Legal

Privacy Policy

Last updated 13 November 2026

Musclo is an iPhone app made by Digcy ("we", "us"). This policy explains what the app does with your data. The short version: most of Musclo runs on your phone, the camera never leaves it, there are no ads and no tracking, and an account is optional.

1. Data that stays on your iPhone

By default everything you enter is stored only in the app on your device:

If you delete the app, this data is deleted with it unless you created an account (see section 6).

2. Camera and live form check

The live form check uses your camera and Apple's on-device body tracking (Vision) to find your joints, count reps and spot form issues. Video is analysed frame by frame on your iPhone. It is never recorded, stored or uploaded, and no image from the form check is sent to us or to any AI service.

If you take a selfie for a workout share card, the photo is created on your device and only leaves it if you choose to share it.

3. Microphone and speech

When you hold the mic button to talk to your coach, Musclo uses Apple's speech recognition to turn your words into text. Apple may process this audio on your device or on Apple's servers under Apple's privacy policy. We never receive or store audio. The resulting text is handled like a typed chat message (section 4). Spoken coaching cues are generated on your device.

4. AI coach chat and machine scan

Some features use an AI model to answer you. When you use them, the request goes through our server (a Supabase Edge Function we operate) to Anthropic, which runs the Claude model that writes the answer.

Our server does not store your messages or photos; it only forwards them and returns the answer. Anthropic processes them to produce the reply, does not use them to train its models, and may keep them for a limited time for safety and abuse monitoring under its commercial terms and privacy policy. Please don't include sensitive personal information in chat or photos (for example, people's faces in a machine photo).

To keep the service fair and affordable, our server counts how many AI requests each account (or, without an account, a random ID generated by the app) makes per month. Only the count is stored, not the content.

5. Apple Health

If you allow it, Musclo can read workouts, sleep, heart rate variability, resting heart rate, active energy, body mass, height, biological sex and date of birth, and can write workouts and active energy. This is used on your iPhone to fill in your profile, suggest an easier day when you're under-recovered, and save your workouts to Health.

Health data is never sent to our servers, never sent to the AI, never used for advertising and never sold or shared. You can change these permissions any time in the Health app.

6. Optional account and sync

You can use Musclo without an account. If you create one with Sign in with Apple or an email code, we store in our database (hosted by Supabase):

Your data is protected so that only your signed-in account can read or change it.

Delete your account in the app at any time: You → Account → Delete account. This permanently deletes your account and synced data from our database. You can also email us to request deletion.

7. Purchases

Subscriptions are sold and billed by Apple through the App Store. We never see your payment details. The app checks your subscription status with Apple to unlock Pro features. If you start a free trial, the app may schedule a local notification to remind you before it ends.

8. What we don't do

9. Who processes data for us

ProviderWhat forData
SupabaseAccount sign-in, sync database, AI request forwardingEmail, account ID, profile, workout history, monthly AI request counts
AnthropicAI coach replies and machine identificationChat messages with workout context, machine photos
AppleSign in with Apple, App Store purchases, speech recognition, HealthUnder Apple's own privacy policy

These providers may process data in the United States or other countries, with safeguards such as standard contractual clauses where required.

10. How long we keep data

On-device data is kept until you delete it or the app. Account data is kept until you delete your account. Monthly AI request counts contain no message content and are kept only as long as needed to apply monthly limits and prevent abuse.

11. Your rights

Depending on where you live (for example under the GDPR or CCPA), you can ask to access, correct, export or delete your personal data, or object to how it's used. Most of this you can do in the app; for anything else, email us and we'll respond within 30 days. You can also complain to your local data protection authority.

12. Children

Musclo is not intended for children under 13 (or the minimum age in your country), and we don't knowingly collect their data. If you believe a child has created an account, contact us and we'll delete it.

13. Changes

If we change this policy we'll update the date above, and for significant changes we'll let you know in the app.

14. Contact

Questions or requests: support@digcy.com