PRIVACY POLICY

Last updated: June 2026  ·  Applies to users in Chile, Sweden and worldwide

1. Who We Are

WOD Architect is a Progressive Web Application (PWA) for CrossFit athletes and coaches, available at app.wodarchitect.app. The service is operated by WOD Architect (wodarchitect.app@gmail.com).

2. Data We Collect

We collect the following categories of personal data:

• Account data: Email address and password (stored securely via Supabase Auth)
• Profile data: Age, gender, height, weight, body measurements (knuckle, knee, hip, shoulder, overhead reach), fitness goal, language preference, and voice settings
• Training data: Workout history, personal records (PRs), 1RM values, VO₂max, heart rate data, and session results
• Usage data: App settings, templates, and box session participation

We do not collect location data, payment information, or any data from third-party sources.

3. Why We Collect It (Legal Basis)

We process your data under the following legal bases:

• Contract performance: To provide the app's core functionality — calculating physics metrics, saving your training history, and running box sessions
• Legitimate interest: To improve the app based on usage patterns and beta feedback
• Consent: For optional features such as voice cues and personalised recommendations

4. How We Store Your Data

Your data is stored using Supabase, a cloud database provider. Supabase stores data on Amazon Web Services (AWS) servers located in the United States. This means your data is transferred outside of Chile and the European Union (EU).

For users in Sweden and the EU, this transfer is covered by Supabase's compliance with standard contractual clauses (SCCs) as required by GDPR. You can read Supabase's data processing terms at supabase.com/privacy.

Data stored locally on your device (workout state, preferences, templates) is held in your browser's localStorage and never leaves your device unless you are signed in and syncing to the cloud.

5. How Long We Keep Your Data

• Active accounts: Data is retained for as long as your account is active
• Deleted accounts: All personal data is permanently deleted within 30 days of an account deletion request
• Beta period: Data collected during the beta may be retained for up to 12 months for product improvement purposes, after which it is anonymised or deleted

6. Your Rights

Depending on your location, you have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and all associated data
• Portability: Request your data in a portable format (JSON)
• Objection: Object to processing based on legitimate interest
• Restriction: Request that we limit how we use your data

To exercise any of these rights, email us at wodarchitect.app@gmail.com. We will respond within 30 days.

If you are in Sweden or the EU and believe we have not handled your data correctly, you have the right to lodge a complaint with your national data protection authority. In Sweden this is Integritetsskyddsmyndigheten (IMY) at imy.se.

7. Data Sharing

We do not sell, rent or share your personal data with third parties for marketing purposes. Data is only shared with:

• Supabase: Our database and authentication provider (see section 4)
• Box coaches: If you join a box session, the coach can see your submitted results (rounds, reps, time) for that session only. No profile or measurement data is shared.

8. Security

We take reasonable technical measures to protect your data, including:

• Passwords are hashed and never stored in plain text
• All data transmission uses HTTPS/TLS encryption
• Database access is protected by row-level security (RLS) policies
• Authentication is handled by Supabase Auth with industry-standard JWT tokens

9. Children

WOD Architect is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify users via email or an in-app notice.

11. Contact

For any questions about this Privacy Policy or your personal data, contact us at: