Skip to content

Privacy

Privacy Policy

Last updated: August 30, 2026

Sets & Servings is built local-first: the app works without an account, and your data is created and stored on your device unless you use a feature that needs more — like searching the online food database, signing in, or turning on cloud backup. This policy explains, in plain language, what data the app handles, when the app uses your location, and what happens if you sign in.

The short version

  • You can use the full core app without creating an account.
  • Your logs are stored locally on your iPhone by default.
  • The app uses your location only for recording outdoor endurance activities (runs, rides, walks, and hikes) — including in the background while a recording you started is active. Nutrition, strength, and manual activity logging never need it.
  • You can optionally connect Apple Health. Health data is never sold or used for advertising, and data imported from Apple Health stays on your device.
  • If you create an account, we process your email address or Apple identity to sign you in.
  • If you enable cloud backup, an encrypted-in-transit copy of your app data — which can include recorded GPS routes — is stored privately for your account. It is a backup, not live cross-device sync.
  • We don't run ads, we don't sell your data, and there are no social or community features that publish your data.

Data stored on your device

When you use Sets & Servings, your logs are written to a local database on your iPhone. Depending on which features you use, this can include:

  • Nutrition data — foods, meals, calories, macronutrients, and micronutrients you log
  • Bodyweight and other progress measurements
  • Strength training data — workouts, exercises, sets, reps, load, and personal records
  • Endurance data — recorded and manually logged activities, including duration, distance, pace and speed, and the GPS route points of outdoor activities you record
  • Supplement logs
  • Planning data — meal plans, meal prep, pantry and inventory items, and shopping lists
  • Content you create — notes, custom foods, custom exercises, titles, and other data you enter by hand

Your logs are not uploaded anywhere as part of normal tracking. Data leaves your device only for specific features: searching the online food database sends your search query or product lookup — never your food diary — to the food catalogue provider (see Service providers), and the optional account and cloud backup features are described below. Deleting the app from your iPhone deletes the local database with it.

Location and GPS routes

Sets & Servings can record outdoor endurance activities — runs, rides, walks, and hikes. That is the only reason the app asks for your location.

  • The app requests precise location only for recording location-based outdoor activities. Location is used to record your route and to calculate distance, pace and speed, and related activity metrics such as elevation where available.
  • While an outdoor activity you started is actively recording, location can continue to be collected in the background — for example while your phone is locked or you switch to another app — so your route and stats stay accurate for the whole session. This requires the background location permission iOS asks you to grant.
  • Background collection happens only during an active recording that you started. When you finish or discard the recording, location collection stops. The app does not collect location at any other time.
  • Treadmill, indoor, and manually logged activities do not use location at all.
  • If you deny location access, everything else keeps working — nutrition, strength training, and manual endurance logging are unaffected.
  • Recorded route points are stored locally on your device as part of the activity, like the rest of your logs. If you enable optional cloud backup, they can be included in your backup (see Cloud backup).
  • Your location is never used for advertising, never used to track you across other companies' apps or websites, and never sold.

Live Activities

While an endurance recording is active, the app can show your live recording metrics — such as elapsed time, distance, and pace — as a Live Activity on the Lock Screen and in the Dynamic Island.

  • The Live Activity shows recording metrics only. It does not display a map of your route on the Lock Screen.
  • It appears only during an active recording and goes away when the recording ends.
  • Live Activities are rendered by iOS on your device; this feature does not send your data anywhere.

Apple Health

Sets & Servings can optionally connect to Apple Health. Nothing is read from or written to Apple Health unless you explicitly connect it and grant the specific permissions in the iOS Health permission prompt.

  • Reading: with your permission, the app can read your body weight, body fat percentage, lean body mass, and BMI from Apple Health so those measurements are available in the app.
  • Writing: with your permission, the app can write your body weight entries and completed workouts to Apple Health.
  • You control each read and write permission individually, and you can change or revoke them at any time in the iOS Health settings.
  • Data imported from Apple Health stays on your device. Under the current architecture it is not uploaded to our servers, and it is not included in optional cloud backups.
  • Your health data is never sold and never used for advertising. We do not use Apple Health data for marketing, and Apple's rules for HealthKit data prohibit it too.

Camera

The app can use your iPhone's camera for one thing: scanning food barcodes when you choose to scan one. The camera is only active when you open the scanner, and images are processed on your device to read the barcode — no photos or video are stored or uploaded. The barcode number itself is used to look up the product (see Service providers).

