Privacy Policy

Last updated 23 October 2026

This policy explains what Valleur Workout Tracker (“Valleur”) collects, why, who can see it, and how to delete it. Valleur is run by the developer named on its App Store listing. Contact us at any time at valleurtrack@gmail.com.

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

In short: Valleur has no ads and no third-party analytics, and it doesn’t track you across apps or websites. We don’t sell your data or use it for advertising or marketing. We only store health information, such as your body weight, if you agree to it.

What we collect

• Account details: your email address and a unique account ID. If you use Sign in with Apple, Apple gives us an email address (which can be a private relay address) and, the first time, your name. If you continue with Google, Google gives us your name, email address and a link to your Google profile photo. We don’t use the photo. Apple and Google only confirm who you are; we don’t send them your training data. Passwords are handled by our authentication provider and stored only in hashed form. We never see them. Guest accounts have no email or name, just a random ID.
• Profile: the name, username, bio and profile photo you choose, your training goal, experience, weekly target and training style, and your privacy settings.
• Training data: your workouts, plans, sessions (exercises, sets, weights, reps, times, effort ratings and notes), notes you pin to exercises, personal records, custom exercises and app settings.
• Social activity: who you follow and who follows you, follow requests, reactions, comments, the activity feed items created from your sessions and records, the phase recaps you choose to post, notifications, the people you block, and reports you make or that are made about your content. A report includes a copy of the reported content.
• Strength Score: the scoring formula you choose (men’s, women’s or an average of both) and any current bests you type in. Your score is worked out from these, your logged lifts and your body weight.
• Gyms and crews: the gym you choose to join, any gym you add (its name, suburb and state), the crew you start or join, crew invites you send and receive, whether you show your Strength Score at your gym, and the monthly challenge notifications we send you.
• Gym businesses: if you apply to make a gym official, the business name, ABN, website, your work email, your role and each site’s name and address, and our decision. If you run an official gym, which gyms you own or manage and the logo and website you add. We check the ABN on the public Australian Business Register.
• Coaching: if you use trainer tools, your business name, trainer code, when you accepted the trainer declaration, the clients connected to you and the private notes you write about them. If you connect with a trainer, that connection and the access level you chose.
• Health information, only with your consent: your body weight (optional, if you add it for your Strength Score or a check-in) and the weekly check-ins you send a trainer (body weight, how you slept, how training felt and a note). A trainer’s private notes about a client can also contain health information, such as an injury. We don’t record anything about the pre-exercise checks shown when you sign up.
• Technical data: our hosting provider processes your IP address and request logs to run and protect the service, and keeps them for a short time. We don’t use them to track you or to find your location.

We receive only the photos you choose: your profile photo and any photos you add to a workout (up to 3 a workout and 60 in total; adding more replaces your oldest). You choose them with Apple’s photo picker, and Valleur can’t see the rest of your library. Before uploading, the app shrinks each workout photo and saves it as a new image, which drops the location and camera details stored in the original. Rest-timer alerts, workout reminders, and the rest timer on your Lock Screen and in the Dynamic Island are run by your phone. If you turn on notifications from friends, we store your phone’s push notification token so we can send them, and delete it when you turn them off, sign out or delete your account. We also store which kinds of notification you want, your quiet hours and your phone’s time zone, so we only send the ones you chose, outside your quiet hours.

To work offline, Valleur keeps a copy of your data on your phone. Your sign-in session is kept in the iOS Keychain.

How we use it

• To provide Valleur: saving and syncing your training, calculating progress and personal records, and the social features you choose to use.
• To keep Valleur safe: preventing abuse, filtering objectionable content, reviewing reports and enforcing our Terms of Use.
• To reply when you contact us.

We don’t use your information for direct marketing, and we don’t send marketing emails. The only emails we send are about your account, such as confirming your email address or resetting your password.

