Last updated: July 18, 2026
This Privacy Policy explains how Skulpt ("App", "we", "our", or "us") collects, uses, stores, and shares information when you use the Skulpt mobile application on iOS or Android or visit skulpt.app ("Website"). The App and Website are referred to together as the "Services".
Please read this policy before using the Services. If you do not agree with it, please do not use the Services.
We may update this policy as the Services change. We will show the date of the latest revision at the top of this page and provide any additional notice required by law.
The information we collect depends on the features you use. Some information stays on your device, while other information is sent to our servers or service providers as described below.
You may provide or import the following information:
When you access or use the App, we automatically collect certain information, including:
We use PostHog to understand how the App is used and to improve its features. Analytics events are associated with the randomly generated Skulpt user identifier and may include app and device details, lifecycle events, screen views, product actions, event outcomes, and approximate country or region derived from your IP address.
We do not send workout names, exercise names, free-text notes, search queries, body measurement values, or raw heart-rate samples to PostHog.
Skulpt does not access advertising identifiers, show third-party advertising, track you across apps or websites owned by other companies, or provide data to data brokers.
We use PostHog on the Website to measure page visits and clicks on the App Store and Google Play links. Website events may include the page path, site language, destination store, link placement, browser and device details, and approximate country or region derived from your IP address.
The App Store link contains fixed Apple provider and campaign tokens so we can measure downloads attributed to the Website. The tokens identify the link, not a person, and contain no user-entered data.
If a link to the Website contains campaign parameters, we collect only utm_source, utm_medium, utm_campaign, utm_content, and utm_term. We also record the referring site's origin, such as https://example.com, without its path or query. Other URL query parameters and fragments from the Website address are removed before an event is sent.
Website analytics uses a random identifier stored only in the memory of the current browser tab. We do not store that identifier in cookies or local storage. It resets when the page is reloaded or the tab is closed. Automatic interaction capture, user profiles, and session replay are disabled on the Website.
We use the information described above to:
We disclose information only as needed to operate the Services, comply with the law, or complete a business transaction described below.
The following service providers process information on our behalf:
These providers process information under their applicable service terms and privacy policies.
We do not sell personal information or share it for cross-context behavioral advertising. We do not use information from the Services to track you across apps or websites owned by other companies.
We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
We may disclose your information if we are required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency), or if we believe disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend our rights or property; (c) prevent or investigate possible wrongdoing in connection with the App; (d) protect the personal safety of users of the App or the public; or (e) protect against legal liability.
We may disclose your personal information for any other purpose with your consent.
The App stores its primary working copy of your data locally on your device in a SQLite database. When synchronization is enabled in an official store build, the App sends data to our API at api.skulpt.app. Synchronized data may include your Skulpt user identifier, profile and settings, notification tokens, workout plans, workouts, exercises, sets, notes, and measurements.
We retain synchronized data for as long as needed to provide the service, meet legal obligations, resolve disputes, and enforce our agreements. Analytics and diagnostic providers retain data according to our configuration and their applicable service terms.
We may retain aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you, indefinitely, for analytical or business purposes.
To request deletion of synchronized personal information, contact us using the details in Section 12. We will process your request as required by applicable law.
We use reasonable administrative and technical measures designed to protect personal information. No storage or transmission system is completely secure, so we cannot guarantee absolute security.
The App may request access to certain features and services on your device. These may include:
You may control many of these permissions through your device's system settings. Disabling certain permissions may limit the functionality of the App.
The App is not directed to children under the age of 13 (or such higher age as required by applicable law), and we do not knowingly collect personal information from children under that age. If we learn that we have collected personal information from a child under age 13, we will take steps to delete that information as quickly as possible. If you believe that we might have any information from or about a child under 13, please contact us using the information provided in Section 12.
Depending on your jurisdiction, you may have certain rights with respect to your personal information. These rights may include:
To exercise any of these rights, please contact us using the information provided in Section 12. We will respond to your request in accordance with applicable law. Please note that we may ask you to verify your identity before responding to such requests.
The Services may contain links to third-party websites, services, or applications that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of those sites or services. Please review their privacy policies before providing information to them.
The following third-party services are integrated into the Services and are subject to their own privacy policies:
Your information may be transferred to, stored, and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from those of your country.
Where required, we use safeguards intended to make international transfers consistent with applicable data protection law.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: hello@skulpt.app
Website: https://skulpt.app
We will make every effort to resolve your concerns in a timely manner.
This Privacy Policy, together with any Terms of Service or other agreements applicable to the Services, constitutes the entire agreement between you and us with respect to your privacy and supersedes all prior or contemporaneous understandings, agreements, representations, and warranties with respect thereto.