active accounts: All data is retained while your account remains active.
• Deleted accounts: When you delete your account, personal data is permanently removed within 30 days. Billing records may be retained for up to 7 years as required for tax and legal compliance. You can initiate account deletion directly in the BarMetrics mobile app (Profile → Delete Account), which follows the same 30-day completion window.
• Imported health data: Kept while your account is active, including after you disconnect Apple Health or Health Connect. Disconnecting pauses new imports. To withdraw your consent and delete it, go to Profile → Health sync in the app and tap "Delete imported nutrition data", "Delete imported bodyweight data" or "Delete imported sleep data"; that data is removed from our servers and the app right away. When you delete your account, it is removed within 30 days. Neither one changes the copy in Apple Health, Health Connect or the app that wrote it there.
• Deactivated athletes: When a coach deactivates an athlete or an athlete leaves a coach, the athlete retains access to their own training logs and performance data. The coaching relationship data is archived but not deleted.
• Videos and reviews: The coach picks how long clips are kept: 90, 180 or 365 days. The default is 180 days. After that, a clip is deleted automatically, unless the coach pinned it. When a clip is deleted, its reviews are deleted with it, unless a review was pinned. Coaches can also delete clips and reviews at any time. If the coach's Session Review add-on ends, clips are read-only for 30 days and are then deleted, pinned ones included. If a clip can't upload because the coach's video storage is full, the app keeps trying for 7 days and then stops; the original stays in your phone's camera roll.
• Anonymized data: Aggregated, anonymized data from which individuals cannot be identified may be retained indefinitely for service improvement. It never includes imported health data.

Agreements signed with a coach through BarMetrics are an exception to the deletion schedule above. The signed text, the signature and the identifying details recorded with it — including those of a parent or guardian who signed for a minor — are kept for seven (7) years from the date of signing as legal records, regardless of account deletion, and are deleted automatically after that.

You can request account deletion, including without the app, on our Delete Your Account page.

BarMetrics uses cookies and local storage for the following purposes:

• Session cookies: We use essential session cookies to authenticate your identity and maintain your login state. These cookies are required for the Service to function and cannot be disabled.
• CSRF tokens: We use tokens to protect against cross-site request forgery attacks.
• Analytics cookies (optional): With your consent via the cookie banner, Google Analytics sets cookies to help us understand usage. Your choice is stored in your browser's local storage and can be changed by clearing site data.
• Recorder preferences: If you record a review in the browser, your chosen camera and microphone are saved in your browser's local storage so you don't have to pick them again. This stays on your device.
• IndexedDB (offline storage): If you use BarMetrics as a progressive web app (PWA), session data may be cached locally in IndexedDB to enable offline training functionality. This data is stored only on your device and is synchronized with our servers when connectivity is restored.

We do not use advertising cookies. Analytics cookies are set only with your consent.

You have the following rights regarding your data:

• Access: You can view all data associated with your account through the BarMetrics dashboard at any time.
• Export: You may request a copy of your data in a portable format by contacting us. This includes your video clips, review recordings, and health data imported from Apple Health or Health Connect.
• Correction: You can update your account information at any time through your profile settings.
• Deletion: You can request deletion of your account and associated data by contacting us. This includes your video clips, review recordings, and imported health data. Deletion will be completed within 30 days, subject to legal retention requirements. You can also delete imported health data right away in the app (Profile → Health sync, then the delete button for nutrition, bodyweight or sleep).
• Opt out of notifications: You can disable push notifications at any time through your browser or device settings. In the mobile app you can also turn off usage analytics in Profile → Settings.

To exercise any of these rights, contact us at support@barmetrics.app.