Notifications

The app can send optional local reminders — for example to log a meal or a workout — but only if you enable them and grant notification permission. Notifications are scheduled on your device and can be turned off at any time in the app or in iOS Settings.

Accounts are optional

You can create an account to enable cloud backup. If you do, we process the minimum needed to authenticate you:

  • Email sign-in: your email address, used to send you a one-time verification code and to identify your account.
  • Sign in with Apple: the identity Apple provides for your account, which may be your real email address or an Apple private relay address, depending on your choice.

Authentication is handled through Supabase, our backend infrastructure provider, and verification emails are delivered through Resend. Alongside your sign-in identity, the account and backup infrastructure uses an account identifier to associate backups with your account. This is an internal identifier, not an advertising identifier. No passwords are stored — sign-in uses one-time codes or Apple's identity service.

Signing out of your account does not erase the local database on your device — your logs remain on your iPhone.

Cloud backup

If you are signed in, you can enable private cloud backup:

  • A backup is a copy of your app data. Depending on what you have logged, it can include your nutrition, foods and meals, strength workouts, endurance activities — including the GPS route points of recorded outdoor activities — bodyweight, supplements, planning data, notes, and other content you created in the app.
  • Backups exist so you can restore your data, for example on a new iPhone. Cloud backup is a backup and restore mechanism — it is not live row-by-row sync, and it does not keep multiple devices continuously in sync.
  • Data imported from Apple Health is not included in backups — it stays on your device (see Apple Health).
  • Backups are private to your account. They are not shared with, or visible to, other users.
  • Backup data is transferred over encrypted connections and stored on infrastructure operated by Supabase.
  • You can restore a backup to your device from within the app.

What we don't do

  • No advertising, no third-party advertising SDKs, and no ad tracking.
  • No tracking of you across other companies' apps or websites.
  • No selling or renting of your personal data — including your location and route data.
  • No social or community features — the app does not publish your data anywhere.
  • No use of your health, fitness, or location logs for marketing.

Service providers

We use a small number of infrastructure providers to operate the app and this website. They process data on our behalf only to provide their service:

  • Supabase — account authentication and cloud backup storage.
  • Resend — delivery of account verification emails.
  • Open Food Facts — the public food catalogue used for food search. When you search for or look up a food, that query is sent to Open Food Facts to return results. Your food diary is not sent to them — only the searches and product lookups you make.
  • Apple — identity services when you use Sign in with Apple.
  • Netlify — hosting for this website. Like most web hosts, Netlify may keep standard server logs (such as IP addresses) to operate and secure the service.

This website itself does not use analytics or advertising trackers.

Data retention and deletion

  • Local data: stays on your device until you delete it in the app or delete the app itself. Signing out, or deleting your cloud account, does not silently erase the local database on your device.
  • Account deletion: you can request deletion of your cloud account from within the app. Deletion enters a 14-day pending period, after which your account and cloud backups are permanently purged from our servers.
  • During the pending period, you can cancel the deletion by signing back in.

Your choices

  • Location: recording outdoor GPS activities requires location permission, which you control in iOS Settings. You can deny or revoke it at any time — the rest of the app keeps working, and you can still log activities manually.
  • Apple Health: connecting is optional, each read/write permission is granted individually, and you can revoke access at any time in the iOS Health settings.
  • Notifications: reminders are off unless you enable them, and you can turn them off in the app or in iOS Settings.
  • Local vs. signed in: you can use the app entirely without an account. Signing in only adds account features such as cloud backup.
  • Cloud backup: off unless you turn it on, and you can stop backing up at any time. Deleting your account removes your cloud backups from our servers after the pending period.
  • Your logs: you can edit or delete logged data in the app — including individual endurance activities and their recorded routes.

Security

We take reasonable technical measures to protect account and backup data, including encrypted connections for data in transit. No system can guarantee absolute security, so we deliberately keep the amount of data that leaves your device as small as possible — your logs stay local unless you choose cloud backup.

Health data disclaimer

Sets & Servings is a fitness and nutrition tracking tool. It is not a medical device and does not provide medical advice. Consult a qualified professional for medical or dietary guidance.

Changes to this policy

If we change this policy — for example, when new features ship — we will update this page and the date at the top. Material changes to how your data is handled will be called out in the app where appropriate.

Contact

Email us at support@setsandservings.app.

For general help, see the support page.