Privacy
Policy.

Scope and who we are

This Privacy Policy applies to SteelSet, including the SteelSet mobile application, its Community features, associated account services and public SteelSet website pages.

In this Policy, “SteelSet”, “we”, “us” and “our” refer to the operator of the SteelSet service.

Questions about privacy or this Policy can be sent to steelsetsupport@gmail.com .

Categories of information we handle

Depending on how you use SteelSet, the service may process the following categories of information:

• account and authentication information;
• workout, exercise and training-history information;
• training preferences and athlete-profile settings;
• training-state, progression and recovery information generated from your training history;
• profile information you choose to make available through Community;
• Community posts, personal-record posts, photos and interactions;
• Community safety and moderation information such as reports and block records;
• nutrition information that you enter into the local nutrition feature;
• device, network and request information necessarily processed by infrastructure providers when the app communicates with their services.

Account and authentication information

SteelSet supports account authentication using Google Sign-In and Firebase Authentication.

When you sign in, information necessary to authenticate and identify your SteelSet account may be processed, such as your Google/Firebase account identifier, email address and available account profile information supplied through the authentication flow.

We use this information to:

• create and identify your SteelSet account;
• authenticate access to account-backed features;
• associate cloud workout records with the correct account;
• protect cloud records from cross-account access;
• support account deletion and account recovery workflows.

Workout and training data

SteelSet is a training application. Information you enter or generate through training features may include:

• workout-session dates and session history;
• exercise names and exercise selections;
• sets and repetitions;
• weight or load;
• repetitions in reserve (RIR) and effort information;
• exercise notes and session notes;
• personal records and historical performance references;
• planned workouts and generated weekly plans;
• training goal, experience level and preferred split;
• selected equipment;
• muscle-focus preferences;
• protected-area preferences;
• session and workout completion information.

Saved workout history associated with a signed-in account may be synchronized through SteelSet cloud workout services.

Training intelligence and derived information

SteelSet processes training history and user-provided training context to produce training-related outputs.

Depending on available history, these outputs may include:

• prescribed exercise targets;
• next-set or next-session targets;
• progression decisions and progression state;
• performance trends;
• readiness and recovery-related signals;
• local or muscle-level recovery presentation;
• fatigue-related signals;
• training recommendations and explanations;
• session-review summaries;
• generated training-week structure;
• Plan Fit and related planning assessments;
• training prediction and confidence information.

These outputs are used to provide the SteelSet training experience. They are training guidance, not medical diagnosis or medical treatment.

Community and public profile information

If you use SteelSet Community, additional information may be stored and processed, including:

• your public Community profile;
• profile/avatar media;
• workout posts;
• personal-record posts;
• photo posts and training photos;
• Kudos you give to posts;
• notifications generated by Community activity;
• reports you submit;
• block and unblock records;
• Community policy or guideline acceptance records.

Information you intentionally publish to Community is designed to be visible to other SteelSet users according to the Community feature.

Do not publish information that you do not want other Community users to see.

Profile images, Community photos and media access

SteelSet allows user-initiated selection or capture of images for features such as public profile avatars and Community photo posts.

The Android application may request camera access when required for a user-initiated image feature.

SteelSet does not require broad Android storage or READ_MEDIA_IMAGES permission in the current Android configuration in order to continuously read your photo library.

Media used for profile avatars or Community photo posts may be uploaded to and delivered through ImageKit infrastructure. SteelSet also uses an authenticated Cloudflare Worker in the media authorization and deletion flow.

Nutrition information

SteelSet includes a nutrition logging feature where you may enter nutrition targets and intake information.

In the current product implementation, nutrition information is stored locally on the device and is not synchronized to the SteelSet workout cloud.

Nutrition entries do not currently influence SteelSet readiness, fatigue, recovery, progression targets, workout targets, deload decisions or Visual AI decisions.

Clearing local app data, resetting local SteelSet data or removing application storage may remove locally stored nutrition information.

Technical, device and network information

When SteelSet communicates with authentication, cloud or media services, those services may necessarily process technical information needed to receive, secure and deliver the request.

Depending on the provider and request, this may include information such as:

• IP address;
• device or platform information;
• network-request metadata;
• authentication tokens or service identifiers;
• security, abuse-prevention or infrastructure logs.

We do not describe this technical processing as behavioral advertising analytics.

How we use information

SteelSet processes information for purposes including:

• providing and operating workout features;
• authenticating accounts;
• synchronizing cloud workout history;
• generating training plans and training guidance;
• calculating and presenting progression information;
• presenting readiness, fatigue and recovery information;
• saving workout and session history;
• operating Community profiles and posts;
• delivering Community notifications;
• processing Kudos and other Community interactions;
• supporting reporting, blocking and abuse prevention;
• uploading, delivering and deleting Community media;
• supporting account deletion;
• maintaining service security and reliability;
• responding to support and privacy requests;
• complying with applicable legal obligations.

Service providers and data sharing

SteelSet uses third-party infrastructure providers to operate necessary product functionality.

