Privacy Policy
Effective 28 October 2026
1. Who we are
Dojo is a gym training app for iPhone, Apple Watch and the web at withdojo.app. Dojo is run by Francisco Donadio ("we", "us"). If you have a question about this policy or your data, email privacy@withdojo.app.
2. The short version
- You can use Dojo on your iPhone and Apple Watch without an account. Until you sign in, your training data stays on your devices.
- When you sign in, Dojo stores your email, your training data and your profile on our server so it can sync between your iPhone and the web.
- From Apple Health, the only thing that reaches our server is one average heart rate and one calorie total for each workout you record on Apple Watch.
- No ads. No analytics or tracking. We never sell your data.
- You can delete your account and its data at any time.
3. What we collect when you sign in
When you sign in, Dojo stores the following on our server, linked to your account. The first time you ask for a sign-in link with a new email, Dojo creates an account for it.
| Data | What exactly | Why |
|---|---|---|
| Email address | The address you sign in with. Our email provider, Resend, delivers your sign-in link to it. | Sign-in and account recovery |
| Account ID | A random identifier for your account, attached to everything you store | Ties your data to your account, so only you can see it |
| Custom exercises | Exercises you create yourself: the name and any details you add, such as category, body part, equipment, target and secondary muscles, and instructions. Dojo's built-in exercise library is never uploaded. | Sync your own exercises across your devices |
| Routines and plans | Routine and day names, and each planned exercise: sets, reps, target weight, percentage of your one-rep max or effort (RPE), rest times, target times for timed exercises, supersets, the plan for each set, and any notes you add | Plan workouts on the web or iPhone and keep them in sync |
| Workouts | The workout name, start and end time, whether it was recorded on iPhone or Apple Watch, and which routine day it belongs to | Workout history and progress |
| Average heart rate (Apple Watch workouts) | One average per workout recorded on Apple Watch. No individual readings. | Show how hard a Watch workout was in your history |
| Active energy (Apple Watch workouts) | One calorie total per workout recorded on Apple Watch. No individual readings. | Show the energy of a Watch workout in your history |
| Logged sets | Weight, reps (including the reps of each part of a complex), effort (RPE), when the set was done and, for timed exercises, how long it lasted | Workout history, progress charts and weight suggestions |
| One-rep maxes | Your one-rep max for each exercise, whether you entered it or Dojo estimated it from your sets, and the date of the estimate | Percentage-of-one-rep-max targets and weight suggestions |
Your profile. Every field is optional.
| Data | What exactly | Why |
|---|---|---|
| Display name | The name you choose | Greet you |
| Height | Your height | Training context |
| Body weight | Your latest body weight only, and the date you updated it | Training context and relative strength |
| Main goal | Your main training goal, chosen from a short list | Training context |
| Experience | Beginner, intermediate or advanced | Training context |
| Training since | The year you started training | Training context |
| Birth date | Your date of birth | Training context |
| Sex | Male, female, other, or prefer not to say | Training context |
| Gym name | The name of your gym | Training context |
For how the two Apple Watch numbers are produced, see section 4.
We do not collect your location, contacts, photos, payment details, device identifiers, advertising identifiers, diagnostics, usage analytics or the history of other apps.
4. Apple Health
Dojo only uses Apple Health if you allow it in the Health permission prompt.
On Apple Watch. Dojo asks permission to read heart rate, active energy and workouts. During a workout, it reads your heart rate and active energy (calories) to show your live heart rate and to sum up the workout. When you finish, Dojo saves the workout to Apple Health with those readings. Dojo does not read your past workouts from Health.
On iPhone. Dojo never reads from Apple Health. When you save a workout recorded on your iPhone, Dojo writes it to Apple Health as a strength workout with its start and end time, the routine day name, and an effort score worked out from the RPE of your sets. The effort score is written only to Apple Health; Dojo does not upload it.
