Privacy Policy

The short version

We collect only the data we need to make Logbook work: your account credentials, the workouts and activities you log, basic profile information, and (if you grant permission) HealthKit data on iPhone. We don't sell your data. We don't run ads. Your training history is exportable and deletable. You can delete your account from inside the iPhone app at any time, and we'll permanently remove your data within 30 days.

The long version below covers exactly what we collect, why, who else processes it on our behalf, how long we keep it, and how to exercise your rights under GDPR, UK GDPR, CCPA/CPRA, and other applicable laws.

Who we are

"Logbook," "we," "us," and "our" refer to Logbook, the operator of the Logbook iPhone app and the websites at logbook.net.nz and (when launched) logbook.club. For data-protection purposes, we are the data controller of the personal data you provide to us. You can contact us at privacy@logbook.net.nz for any privacy-related questions.

What data we collect

Account data

Email address — required to create an account and to send you account-related notifications.
Authentication identifiers — when you sign in with Apple, Google, or email/password, the underlying provider supplies us with a stable user identifier and (for Apple) optionally a relay email.
Display name and username — required for clubs and social features.
Profile photo — optional.

Profile and training context (all optional)

Bio, location, training focus, home gym, preferred training time.
Body weight, height, biological sex, date of birth — used to compute training metrics like volume relative to bodyweight.
Equipment availability, training experience, training goals.

Workout and activity data

Workouts you log: exercise names, sets, reps, weights, RPE, rest timers, dates, durations, notes.
Activities (runs, rides, walks, sport sessions): start/end time, type, distance, duration, route GPS coordinates if you grant location permission and choose to record a route, splits, elevation, samples.
Personal records, streaks, weekly goals, achievement progress.
HealthKit data, if you grant permission — workouts and activities Logbook reads from or writes to Apple Health.

Team coaching

When you complete an assigned workout, its completion is visible to your team. If you choose to share detailed results, current coaches of that team can review that assigned session’s completed sets, loads and notes. Personal workouts are not included. You can stop sharing detailed results from the workout’s page in your web history; this stops future retrieval but cannot recall details a coach has already seen.

Social data

Clubs you create or join, your role in each club, who you follow, who follows you, friend connections, friend requests.
Posts, comments, reactions, and shared workouts inside clubs.
Notifications you receive and read state.
Referral attribution, when you accept a friend's invite: the inviter's account identifier and the time the invite was opened.

Device and technical data

IP address and approximate location derived from it (used for security and abuse prevention only).
Device type, OS version, app version, language, time zone.
Push notification tokens (Apple Push Notification service, Firebase Cloud Messaging) if you allow notifications.
Crash logs and basic diagnostic data.

AI Coach data (only if you opt in)

Before Logbook sends any information to AI Coach for the first time, the app asks for your permission and identifies the external processor. If you agree, the prompt can include the question or chat message you enter and relevant training context: recent workouts, exercises, sets, repetitions, weights, goals, training preferences, strength estimates, and saved workout plans. We deliberately exclude your name, email address, date of birth, biological sex, height, and body weight from AI Coach prompts.

This information is sent to Anthropic's Claude service solely to generate the coaching response you requested. You can decline and continue using Logbook without AI Coach, or withdraw permission at any time in Logbook → Settings → Privacy → Withdraw AI Coach permission. Withdrawing stops future disclosures; it cannot recall a request that was already processed.

Website analytics

The marketing website at logbook.net.nz uses Plausible Analytics, a privacy-first analytics service that uses no cookies and does not track individuals across sites.
Plausible records aggregate, anonymized data: page views, referrer, country, device type. It does not collect IP addresses in identifiable form.

Invite handoff

If you download Logbook from a personal invite page, that page copies the invite URL to your iPhone only after you tap the App Store button. On first launch, Logbook offers Apple's system Paste button. The app reads the clipboard only if you tap Paste, accepts only a valid Logbook referral URL, and does not store unrelated clipboard contents.

Waitlist and email subscriptions

Email address, optional first name, and the page you signed up from.
Email engagement (open/click) when you receive emails from us.