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with data protection laws, you may have additional rights under the General Data Protection Regulation (GDPR) or similar legislation. These include:

• Legal basis for processing: We process your data based on contractual necessity (to provide the Service), legitimate interests (to improve and secure the Service), and your consent (for optional features like push notifications). Health data is a special category of data under Article 9 GDPR. We process it to provide the Service (Article 6(1)(b)) and only with your explicit consent (Article 9(2)(a)), as set out in the next two items. You can withdraw consent at any time; withdrawing does not affect processing that happened before. Data sent to our AI model provider is processed to provide the AI features your coach enabled; nutrition totals are included only with your opt-in, imported bodyweight and sleep are never sent, and you can object to AI processing of your data: contact us and we will stop sending your data to the AI provider.
• Health data imported from Apple Health or Health Connect: Daily nutrition totals (protein, carbohydrates, fat, calories and the other nutrients your source app records), body weight (one reading a day) and minutes asleep each night. You give consent separately for nutrition, body weight and sleep when you connect each one. Disconnecting pauses new imports; your consent for us to keep what was already imported continues, so it stays in your history. To withdraw consent, tap the matching "Delete imported …" button in Profile → Health sync, which erases that imported data right away, or delete your account, which erases it within 30 days.
• Health data you log in the app: Body weight you enter by hand (bodyweight entries and the weight in your profile), pre-session check-ins (sleep quality, soreness, hydration, nutrition and stress scores, pain notes and general notes), post-session feedback (session RPE or star rating, and notes), and any health information you choose to write in form answers or session comments. You provide it to use the coaching service, and you give your explicit consent by choosing to enter it after accepting our Terms. All of it is optional. To withdraw consent, stop entering it. To have specific records erased, contact us at support@barmetrics.app; deleting your account erases all of it within 30 days.
• Right to restriction: You may request that we restrict the processing of your data under certain circumstances.
• Right to object: You may object to certain types of data processing based on legitimate interests.
• Data portability: You may request your data in a structured, commonly used, machine-readable format.
• Supervisory authority: You have the right to lodge a complaint with your local data protection authority.

BarMetrics's servers are located in the United States. If you use the Service from outside the US, your data will be transferred to and processed in the US. Video clips and review recordings are stored with Tigris, which may keep and serve copies from data centers in other regions, including outside the US, to deliver them faster. By using the Service, you consent to these transfers.

We take the security of your data seriously. Measures we employ include:

• Passwords are hashed using bcrypt before storage
• All data in transit is encrypted via HTTPS/TLS
• Authentication tokens (JWT) are used for session management
• Payment data is handled by Stripe in PCI-DSS compliant infrastructure
• Push notifications use VAPID authentication for secure delivery

While we implement reasonable security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but will promptly notify affected users in the event of a data breach.

BarMetrics is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16 without parental consent, we will take steps to delete that data promptly. If you believe a child under 16 has provided us with personal data, please contact us at support@barmetrics.app.

Athletes who are 16 or 17 may use the Service with the consent of a parent or guardian. Their video clips can be seen only by the athlete and their coach. Where a coach requires a signed agreement, such as a release of liability, the parent or guardian signs coach agreements through a link we email them, and we keep their name, relationship to the athlete and email address with the signed record.

A parent or guardian may request access to, or deletion of, a minor's data, including their video clips, at any time by emailing support@barmetrics.app.

This section covers nutrition, body weight and sleep data the BarMetrics mobile app reads from Apple Health (on iPhone) or Health Connect (on Android). It applies only if you choose to connect. Each one is a separate choice: connecting one does not connect the others.

