orkoutPrivacy
Last updated October 19, 2026
This page explains what data W-orkout (the workout app, the workout.wujo.dev website and the trainer website trainer.wujo.dev) collects, where it is stored, who can see it, what it is used for and how you can delete it.
Data and where it is stored
| Data | When | Stored |
|---|---|---|
| Workouts: exercises, sets, weight, reps, times, distance, notes | When you log a workout | On your phone. If you sign in: also a copy on our server for backup and sync. |
| Your plans: name, description, exercises, target sets/reps/weight, rest times, notes | When you create or edit a plan | On your phone. If you sign in: also a copy on our server for backup and sync. |
| Body profile: sex, birth year, height, weight, goal, level, days per week | When you fill it in the first time you open the app or edit it under Account | On your phone. If you sign in: also a copy on our server for backup and sync. |
| Body measurements over time: date, weight, height, waist, InBody readings (body fat, skeletal muscle, visceral fat, BMR), notes | When you add or edit a measurement | On your phone. If you sign in: also a copy on our server for backup and sync. |
| Account: account ID, email, name, profile picture, role (trainer or admin, if any) | When you sign in with Apple, Google or email (if you hide your email with Apple, we only receive Apple’s relay address) | Clerk (the sign-in service) and the W-orkout server. |
| Device: the app's install ID (random on iPhone, Android ID on Android), platform, phone model, system and app version, when the app was first and last opened | Every time the app starts, also before you sign in | The W-orkout server, to count the 30-day free trial. |
| Plan share links: a copy of the plan as it was when shared (name, description, exercises) and how many people saved it | When you create a share link (requires sign-in) | The W-orkout server. |
| Trainer connection: which trainer, since when, plans the trainer assigned, session packages (price, amount paid, sessions used), the trainer's private notes about you | When you accept a trainer's invite, and when the trainer assigns a plan or sells you a package | The W-orkout server. |
| Trainer application: headline, about you, experience, phone number, certificate images or PDFs, review result | When you send the application and upload files | The W-orkout server. Certificate files are kept private in Cloudflare R2, with no public link. |
| For trainers: trainer profile (headline, bio), client invites, session packages and promotions | When you use the trainer features | The W-orkout server. |
| Subscription (app plan or trainer plan): which plan, its end date, the App Store or Google Play transaction ID; for web payments: order number, amount, status and the payOS reference | When you buy a plan | The W-orkout server. Payments are handled by Apple, Google or payOS; W-orkout never receives card numbers or bank account details. |
| Gift vouchers: the code you entered, the campaign, when you redeemed it and when the free months end | When you redeem a code on workout.wujo.dev or trainer.wujo.dev | The W-orkout server. |
| Early-access email and platform (iPhone/Android) | When you submit the form on workout.wujo.dev | The W-orkout server. |
The W-orkout server and websites run on Cloudflare infrastructure (Workers, the D1 database and R2 file storage). Sign-in is handled by Clerk: your Apple, Google or email password only goes to Clerk; the W-orkout server never receives or stores it. Cloudflare and Clerk may process data on servers outside Vietnam.
When you buy a plan in the app, your W-orkout account ID is sent with the purchase to Apple or Google so the plan is linked to the right account. When it starts, the app asks Expo’s update server (EAS Update) whether a new version is available; that request carries no account or workout data. Rest-timer alerts are notifications scheduled on the phone itself; nothing is sent to the server. When the app hits an error or crashes, an error report (device model, OS and app version, what led to the error, your account ID) is sent to Sentry so we can fix it; reports are stripped of email, name, sign-in tokens and workout content.
Who can see your data
- You, on every device you sign in on.
- A trainer you connect with: only after you accept their invite and only while you stay connected. The trainer sees your name, email, profile picture, all your workouts (including each set and your notes), stats and progress per exercise, the plans they assigned and your session packages with them. The trainer does not see your body profile, your body measurements or your own plans. You can disconnect at any time under Account → My trainers; the trainer loses access right away. Packages already bought are kept for both sides.
- Your clients (if you are a trainer): your name, profile picture, headline and bio, the plans you assign and their session packages with you. Your private notes about a client or a package are never shown to the client.
- Anyone with a plan share link (workout.wujo.dev/p/…): the shared copy of the plan with your name and profile picture, never your email or workouts. Later edits to the plan do not change the link until you share that plan again. Copies people already saved are theirs. To stop a link: email us or delete your account.
- Anyone with a trainer’s invite link (workout.wujo.dev/join/…): that trainer’s name, profile picture, headline and bio.
- W-orkout admins: trainer applications (with email, name, phone number and certificate files) to review them; an account’s subscription status when support needs it; the early-access list.
- Apple, Google, payOS: payment details when you buy a plan, under their own policies.
What we use it for
- Showing your own history, stats and progress.
- Backing up and syncing your workouts and plans across devices when you sign in.
- Letting a trainer you connected with follow your workouts, assign plans and manage session packages; letting people with a link view a plan you shared.
- Trainer applications: for admins to review them and contact you about your application.
- Device, plan and voucher details: to count the free trial, verify purchases with Apple, Google or payOS and let you use the app while you have a plan.
- Early-access emails: only to invite you to the beta.
W-orkout does not sell data, does not show ads and does not use workout data or body measurements for advertising.
Before you sign in
Workouts, plans and your profile stay on your phone; the server only knows the device details in the table above, to count the trial. Deleting the app or losing the phone means losing your workout history. When you sign in, the workouts and plans recorded on the phone are uploaded to your account. Sharing plans, connecting with a trainer, applying to be a trainer, buying a plan and redeeming vouchers all require sign-in.
Websites
Apart from Clerk’s sign-in cookies on the subscribe and voucher pages and on trainer.wujo.dev, workout.wujo.dev only sets a lang cookie to remember the language you chose. Cloudflare reads your country from your IP address to pick the page language and the prices shown; the API uses your account or IP address to limit requests per minute against abuse. The websites load the Roboto font from Google Fonts. There are no advertising cookies or trackers.
Your rights
- View, edit and delete your workouts and plans, and view and edit your profile, right in the app.
- Disconnect from a trainer; withdraw a pending trainer application and delete the certificate files you uploaded.
- Delete your account and its data on the server at any time (see below).
- Any other request about your data (a copy, a correction, stopping a share link, questions): email contact@wujo.dev.
Deleting your account and data
In the app: Account → Delete account and data. This permanently deletes from the server: your workout history, your body profile and measurements, your plans and share links, your connections with trainers or clients along with assigned plans and session packages, your trainer profile, application and certificate files, your subscriptions, payment records and redeemed vouchers, and your sign-in account at Clerk. Device details are kept but no longer linked to the account, so the trial does not start again on the same phone. A plan bought through the App Store or Google Play keeps renewing until you cancel it in the store's settings. Signing out removes that account’s copy from the phone. Deleted data can remain in database backups (kept to recover from incidents) for up to 90 days before they expire; backups are not used for anything else.
Data on the phone (before you sign in) is deleted along with the app. Step by step, also without the app, and the full list of what is deleted or kept: Delete account.
Contact
Questions about your data, deletion requests, or to leave the early-access list: email contact@wujo.dev.
Changes
When this policy changes, the date at the top of this page changes with it.