Why we collect it (purposes and lawful bases)

Provide the service — to create and authenticate your account, save your workouts, sync them across devices, show your training history. Lawful basis: performance of contract.
Social features — to power clubs, follows, and shared posts you opt into. Lawful basis: performance of contract.
Referral attribution — to connect a new account to the friend whose invitation the person explicitly accepted. Lawful basis: legitimate interests.
Personalization — to show progress charts, recovery state, and personal records relevant to your data. Lawful basis: performance of contract.
Safety and abuse prevention — to detect spam, prevent unauthorised access, and enforce our terms. Lawful basis: legitimate interests.
Product improvement — to analyse aggregate usage and crash reports. Lawful basis: legitimate interests.
AI Coach — to send the training context you approve to Anthropic and generate the coaching response you request. Lawful basis: consent; you can decline or withdraw that consent without losing the rest of the service.
Communication — to send launch updates, account notifications, and waitlist emails. Lawful basis: consent for marketing emails (you can withdraw at any time); legitimate interests for transactional notifications.
Compliance — to meet legal obligations and respond to lawful requests. Lawful basis: legal obligation.

Health data — special handling

We do not use HealthKit data, workout data, or any health-related information you provide us for advertising or other use-based data mining, and we do not sell it or disclose it to advertising platforms, analytics providers, data brokers, insurers, employers, or information resellers. If you explicitly opt in to AI Coach, we disclose only the training context described above to Anthropic to provide the response you requested.

Workout data, body measurements, and HealthKit data are sensitive personal data under GDPR (Article 9) and similar laws elsewhere. We handle this data with extra care:

HealthKit data is read locally on your iPhone with your explicit per-category permission. We only request the data we need.
Health data is processed solely to provide and improve the Logbook training experience for you.
You can revoke HealthKit access at any time in iPhone Settings → Health → Data Access & Devices → Logbook.
You can delete all health-related data we hold by deleting your account (see below).
We do not share your health data with insurers, employers, or marketers.
We never use health data to make decisions about access to insurance, employment, or other services.

Tracking and advertising

Logbook does not show third-party advertising, does not share device identifiers with data brokers, and does not track you across apps or websites owned by other companies for advertising purposes. Because of this, the iOS App Tracking Transparency prompt does not apply to Logbook — there is nothing for you to opt out of, because we don't do the tracking the prompt asks about.

We also do not use third-party advertising SDKs, do not embed cross-site tracking pixels, and do not run remarketing or audience-matching campaigns based on your in-app behaviour.

Logbook offers Sign in with Apple alongside Sign in with Google and email/password sign-up. If you sign in with Apple and choose to hide your email, Apple generates a per-app relay email and we only receive that relay address — never your real Apple ID email. You can revoke Sign in with Apple access at any time from iPhone Settings → [Your Name] → Sign-In & Security → Sign in with Apple → Logbook, which signs you out and removes Apple's connection to your Logbook account.

We use a small number of carefully chosen service providers to run Logbook. We've reviewed their security practices and require contractual data-protection commitments where applicable. We share the minimum data needed for each service to perform its function.

Google (Firebase) — authentication, database (Cloud Firestore), file storage (Cloud Storage), serverless functions (Cloud Functions), push notifications (Firebase Cloud Messaging), aggregate product analytics (Firebase Analytics), and crash diagnostics (Firebase Crashlytics). Data is processed in Google data centres. See Firebase Privacy.
Anthropic (Claude) — generates AI Coach responses when you explicitly opt in. Anthropic receives the message and limited training context described in “AI Coach data” above, only when you request an AI Coach response. See Anthropic Commercial Terms and Anthropic Privacy Center.
Apple — Sign in with Apple (if you choose it), Apple Push Notification service, HealthKit (data stays on-device unless you sync). Apple is bound by its own Privacy Policy.
Plausible Analytics — privacy-first website analytics (logbook.net.nz marketing pages only). No cookies, no personal data. Hosted in the EU. See Plausible Data Policy.
Loops — email delivery for the waitlist and (when launched) lifecycle email sequences. Receives your email address, optional first name, and engagement data. See Loops Privacy Policy.
Vercel — hosting for the website. Receives request metadata (IP address, user agent) needed to serve pages. See Vercel Privacy Policy.
Cloudflare — when in use for DNS or DDoS protection on logbook.club. See Cloudflare Privacy Policy.