Who can see your information

You decide in the app, under You → Privacy. Your profile, activity, personal records and followers list can each be public, visible to your followers, or visible only to you. If your profile is public, anyone can follow you; otherwise you approve each follower, and you can remove a follower at any time without them being told. People who follow each other are friends, which is what crews use. Photos on a workout are seen by the same people who can see that workout, on your profile and in their feed. Each session can also be hidden. People who can see your sessions can also compare their training with yours, using totals from the sessions you share. When people search for you, they can see your name, username and photo. People you block can’t see anything of yours. Guest accounts are never visible to other people.

If you connect with a personal trainer, they can see your profile, every session (including ones hidden from your followers), personal records, workouts, plans, progress and the weekly check-ins you send (including your body weight) for as long as you stay connected. If you give them edit access, they can also create and change your workouts and plans. You can change their access or remove them at any time under You → Your trainer, and they lose access straight away. Trainers can do this in the Valleur app or on Valleur Coach (coach.valleur.com.au), our website for trainers, which uses the same Valleur account and exactly the same permissions: a trainer sees only clients connected to them and changes only what a client has allowed. With edit access, they can also add custom exercises to your account for the workouts they build you. Trainers are independent of Valleur and responsible for how they use your information.

Gyms, crews and leaderboards

Joining a gym, and a crew, is optional. When you join a gym, its other members can see your name, username, photo and how many days you trained each month, on the gym’s leaderboards, and which crew you’re in. People who can see your profile can also see your gym and crew on it. Your Strength Score is only shown at your gym if you turn that on, and it’s worked out from the lifts you’ve logged, not bests you typed in. Your body weight is never shown.

A crew is a group of up to 10 friends at the same gym. You can only be invited by someone who is your friend on Valleur, and you choose whether to accept. If the crew is at a different gym, accepting moves you to that gym. When you accept, the person who invited you is told.

Each month, people at a gym get a notification when 3 days of the challenge are left, and crew members get one with how their crew finished. You can turn these off in Settings → Notifications.

People who aren’t at your gym can’t see its leaderboards or who is in its crews. A gym’s page, and crew rankings across Australia, show each crew’s name, how many people are in it and their average training days, never anyone’s name. People you block, or who block you, don’t see each other on leaderboards. You can leave a crew or gym at any time, and you come off its leaderboards straight away.

Official gyms are run on Valleur by the gym business. Its owners and managers see how many members each site has and how many show their Strength Score, and how many people opened the gym’s website from Valleur (a count, never who). If they’re members of the gym themselves, they see the same leaderboards as any member. They never see your workouts, body weight, check-ins or anything you haven’t shown at the gym. When you open a gym’s website from Valleur, the link tells the gym the visit came from Valleur, and the gym’s own privacy policy applies on its site.

Valleur AI

Valleur AI is optional and off until you agree to it in the app. When it’s on, what you type into the Workout builder’s “Describe it” box, and the builder’s choices on screen (goal, experience, equipment, days a week and session length), are sent to Google’s Gemini service to design the training you want. No other information about you is sent. It chooses exercises from Valleur’s library, and the app checks them against your equipment and experience. Any new exercise it describes is saved to your account as your own custom exercise, which you can delete like any other. We don’t store what you type: we only count how many requests each account makes each day, to keep the service free and fair, and delete those counts after a week.

If you rate a plan Valleur AI built (👍 or 👎), we store your rating with that plan (its days, exercises, sets and reps, and the builder’s choices), never what you typed, to improve Valleur AI. Ratings are deleted after 6 months, or straight away if you delete your account.

You can turn Valleur AI off at any time in You → Privacy. When it’s off, the Workout builder reads what you type on your phone and sends nothing.

Trainers can also use Valleur AI in Valleur Coach’s workout and plan builders, on the same terms: it’s optional, it asks first, and only what the trainer types and the builder’s choices are sent. Trainers must not include a client’s name or health details in what they type. On the website, Valleur AI chooses only exercises from Valleur’s library.

Health information

Body weight and check-ins are health information, which the law treats as sensitive. We only collect them after you agree in the app, and our database won’t accept them without your consent. We use them only to show your progress, to work out your Strength Score and, for check-ins, to share them with a trainer you choose to connect with.

You can withdraw your consent at any time in You → Privacy → Health information. That deletes your body weight and all your check-ins straight away.