These providers process information only as necessary for the services they provide and according to their own applicable terms, privacy policies and data-processing practices.

We may also disclose information where reasonably necessary to comply with law, enforce rights, investigate abuse, protect users or protect the security and integrity of SteelSet.

Information you choose to make public

Workout data stored as private account history is not automatically a public Community post.

When you intentionally publish a workout, personal record, training photo, profile information or other Community content, that published content may be visible to other SteelSet Community users.

SteelSet also supports native device sharing for supported Community content. If you choose to use your device's sharing interface, information is transferred to the destination you select and becomes subject to that destination's privacy practices.

Analytics, advertising and sale of information

In the current production implementation, SteelSet does not actively use a third-party behavioral analytics SDK for product-tracking or advertising-profile purposes.

SteelSet does not currently use an advertising SDK to build advertising profiles or serve targeted third-party advertising.

SteelSet does not sell personal information to advertisers.

Infrastructure providers may still process technical request or security information necessary to operate their services, as described above.

Security and data handling

SteelSet uses technical and organizational measures intended to protect personal information and account data.

Measures in the current implementation include:

• Firebase-backed account authentication;
• authenticated access to account-backed cloud features;
• user-scoped cloud workout records;
• authenticated Community media operations;
• ownership checks in supported media deletion operations;
• network transport through HTTPS/TLS-based service endpoints;
• account deletion workflows that remove associated account data;
• limiting Android permissions rather than requesting broad access that is not needed for product functionality.

No system can guarantee absolute security. We therefore cannot promise that unauthorized access, loss or misuse can never occur.

Data retention

We retain information for as long as reasonably necessary to provide the SteelSet service, maintain your account, preserve your saved training history, operate Community features, satisfy security or moderation needs and meet applicable legal obligations.

Retention depends on the type of information:

• account and cloud workout data may be retained while your SteelSet account remains active;
• Community content may remain available until it is removed through the relevant product or account-deletion process;
• local-only information may remain on the device until it is reset, cleared or application storage is removed;
• safety, abuse-prevention and moderation records may be retained longer when reasonably necessary for those purposes or required by law.

We do not retain data indefinitely merely because it can be retained.

Account deletion

SteelSet provides an in-app account deletion flow.

In the current app, account deletion is available from:

You may also use our external account-deletion resource: Delete your SteelSet account.

You may contact steelsetsupport@gmail.com if you cannot access the app or need help with a deletion request.

The current account-deletion workflow is designed to remove account-associated data including, as applicable:

• Firebase Authentication account data;
• cloud workout sessions;
• cloud deleted-session records;
• the user's public Community profile;
• profile avatar media;
• Community posts authored by the user;
• Community photo media associated with authored posts;
• Kudos given by the user and related notification records;
• notifications owned by the user;
• block records associated with the user's own account;
• reports submitted by the user;
• Community policy-acceptance records associated with the user;
• local SteelSet user data on the device where deletion runs.

Account deletion means deletion of the SteelSet account and associated user data covered by the deletion workflow. It is not merely an account suspension or deactivation.

Safety and moderation records after deletion

Certain records created by other users or generated for legitimate safety, abuse-prevention, dispute or legal purposes may need to be retained even after an account is deleted.

For example, a report submitted by another Community user about content or behavior may be retained where necessary to:

• investigate abuse or policy violations;
• protect Community users;
• prevent repeated misuse;
• maintain security or moderation integrity;
• comply with applicable law or legal process.

Such retention is limited to what is reasonably necessary for the relevant safety, security, moderation or legal purpose.

International service infrastructure

SteelSet relies on service providers including Google/Firebase, ImageKit and Cloudflare.

These providers may operate infrastructure in multiple countries and regions. As a result, information processed through their services may be handled outside the country in which you live, subject to the providers' infrastructure, agreements and applicable legal safeguards.

Your choices and controls

Depending on the feature, you may:

• choose what training information you enter;
• choose whether to publish Community content;
• choose whether to add a Community profile avatar;
• choose whether to attach a photo to a Community post;
• manage Community block/unblock controls;
• remove or reset local data through available app controls;
• delete your SteelSet account;
• contact us about privacy or account-data questions at steelsetsupport@gmail.com.

Age and children's privacy

SteelSet is a training application and is not designed as a child-directed service.

Users who are below the age at which they may independently consent to processing of personal information under applicable law should use the service only with appropriate authorization from a parent or legal guardian where required.

We do not knowingly seek to collect personal information from children in violation of applicable law.

If we learn that information was collected in circumstances that require deletion under applicable children's privacy law, we will take reasonable steps to delete it.

Changes to this Privacy Policy

We may update this Privacy Policy when SteelSet features, data handling practices, service providers or legal requirements change.

When we update this Policy, we will revise the effective date shown at the top of the page and publish the current version at the SteelSet Privacy Policy URL.

Material product changes that affect user data handling may also require corresponding updates to in-app disclosures and Google Play Data Safety declarations.

Contact us

For privacy questions, data requests, account deletion assistance or questions about this Policy, contact: