Privacy Policy

Last updated: October 6, 2026

Rootwork (“the App”, “we”, “us”) is an iOS fitness tracking app with an Apple Watch companion. Rootwork is operated by D.Cole LLC, United States. This policy explains what information the App collects, how it’s used, and your choices.

1. Information We Collect

Account information. You create an account by signing in with Sign in with Apple or Google Sign-In; from that provider we receive your name and email address. If you use Sign in with Apple and choose to hide your email, we receive Apple’s private relay address instead of your real email. The App also supports email-and-password sign-in for existing accounts. We use this information to create your account and identify you across your devices.

Workout and fitness data you create in the App. This includes:

• Workout logs (exercises, sets, reps, weights, dates, notes)
• Programs (training schedules you save or generate)
• Body measurements and body weight, if you log them
• Progress photos, if you take them
• Personal records, streaks, badges, and milestones
• Preferences (units, equipment, training location, etc.)

Progress photos. If you add progress photos, the image files are uploaded to and stored in Firebase Storage (Google Cloud), and a reference to each photo is stored in your account database. Photos are private to your account.

Apple Watch data. If you use the Watch app, individual sets you log on the watch sync to your iPhone. Workout duration and heart rate samples recorded during a session (and a training zone derived from your maximum heart rate) are stored alongside the session in your account database.

Subscription state. If you subscribe to Rootwork Pro, we use RevenueCat to manage subscriptions. RevenueCat receives an app-specific user identifier tied to your account and stores your subscription and purchase history so your Pro access works across your devices and restores correctly. We do not receive your full Apple ID or payment card details — Apple handles billing.

Usage and diagnostic data. Basic usage and diagnostic data (such as app opens, screen views, device model, app version, and automatically-collected diagnostic events) are collected through Firebase Analytics to help us understand engagement and fix bugs. The App does not include a separate crash-reporting or performance-monitoring SDK. This data is not tied to your real-world identity for advertising and is never used to track you across other apps or websites.

2. Apple HealthKit Data

If you grant permission, Rootwork reads the following from Apple HealthKit:

• Heart rate during a workout, to show your training zone and average heart rate in the session summary.
• Heart rate variability and your maximum heart rate, to inform recovery and readiness features.
• Sleep duration, to inform your recovery score and readiness.
• Body weight, if you choose to sync it, so your weight history stays current without manual entry.

With your permission, Rootwork may also save your completed workouts to Apple Health to keep your fitness history in sync.

Where this data goes. Heart rate recorded during a session and body weight you sync are stored in your account database (Firebase Firestore, described below) so they power your stats, recovery insights, and history across your devices.

If you use the AI Coach and have agreed to the one-time AI consent prompt, a short, summarized recovery context may be included in what we send to our AI provider (Anthropic) so the coach’s replies fit you: a recovery score, your recovery tier, and last night’s sleep duration. Raw heart-rate or heart-rate-variability readings are not sent, and no other AI feature sends any Health data. Apart from this, HealthKit-derived data stays within your account. We never use HealthKit data for advertising or marketing, and never sell it. You can revoke HealthKit access at any time in the iPhone Settings app → Privacy & Security → Health → Rootwork.

3. How We Use Your Information

• To provide and operate the App (sync your workouts across devices, show your stats, generate AI content you request)
• To process subscriptions
• To send local notifications you have enabled (e.g. rest-day reminders) — these are scheduled on-device and do not transmit data
• To fix bugs and improve the App

We do not sell your personal information. We do not run advertising in the App.

4. Sharing Content You Choose to Share

When you tap Share on a workout, badge, or similar item, Rootwork renders an image and hands it to the standard iOS share sheet so you can send it wherever you choose (Messages, social apps, etc.). Rootwork does not create public web links to your data, and does not make your account data viewable by anyone else. What leaves the App is only the image you explicitly choose to share, and only to the destination you pick.

5. Third-Party Services

The App relies on the following services:

• Firebase (Google LLC) — authentication (including Google Sign-In), cloud database (Firestore) for your workouts and account data, Firebase Storage for your progress photos, serverless Cloud Functions that proxy AI requests, and Firebase Analytics for the usage and diagnostic data described above. Firebase Privacy
• RevenueCat — subscription management. Receives an app-specific user ID tied to your account and stores your subscription/purchase history. RevenueCat Privacy
• Anthropic (Claude API) — Rootwork’s AI features (generating or importing a program, the AI coach, warm-ups and cool-downs, and exercise swaps) send data to Anthropic’s Claude models through our Cloud Functions to produce the content you requested. Depending on the feature, this can include: the workout context you provide (goal, equipment, exercises, sets and reps); injury or pain notes you enter for a safer swap or a physical-therapy plan; recent training and recovery context so the coach’s replies fit you (this recovery context can include a recovery score and last night’s sleep duration derived from Apple Health, but not raw heart-rate readings); and, if you use photo import, the photo you choose so its program text can be read. We ask for your explicit permission the first time you use an AI feature and do not send any of this data before you agree. Under Anthropic’s commercial API terms, this data is not used to train their models, and it is not sold. We do not send your name, email, or account identifiers to Anthropic. Anthropic Privacy
• Sign in with Apple / Google Sign-In — used only at sign-in to authenticate you. We receive only what these providers share with us (name and email, or Apple’s private relay email if you hide yours).

6. Data Storage and Retention

Your workout and account data is stored in Firebase Firestore and Firebase Storage, hosted by Google Cloud in the United States. We retain your data for as long as your account exists. You can delete your account at any time from inside the App (Profile → Delete Account), which permanently removes your workouts, programs, saved templates, body and recovery logs, milestones, preferences, your progress photos (both the database records and the stored image files), and your account record.

Usage and diagnostic data is retained according to Firebase Analytics’ retention settings (configurable, and set to a limited period) and is not tied to your real identity.

7. Your Rights

You can:

• Access / export your data using the Export Data screen inside the App (a Pro feature). Any user can also request a copy of their data by emailing us.
• Delete your account and all associated data from Profile → Delete Account
• Withdraw HealthKit access from iPhone Settings at any time

If you are in a region with additional rights (GDPR, CCPA, etc.), you may also request a copy of your data or restriction of processing by emailing us. We honor verified requests within 30 days.

8. Children’s Privacy

Rootwork is not directed to children under 13, and we do not knowingly collect data from anyone under 13. If you believe a child has provided us information, please contact us and we will delete it.

9. Security

Data is encrypted in transit (HTTPS) and at rest by Google Cloud, and access is restricted by Firebase security rules. No system is perfectly secure; please use a strong password / passkey on the account you sign in with.

10. Changes to This Policy

We may update this policy as Rootwork evolves. Material changes will be communicated in-app or via the email tied to your account. The “Last updated” date at the top of this policy reflects the most recent change.

11. Contact

Questions, requests, or concerns? Email support@rootworkfitness.com and we’ll respond as soon as we can.