If you use trainer tools, only record health information about a client that they have agreed to share with you, and only use it to coach them.

None of your information, including your training data, is used for advertising or marketing, sold, or shared with data brokers. Valleur does not read from or write to Apple Health.

Using Valleur without your name

You can use Valleur as a guest without giving us your name or email address, and your display name doesn’t have to be your real name. Some features, such as friends and personal trainers, need an account.

Our websites

Valleur’s websites are valleur.com.au, which tells you about Valleur and has these policies, and coach.valleur.com.au (Valleur Coach), where trainers sign in to coach their clients. They have no ads, no analytics and no tracking cookies. Valleur Coach keeps you signed in by storing your sign-in session in your browser, and remembers in that browser whether you chose light or dark mode. Signing out removes the session.

Service providers and overseas storage

Supabase, Inc. hosts our database, sign-in and photo storage, in Tokyo, Japan. Resend, Inc. sends our emails, such as sign-up confirmations and password resets, from servers in Tokyo, Japan, so it receives your email address and the content of those emails. Supabase and Resend are US companies, and their staff may access information from the United States to run and support their services. Cloudflare, Inc. hosts our websites, so it receives visitors’ IP addresses and basic connection details, from its nearest server, to deliver the pages and protect them from attacks. If we turn on CAPTCHA to stop automated sign-ups, Cloudflare also checks your device and connection. If you use Sign in with Apple, Apple handles that sign-in. If you turn on notifications from friends, 650 Industries, Inc. (Expo) and Apple deliver them, so they receive your phone’s push token and the notification’s text, which says who did what (for example “Sam replied to your comment”) but never what a comment says. When the app checks for updates, Expo also receives your phone’s IP address and the app’s version, so it can send the right update. If you turn on Valleur AI, Google LLC (Gemini) receives the text you type into the Workout builder’s “Describe it” box and the builder’s choices (goal, experience, equipment, days a week and session length), and nothing else about you, to design the training you’re asking for. Google may use that text to improve its services, so don’t include your name or health details in it.

This means your personal information is disclosed overseas, mainly to Japan and the United States. These providers are bound by contracts to keep it secure and to use it only on our behalf and under our instructions, and we take reasonable steps to make sure they handle it in line with the Australian Privacy Principles. We don’t share your personal information with anyone else unless the law requires it, or to protect someone’s safety.

How long we keep it, and deleting it

We keep your data while your account exists. You can delete your account at any time in Settings → Account & data → Delete account. This permanently deletes your account, profile, photos, training data, followers, reactions, comments and feed activity from our database straight away. Copies in our hosting provider’s backups are removed when those backups expire, within 30 days. If you used Sign in with Apple, we also revoke Valleur’s access to your Apple ID.

We keep reports about other people’s content, without linking them to your deleted account, where we need them for safety records. If you sign out of a guest account, its data is deleted. Withdrawing your health consent deletes your body weight and check-ins straight away.

Seeing and correcting your information

You can see and correct most of your information in the app at any time (including correcting a finished workout), export your workouts as a spreadsheet in Settings → Account & data → Export my workouts, and delete it all by deleting your account. To ask for a copy of the information we hold about you, or to correct something you can’t change yourself, email valleurtrack@gmail.com. We will respond within 30 days and won’t charge you.

Complaints

If you have a complaint about how we have handled your personal information, email valleurtrack@gmail.com with the details. We will acknowledge it within 7 days and aim to resolve it within 30 days.

If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.

Children

Valleur is only for people aged 16 and over, and everyone confirms their age when they sign up. We don’t knowingly collect information from anyone under 16. If we learn that someone under 16 has an account, we will delete it and its data. If you believe this has happened, contact us.

Security

Data is encrypted in transit (HTTPS). Our database uses row-level security, so each account can only reach the data it is allowed to see. Your sign-in session is stored in the iOS Keychain. No system is perfectly secure, but we work to protect your information.

If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

Changes to this policy

We will update the date at the top of this policy when it changes. If a change is significant, we will ask you to review it in the app.

Contact

Email valleurtrack@gmail.com with any privacy question or request.