What reaches our server. For each workout recorded on Apple Watch, your Watch passes two numbers to your iPhone, which stores them with the workout on our server: your average heart rate and your total active energy. This happens only when you are signed in, so the workout can sync to your account; the web shows the average heart rate in your workout history. Individual heart-rate and energy readings never leave your devices. The workouts Dojo saves in Apple Health stay in Apple Health.
How Health data is used. Only to show you your training. Health data is never used for advertising or marketing, never sold, and never shared with anyone except the service provider that stores Dojo's database (Supabase, section 6).
Deleting. Deleting a workout in Dojo does not delete it from Apple Health. You can delete it in the Health app. You can turn off Dojo's access at any time in the Health app or in your iPhone's and Watch's Settings.
5. How we use your data
Only to run Dojo: to sign you in, to sync your data between your devices and the web, and to show your history, progress and weight suggestions. We do not use your data for advertising, we do not build marketing profiles, and we do not sell or rent your data to anyone.
6. Service providers
We use three companies to run Dojo. They process data only on our behalf.
- Supabase stores Dojo's database and handles sign-in. Region: São Paulo, Brazil.
- Vercel hosts withdojo.app and delivers it through its global network. It does not store your training data: the web app's server code runs in São Paulo, Brazil, and reads your data from Supabase while you use the site.
- Resend sends the sign-in email. It handles your email address and the sign-in link. Region: São Paulo, Brazil.
If you live outside Brazil, your data is transferred to and stored in Brazil.
These providers keep standard technical logs, such as IP addresses and browser or device details, for security and to keep the service running, for a limited time under their own policies. Their privacy policies: supabase.com/privacy, vercel.com/legal/privacy-policy, resend.com/legal/privacy-policy.
7. No ads, no analytics, no tracking
Dojo contains no advertising, analytics or crash-reporting tools, on iPhone, Apple Watch or the web. Dojo does not track you across other apps or websites.
8. Cookies on withdojo.app
- Sign-in cookies (set by withdojo.app for sign-in through Supabase): keep you signed in, plus a short-lived one used while you sign in. Without them the web app cannot work.
dojo_exercise_language: remembers the language you chose for exercise names (English or Spanish), for one year. It stays in your browser; we do not store it on our server.
There are no analytics or advertising cookies, so there is no cookie banner.
9. Data on your devices
The iPhone and Watch apps keep a copy of your data on the device so they work offline, together with your settings (such as exercise language and weight suggestions) and an unfinished workout if you have one. Your sign-in is kept in the iPhone's Keychain. Dojo does not use iCloud. Rest-timer alerts are local notifications on your iPhone; we do not send push notifications.
10. Security
Every account can only read and change its own data; our database enforces this for every table. Connections to our server use HTTPS. No system is perfectly secure, but we work to protect your data.
11. How long we keep your data, and deleting it
We keep your data for as long as you have an account.
When you delete something in Dojo (a routine, a workout, a set), it disappears from the app but stays in our database, marked as deleted, so that the deletion syncs to your other devices. It is removed for good when you delete your account.
Delete your account: in the Dojo iPhone app, go to Profile > Delete account. You can also email privacy@withdojo.app from the address you sign in with. Deleting your account removes your account and all of its data from our database. Copies may remain in our providers' backups for a limited time until they expire. Data on your devices stays there until you delete the app, and workouts saved in Apple Health stay there until you delete them in the Health app.
12. Your choices and rights
- You can see and change your training data and profile in the app and on the web at any time.
- If you want a copy of your data, email privacy@withdojo.app and we will send it to you. Dojo has no export button yet.
- You can delete your account at any time (section 11).
- Depending on where you live (for example the EU, the UK, Brazil, Argentina or California), you may have more rights, such as objecting to processing or complaining to your data protection authority. Email us to use them.
13. Children
Dojo is not meant for children under 13, and we do not knowingly collect data from them. If you think a child has given us data, email us and we will delete it.
14. Changes to this policy
If we change this policy, we will update it on this page and change the effective date. If a change is important, we will also tell you in the app or by email before it applies.
15. Contact
Francisco Donadio — privacy@withdojo.app