Skip to content
magsmi
SupportLegal한국어
Legal

Effective September 29, 2026

Workout Tracker Privacy Policy

This policy explains how Workout Tracker's native mobile and Apps-in-Toss editions handle your training records.

LanguagesThis document is provided in English.

Controller and Contact

Magsmi, a sole proprietor in the Republic of Korea, provides Workout Tracker. The Magsmi Privacy Desk handles privacy matters and related complaints. Send privacy requests to support@magsmi.com.

What Workout Tracker Stores

The native app stores your training records in a database on your device. These are exercises, including custom names, muscle groups, and equipment, programs and program days with their planned sets, calendar assignments, and sessions with their times, notes, sets, repetitions, weights, RPE values, and warm-up status. Settings such as units, language, appearance, and rest-timer preferences are stored on the device too. Magsmi has no Workout Tracker account or cloud sync and cannot see these records. Android cloud backup is off. Other device backups follow your platform settings.

The Apps-in-Toss edition stores the following in Toss Storage: custom exercises, programs, calendar assignments, sessions, logged sets, and language, appearance, and onboarding settings. Toss manages that storage under its own policy.

When you export in the native app, it creates CSV or JSON text of all logged sets and hands it to your device's share sheet. In the Apps-in-Toss edition, export saves a JSON file of your calendar assignments and sessions. After that, the app or place you choose controls the copy.

How Information Is Used

Workout Tracker uses your records only to plan and log workouts, show your progress, and create the exports you ask for. Purchase information is used to provide and restore Pro, and support email is used to answer your request. Magsmi does not sell your information or use it for advertising.

Retention and Deletion

Records stay until you delete them. In the native app, deleting a session removes its sets, and deleting a custom exercise removes its logged sets. Deleting a program or program day removes its calendar assignments but keeps past sessions and sets. Clearing app data or uninstalling the native app removes its records. In the Apps-in-Toss edition, deleting a workout removes its sets and notes, and Delete all workout data in Settings removes your workouts, programs, and custom exercises from Toss Storage.

If you email support@magsmi.com, Magsmi receives your email address, message, and any attachments. Magsmi keeps support messages only as long as needed to answer and follow up, and deletes them on request unless the law requires keeping them.

When a record is no longer needed and no law requires keeping it, Magsmi deletes the electronic copy it controls.

Service Providers and International Processing

Apple and Google run the app stores and take payment for the native app. Toss runs the Apps-in-Toss platform and Toss Storage. Each acts under its own policy.

Magsmi shares personal information only with the providers named in this policy and only for the purposes stated here. The recipients below receive personal information outside Korea.

Recipient: RevenueCat, Inc. Destination: the United States, on Amazon Web Services. Items: an anonymous app user ID, product, transaction, and entitlement state, and routine device and network data. When and how: over an encrypted connection when a native store build opens and when you buy or restore Pro. Purpose: offering, verifying, and restoring purchases. Retention: RevenueCat keeps purchase records for as long as it needs them to provide and restore purchases, prevent fraud, resolve disputes, and meet legal obligations. You can ask Magsmi to have your records deleted. Deleting them does not remove your purchase, and restoring it later from the App Store or Google Play creates a new record. Privacy contact: 1032 E Brandon Blvd #3003, Brandon, FL 33511, United States, compliance@revenuecat.com. Refusing: do not use the native app, which starts RevenueCat when it opens. The Apps-in-Toss edition does not use RevenueCat.

Recipient: Cloudflare, Inc. Destination: primarily the United States and the European Economic Area, with access from other countries where Cloudflare operates. Items: request data such as your IP address and the addresses, headers, message, and attachments of support email it forwards. When and how: over an encrypted connection when the native app checks the magsmi.com release file or you open Magsmi's legal or support pages, and through Email Routing when you email support. Purpose: delivering the release file, delivering Magsmi's legal and support pages, and forwarding support email. Retention: Cloudflare keeps routine request and security records for as long as the purposes in its privacy policy and its legal obligations require. Privacy contact: dpo@cloudflare.com. Refusing: do not use the native app, which checks the release file, do not open Magsmi's legal or support pages, and do not email support. You can still use the Apps-in-Toss edition. Magsmi cannot answer a request it does not receive.

Recipient: Google LLC. Destination: the United States and Google servers around the world. Items: the sender and recipient addresses, headers, message, and attachments of support email. When and how: when you email support, Cloudflare Email Routing forwards the message to Magsmi's consumer Gmail mailbox. Support email uses standard encrypted email transport where your email provider supports it. Purpose: receiving, reading, and answering support requests. Retention: Gmail keeps the message until Magsmi deletes it under this policy. Google says its complete deletion process generally takes about two months and encrypted backups can retain data for up to six months. Privacy contact: the options at https://support.google.com/policies/answer/9581826. Google's privacy policy is at https://policies.google.com/privacy. Refusing: do not email support. Magsmi cannot answer a request it does not receive.

Your Rights, Security, and Changes

Depending on applicable law, you can ask Magsmi to access, correct, delete, or stop processing information it controls, or withdraw consent, by emailing support@magsmi.com. Records the law requires Magsmi to keep stay until their period ends. In Korea, you can also contact the Privacy Infringement Report Center at 118 or the Personal Information Dispute Mediation Committee at 1833-6972.

The app's network requests use HTTPS.

Magsmi posts changes to this policy here with a new effective date and gives additional notice where the law requires it.