MesoFoundry Strength

Privacy Policy

Effective date: October 19, 2026

This policy explains what MesoFoundry Strength (“the app”, “we”, “us”) collects when you use it, why, and how it’s stored. It applies to the MesoFoundry Strength mobile app.

Who we are

MesoFoundry Strength is operated by MesoFoundry LLC. If you have questions about this policy or your data, contact us at support@mesofoundry.com.

What we collect

Account data. When you create an account, we collect an email address and a password (stored as a salted hash we never see in plain text — authentication is handled by our backend provider, Supabase, described below). If you subscribe to Premium (including a free trial), your subscription status is associated with your account.

Training data. Your mesocycles, workouts, exercises, sets, reps, weights, and the notes you attach to them. On the Free plan this data lives only on your device. On Premium, it also syncs to our cloud database so it’s available across your devices and backed up if you lose or replace one.

Lift With Friends. If you invite another user to compete on a training block (a Premium feature), the app computes a daily point score for each of you from your own logged sets and shares that score — and only that score — with the other participant. Your raw sets, weights, and reps are never shared; the person you’re competing with only ever sees your points, never your training log.

Device and diagnostic data. Basic technical information (app version, OS version, device model, crash and error reports) to help us fix bugs. We do not collect precise location or contacts.

Progress photos. If you opt in to the optional progress-photos feature, the photos themselves are stored only on your device — we never receive, upload, or store the images. We store a small record of when you completed each check-in (for example, “3-month check-in completed on this date”) so the reminder schedule works correctly, including across devices if you’re on Premium. Because the images never leave your device, switching phones or reinstalling the app doesn’t bring them back on its own — the check-in schedule keeps going, and you can add photos back to each past check-in from your phone’s gallery, or retake them. Either way the images stay on your device. If you allow notifications for check-in reminders, the app registers a push token for your device (see Expo below). Turning the feature off deletes that record entirely.

Analytics. We may use privacy-respecting analytics tools to understand aggregate usage — which screens are used, how often people log workouts, where people drop off in onboarding — so we can improve the product. Analytics data is aggregated and is not used to build advertising profiles, and we do not sell it. If we enable a specific analytics provider (for example, Google Analytics), we’ll disclose it here by name before it goes live, and it will respect your browser’s Do Not Track setting on the web where technically feasible.

How we store it

Account and Premium training data is stored with Supabase, our backend provider, which runs on managed cloud infrastructure with encryption in transit (TLS) and at rest. Access to the database is restricted by row-level security, meaning your account can only read and write its own data — not other users’. Free-plan training data that never leaves your device is stored locally in your device’s app storage and is not transmitted to us at all unless you subscribe to Premium.

Third parties

We work with a small number of third-party services to run MesoFoundry Strength. We don’t sell your data to anyone, for any reason.

  • Supabase — our database, authentication, and backend hosting provider. Handles account credentials and Premium training data as described above.
  • App stores. If you subscribe to Premium or start its free trial, billing is handled by the Apple App Store or Google Play. We receive confirmation that a subscription is active, not your payment card details — we never see or store payment information.
  • RevenueCat — processes in-app purchase and subscription status for the app stores, so the app knows whether you have Premium. It receives your account ID and your purchase records from the store, never your card details.
  • Resend — sends our account emails: a welcome email after you confirm your address, and a notice a few days before Premium ends if it isn’t set to renew. It receives your email address and name.
  • Sentry — collects crash and error reports from the app: device model, OS version, app version, and the technical details of the error. It does not receive your training data.
  • Expo — delivers push notifications, such as progress-photo check-in reminders, if you allow them. It receives a push token that identifies your device to the notification service, and the text of the reminder.

Your choices and rights

Deleting your account. You can delete your account and all associated data yourself, at any time, from within the app: Settings → Account & cloud backup → Delete Account (type “delete” to confirm). This permanently removes your cloud-stored training data and your account record right away, and cannot be undone. Data stored only on your own device is removed at the same time, and is otherwise under your control and removed when you delete the app.

You can export a copy of your data any time from Settings → Your data in the app. Email support@mesofoundry.com to ask us to delete your account if you’re unable to do it in the app. Depending on where you live, you may have additional rights (access, correction, deletion, portability, or objection to processing) under laws like the GDPR or state privacy laws — we’ll honor applicable requests regardless of where you’re located.

Data retention

We keep your account and training data for as long as your account is active, so the app can do its job. When you delete your account, that data is removed from our active systems immediately, except where we’re required to retain limited records (for example, transaction records) for legal or accounting purposes. Routine backups may retain a copy for a short rolling window before they age out.

Children’s privacy

MesoFoundry Strength is not directed at children, and we don’t knowingly collect data from anyone under 13. If we learn we’ve collected data from a child under 13, we’ll delete it.

Changes to this policy

If we make material changes to this policy, we’ll update the effective date above and, where appropriate, notify you in the app or by email before the change takes effect.

Governing law

This policy is governed by the laws of the State of Arizona, without regard to conflict-of-law principles.

Contact

Questions about this policy or your data: support@mesofoundry.com.