We do not sell your personal data. We do not share it with advertising networks or data brokers. We do not allow our sub-processors to use your data for their own marketing.

We may also disclose data when legally required (court order, valid subpoena), to investigate suspected violations of our Terms, or to protect the safety of users — and only the minimum data necessary in each case.

International data transfers

Logbook's primary infrastructure runs on Google Cloud in the United States. If you are located in the European Economic Area, the United Kingdom, or other regions outside the United States, your data will be transferred to and processed in the US. We rely on the appropriate safeguards for such transfers, including the EU Standard Contractual Clauses where applicable.

How long we keep data

Account and training data — for as long as your account is active. Deleted within 30 days of account deletion.
Backups — up to 90 days after deletion for disaster recovery, then permanently purged.
Aggregate analytics — retained indefinitely in fully anonymized form.
Waitlist email — until you unsubscribe (unsubscribe link in every email).
Crash and diagnostic logs — 30 days.
Legal retention — we may retain limited records longer where required by law (tax, fraud, security).

Account deletion

You can delete your Logbook account at any time, directly in the iPhone app:

iPhone app → Settings → Account → Delete account

Account deletion is final. It removes your profile, workouts, activities, posts, club memberships, photos, and all associated personal data from our active systems within 30 days. Backup copies are purged within an additional 60 days.

If you cannot access the iPhone app — for example, you've moved to a different device or lost access to your account — you can request deletion through our /delete-account page, or by emailing privacy@logbook.net.nz from the email address on the account. We'll verify your identity and complete deletion within 30 days.

Your rights

Depending on where you live, you have specific rights over your personal data. We honor these rights worldwide regardless of jurisdiction.

Access — request a copy of the data we hold about you.
Rectification — correct inaccurate data. Most fields are editable directly in the app.
Erasure ("right to be forgotten") — delete your account and associated data.
Portability — export your training data in a machine-readable format.
Restriction — limit how we use your data.
Objection — object to processing based on legitimate interests.
Withdraw consent — for any processing based on your consent (e.g., marketing emails).
Lodge a complaint — with your local data protection authority. We'd appreciate the chance to address your concern first by emailing privacy@logbook.net.nz.

To exercise any of these rights, email privacy@logbook.net.nz or use our Support page. We respond within 30 days.

California residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the CCPA/CPRA:

The right to know what personal information we collect, use, and disclose.
The right to delete personal information we hold about you.
The right to correct inaccurate personal information.
The right to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.
The right to limit use and disclosure of sensitive personal information.
The right to non-discrimination for exercising these rights.

To exercise these rights, contact privacy@logbook.net.nz. We do not require an account to exercise CCPA rights.

Children's privacy

Logbook is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. In the EEA and UK, our service is not directed to children under 16. If you believe a child has provided us personal information, please contact us at privacy@logbook.net.nz and we will delete it.

Security

We use industry-standard security practices to protect your data:

All data in transit is encrypted with TLS 1.2 or higher.
Data at rest is encrypted by Google Cloud's infrastructure (AES-256).
Authentication is handled by Firebase Auth with secure token rotation.
Access to production systems is limited and logged.
Firestore security rules enforce per-user data isolation.
The website uses HSTS, a strict Content Security Policy, and other defense-in-depth headers.

No system is perfectly secure. If you discover a vulnerability, please report it responsibly to privacy@logbook.net.nz with subject "Security disclosure" — we'll acknowledge within 72 hours.

Cookies and similar technologies

The marketing website uses no advertising or tracking cookies. Plausible Analytics is cookieless. The web companion at /app uses browser storage (localStorage) only to keep you signed in via Firebase Auth — this is essential to the functionality and not used for tracking.

Changes to this policy

We may update this policy as the product evolves. Material changes will be announced via in-app notification or email at least 14 days before they take effect. The latest version always lives at logbook.net.nz/privacy with the effective date at the top.

Contact us

Privacy questions, data requests, or anything else: privacy@logbook.net.nz.

General support: support@logbook.net.nz or our Support page.