Privacy

When you sign in with Apple, Strict's server stores:

• the identifier Apple gives Strict for your Apple ID, and the email address Apple shares, which may be a private relay address;
• the sign-in sessions for your iPhone and for the consent page, so they stay signed in;
• Apple's refresh token, encrypted, kept only so Strict can revoke Sign in with Apple when you delete your account;
• a copy of your training: your programs, saved workouts, workouts with every set you logged, and the exercises you created. Your iPhone sends each change shortly after you make it, while you're signed in;
• the assistants you connect: each one's name, when you connected it, and the tokens it uses, stored only as hashes.

An assistant you connect, such as Claude, ChatGPT or Cursor, can read the copy of your training on Strict's server: your workouts and sets, programs, saved workouts, exercises and progress over time. If you explicitly allow training edits, it can create and edit custom exercises, programs and saved workouts, switch your active program, and resolve sync conflicts. These changes arrive when the updated iPhone app next syncs outside a workout. It cannot edit recorded workouts or sets. Existing read-only connections stay read-only. What it does with what it reads is up to the assistant and its provider's own privacy policy.

You choose each assistant on a page that names it, and you can disconnect it in Settings at any time; it loses access within about a minute.

In Strict, open Settings and choose Delete account. Strict disconnects every assistant, deletes the copy of your training, revokes Sign in with Apple and deletes your account from its server. Workouts stay on your iPhone.

A record that the account was deleted is kept, holding only an opaque account number, hashes and dates, so a retried request still gets an answer.

Use the support link on Strict's App Store page.