Privacy & legal
VERTEX Privacy Policy
Last updated: July 13, 2026
VERTEX ("the app") is a workout tracker with a social feed, operated by Max Vanstry (contact: support@vertexstrengthlab.com). This policy explains what data the app handles and what happens to it.
Data we collect
Account data — your email address, password (stored as a hash by our authentication provider; we never see it), display name, and chosen username. We also record which version of the Terms of Use you accepted, and when.
Fitness data you enter — workouts (exercises, sets, weights, reps, duration), optional body stats (bodyweight, height, birth date, sex), and personal records. This data is stored on your device and synced to your account so it survives switching phones. Birth date and sex are optional and refine on-device calorie estimates. Birth date is never visible to other users. Sex additionally places you on the optional men's/women's leaderboards and is visible to other users only while you have gym leaderboards turned on (see below); otherwise it stays private.
Content you share — if you choose to share a workout, its caption, any photos you attach, and training partners you tag are uploaded to our servers so your followers can see them. Comments you post on shared workouts are stored the same way. If you post a routine on your profile, its name, exercise list, and starting sets are uploaded so other users can view it and add it to their own routines.
Social data — who you follow, kudos you give, comments you post, athletes you block, and reports you file.
Profile photo — optional. If you set one, it is uploaded to our servers and shown to other users next to your name (feed, search, leaderboards).
Push notification token — if you enable notifications on a device, that device's push token (a random identifier issued by the notification service, not your location or contacts) is stored on our servers so we can notify you about new followers, kudos, and comments. It is removed when you turn social notifications off on that device and when your account is deleted.
Location — the gym finder can use your device's location to show nearby gyms and sort clubs by distance. This is optional (the app asks first), happens on your device only, and your location is never uploaded to our servers or shared with other users.
Crash reports — if the app crashes, technical details about the crash (device model, OS version, app state at the time) may be sent to our crash-reporting provider (Sentry) so we can fix the bug. Crash reports are configured to contain no account or fitness data.
We do not collect advertising identifiers or contacts, and we do not use third-party tracking for advertising or analytics.
What other users can see
- Your display name, username, profile photo, and achievement badges are visible to signed-in users (search, feed, follower lists, athlete pages).
- Workouts are private by default. A workout — including its caption and photos — is visible only to people who follow you, and only if you chose to share it when finishing it. Comments on a shared workout are visible to the same people.
- Gym leaderboards are opt-in. If you turn on "Show me on gym leaderboards", your home gym, your best lifts from shared workouts and — if you've set it — your sex (so the men's and women's boards can place you) are visible to other signed-in users, including people you don't follow. Turning it off removes all of it, including your sex.
- Routines you post on your profile are public to signed-in users. Anyone signed in (except athletes you've blocked or who blocked you) can view them and add a copy to their own routines; the number of times a routine was added is shown publicly. Removing a posted routine takes it off your profile, but copies other athletes already added remain theirs.
- Your email, bodyweight, height, birth date, and goals are never visible to other users. Sex is visible only in the opt-in gym-leaderboard case above.
Where data is stored
Data is stored on your device and, for account/fitness/social data, in our backend hosted by Supabase (supabase.com), which acts as our data processor. Access to your data is enforced with row-level security: other users can only read what the rules above allow.
Data retention and deletion
You can delete your account at any time in Settings → Danger zone → Delete account. This permanently deletes your account, profile, workouts, routines, photos, follows, kudos, comments, push tokens, and blocks from our servers and removes the local copy from your device. Reports you filed about other users are retained (without your account link) for moderation history.
Notifications
Workout reminders and training tips are scheduled locally on your device — no data leaves it for those. Social push notifications (new follower, kudos, comments) use the device push token described above; you can turn them off per device in Settings.
Children
VERTEX is not directed at children under 13, they may not create an account, and we do not knowingly collect personal data from them. Where local law sets a higher minimum age for consenting to data processing, that age applies. If you believe a child below the required age is using VERTEX, contact us at the address below and we will delete the account and its data.
Changes
If this policy changes materially, we will update this document and note it in the app's release notes.
Contact
Questions or data requests: support@vertexstrengthlab.com