Exercise BitesBeta
Get early access

Privacy

What we collect.

Exercise Bites tracks usage data — which exercises get done, when, and how the app is used — keyed to a random identifier on the phone and linked to your sign-in on the web app. Your exercise history itself lives on your device: the app is offline-first and works without a connection. Here’s the full picture.

Effective date: August 20, 2026

Exercise Bites is published by Reality Check Consulting LLC. This policy says exactly what the app collects and what happens to it.

The short version: the app tracks usage data — which exercises are done, when, and how the app is used — so we can understand and improve it. On the phone, usage data is keyed to a random install identifier; on the web app, where usage is linked to your account, it is keyed to that account. Your exercise history lives on your device first: the app is offline-first and works fully without a connection — that is a reliability property, and this policy, not that design, is what governs data handling. Signing in is required in both the phone app and the web app, and a copy of your exercise activity is kept with your account on both platforms so your progress can follow you — described in "Your account & synced progress" below. Phone usage data stays keyed to the random install identifier and is not combined with your account. If you choose to connect with a coach, what they can see is described in "Sharing with a coach" below — nothing is shared without your explicit say-so.

What stays on your device

Everything Exercise Bites knows about you lives on your device:

This data is saved in the app's local storage on your phone and is the app's source of truth: every session runs from it, and nothing you do during a session requires a network connection. A copy of your exercise activity is kept with your account so your progress can follow you — described in "Your account & synced progress" below.

Usage data

To understand how the app is used and improve it, the app sends us usage events — for example "the app was opened," "a set of Squats was completed" with its duration, "an exercise was swapped," "a reward was unlocked with Stardust" (the app's earned-only virtual currency), or "an exercise pack was unlocked" with how it was acquired (purchase or one of the milestone gifts — never any payment details, price, or receipt; the purchase itself is handled entirely by Apple or Google). Specifically, each event contains a timestamp and, where relevant, the exercise or body-area name, set details (planned and elapsed seconds), the reward item's name and the Stardust amount spent, or the pack's name. Batches are tagged with:

On the phone app, the random identifier is the only identifier — phone usage data is not linked to your name, your account, or your device identity, whether or not you sign in. No name, email, precise or coarse location, IP-based profile, device fingerprint, advertising ID, or health data is collected on any platform. Uploads happen quietly in the background and are never required — if you're offline, the app works exactly the same.

This data goes only to our own server (no third-party analytics service receives it) and is stored in our own database, operated by our database provider, Neon, which processes it on our behalf. We use it solely to understand usage patterns and improve the app. We do not sell it, share it, or use it for advertising or tracking of any kind.

Website & waitlist

If you join the waitlist at exercisebites.fit, we store the email address you submit and use it for exactly two things: a one-time signup confirmation and launch/beta announcements about Exercise Bites. Emails are delivered through Resend, our email provider, which processes addresses on our behalf. Every announcement includes an unsubscribe link, and you can have your address removed at any time by replying to any of our emails or writing support@exercisebites.fit. We never sell or share the list.

The website itself uses cookie-free, anonymous page-view analytics (Vercel Web Analytics) so we can see which pages are visited. It sets no cookies, stores no personal data, and does not track you across sites; we see only aggregated counts.

Your account & synced progress

Signing in is required in both the phone app and the web app — everything in "What stays on your device" applies unchanged once you are in, and the app works fully offline from then on. An account is the same thing everywhere: you enter your email address, receive a one-time code, and type it in. No password ever exists. For accounts we store exactly two things: your email address and your sign-in sessions, held in our own database (hosted by Neon, which processes it on our behalf); sign-in code emails are delivered through Resend.

On both the phone and the web app, we keep a copy of your exercise activity linked to your account, so your progress survives a lost phone or a cleared browser and follows you when you sign in somewhere new. This copy is your completed exercises — which exercise, its set and rest timings, and their timestamps — and nothing more: no location, no health records, no payment details. We do not use it for advertising and do not sell or share it (a coach can see parts of it only if you explicitly choose that — see "Sharing with a coach"). On the web app, usage data is linked to this same account (see "Usage data"); phone usage data is keyed to the install identifier only and is not combined with your account. Syncing happens quietly in the background when a connection exists and is never required — offline, the app keeps working from its local copy, which stays the source of truth.

Sharing with a coach

You can connect with a coach or physiotherapist inside the app — always by a code they give you, never by being searchable. Connecting is your choice, and so is what they can see: at the moment you accept, you choose whether they see your exercise activity from that day forward, your past activity too, or nothing at all — the connection works either way. What you chose is always visible under Account, and you can narrow it or disconnect at any time, effective immediately. A coach you connect with is an independent person or practice, not part of Reality Check Consulting LLC; share only what you are comfortable with them seeing. We keep a record of every share and revocation so there is never doubt about who could see what, and when.

Web app

Using Exercise Bites in a browser (app.exercisebites.fit) requires signing in — see "Your account & synced progress" above.

An optional web membership can be purchased on the web app. Payment is processed entirely by Stripe — we never see your card details. We store only your subscription's status (which plan, active or not, and its renewal date) linked to your web account, so the app knows what you've unlocked. You can cancel any time through the subscription management page linked in the app; cancellation stops future renewals and nothing already recorded on your device is taken away.

To delete an account and everything attached to it (email, sessions, subscription records, the synced copy of your exercise activity, any coach connections and shares, and web usage events linked to the account), open Account in the phone app and choose "Delete account" — we send a code to confirm it's you, and entering it deletes the account immediately. You can also write support@exercisebites.fit from that address. An account with an active membership must cancel it first, so a live subscription is never left behind.

What we do not do

Data deletion

Deleting the app deletes everything on your device, including the random identifier — after that, nothing can connect past phone usage data to you or your device, by us or anyone else. Because phone usage data carries no identity, we have no way to determine which of those records came from you, which also means we cannot retrieve or delete them on request. Web usage events recorded while you were signed in are linked to your account and are deleted with it, as is the synced copy of your exercise activity (see "Your account & synced progress"). Waitlist emails are deleted on request (see above).

Permissions

The app may use standard device capabilities — audio playback (exercise cues and ambient music), vibration (haptic pacing), and keeping the screen awake during a set. None of these involve collecting data.

Children

An account stores an email address, sign-in sessions, and the synced copy of exercise activity described above. Phone usage data carries no identity for any user; the web app links usage to the account.

Changes to this policy

If a future version of the app changes any of the above, this policy will be updated before that version ships.

Contact

Reality Check Consulting LLC

Questions: support@exercisebites.fit