• What we read (nutrition): Daily totals of dietary protein, carbohydrates, fat and calories (dietary energy), and of the other nutrients your source app records: fiber, sugar, saturated, monounsaturated, polyunsaturated and trans fat, cholesterol, caffeine, and vitamins and minerals (such as sodium, potassium, calcium, iron and vitamin D). They come from the one source app you pick (for example, MyFitnessPal or Cronometer). The app adds these up into daily totals on your phone. We never store or send individual foods, meal times, or any other nutrition data. When you connect or switch source app, the app reads up to the last 90 days (on Android, the last 30 days unless you also allow access to older data). After that, each sync re-reads the last 7 days, so edits to earlier days come through. BarMetrics only reads from Apple Health and Health Connect; it never writes to them.
• What we read (body weight): Your weight readings, from the one source app you pick (for example, a smart scale's app). For each day, we keep one reading, the earliest of that day, and the name of the app it came from. If you logged your weight by hand on a day, we keep your entry and skip the import for that day. When you connect, the app reads the last 30 days. After that, each sync re-reads the last 7 days.
• What we read (sleep): How long you slept each night, from the one source app you pick (for example, Oura or your watch's app). The app adds up the time asleep on your phone. We keep only the total minutes asleep for each night and the name of the app. We never store or send bedtimes, wake times, sleep stages, heart rate or any other sleep data. When you connect, the app reads the last 30 days. After that, each sync re-reads the last 7 days.
• Why: To show your nutrition, body weight and sleep next to your training, so you and your coach can see how what you eat, what you weigh and how you sleep relate to how you train. Imported body weight is used in the same places as body weight you log by hand, such as your bodyweight chart, protein per kilogram and meet projections.
• Who can see it: You, your coach, and staff in your coach's organization who have access to you. They also see whether each one is connected, the source app and when it last synced. Your coach can ask you to connect nutrition, but only you can turn any of them on, on your own phone.
• What we never do: We never use health data for advertising or marketing, never sell it, and never send it to analytics services such as Firebase Analytics or Google Analytics. We don't use it to train AI models, and we leave it out of the anonymized data we use to improve the Service. The copy on your phone is excluded from iCloud and Android device backups.
• AI training analysis: If your coach has the AI add-on, your daily nutrition totals and averages are sent to our AI model provider only if you turn on "Include nutrition totals in AI training analysis". It is off by default, and you can turn it off at any time in the app under Profile → Health sync. Only daily totals and averages are sent, never foods, meal times, micronutrients or the source app name. The provider does not use this data to train its models and deletes it within 30 days, except where it must keep it longer to enforce its usage policies or comply with the law. Imported body weight and sleep are never sent to our AI model provider.
• How long we keep it: While your account is active, including after you disconnect. If you switch to a different source app, the days already imported stay. For nutrition, where the new app also has a day in the last 90 days, its totals replace the old ones. For body weight and sleep, the new app replaces the days it also has in the last 30 days. Body weight you logged by hand is never replaced.
• How to stop or delete: Disconnecting in the app pauses new imports and keeps your history: your consent for us to keep what was already imported continues. To withdraw your consent, go to Profile → Health sync and tap "Delete imported nutrition data", "Delete imported bodyweight data" or "Delete imported sleep data". This erases that data from our servers and from the app right away, and also disconnects it; it needs an internet connection. Deleting imported body weight leaves the entries you logged by hand. Deleting your account also withdraws your consent and erases it within 30 days. You can also remove BarMetrics' access in iPhone Settings → Health → Data Access & Devices, or in the Health Connect app. Like disconnecting, that pauses new imports and deletes nothing. None of these change the data stored in Apple Health, Health Connect or the app that wrote it there.
• Consent records: We keep a record of when your coach asked or cancelled a nutrition request, when you connected (gave consent), switched source app, disconnected (paused imports) or deleted imported data (withdrew consent), for nutrition, body weight and sleep separately, and when you turned nutrition totals in AI training analysis on or off, so we can show that you agreed. These records hold no health values. We keep them for the life of your account, including after you delete your imported data, and delete them with your account.

Coaches can add an optional AI add-on that produces AI training analysis and drafts for the coach. Data is sent only for coaches who enable the add-on, and only about athletes that coach can access.

• What is sent: Session logs (sets, weights, reps, RPE), check-in answers, session comments, athletes' first names, and derived training signals such as estimated 1RM trends, training volume and readiness averages. Daily nutrition totals and averages are included only if the athlete turns on "Include nutrition totals in AI training analysis". Body weight and sleep imported from Apple Health or Health Connect are never sent. We do not send last names, email addresses, videos or payment details. For program import, the files the coach uploads; feedback drafts also use the coach's recent comments to match their tone. Check-in answers and comments are free text, so they may include any health information written in them.
• Why: To produce AI training analysis and drafts for that coach. Nothing is sent to the athlete automatically; the coach reviews it and decides what, if anything, to share.
• Who processes it: A third-party AI model provider, acting as our sub-processor. The provider does not use this data to train its models and deletes it within 30 days, except where it must keep it longer to enforce its usage policies or comply with the law.
• Turning it off: Coaches turn AI features off by removing the AI add-on. Athletes can turn off nutrition totals at any time. For any other question about AI processing of your data, contact support@barmetrics.app.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email or through an in-app notification at least 14 days before the changes take effect. We encourage you to review this policy periodically. Your continued use of the Service after the effective date of any changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact EARS, LLC at support@barmetrics.app.