Privacy policy

Updated 24 October 2026

The short version

Your camera video and voice never leave your phone. We store what's needed for your account, your workout numbers and the social features. No ads, no tracking, and we never sell your data.

On your phone only

Pose tracking uses Apple's on-device Vision framework; video is never recorded or uploaded. Saying "Start" uses on-device speech recognition; audio is never recorded or sent. If you turn on Apple Health, Flex only writes your finished sets to Health and never reads your Health data.

What we store when you sign in

Your Sign in with Apple account ID (and the email Apple shares, which may be a private relay address); your display name, handle and optional profile photo; your workouts (exercise, reps, verified reps, form score, duration and time); friends, friend requests and blocks; battles, competitions and challenges; a skeleton recording (joint positions only, no video) of each set, kept for 30 days so suspicious results can be checked (longer only while a set is under review), plus skeletons of sets you send as challenges or choose to share as ghosts; whether your phone was moving during a set; reports you make; and a push notification token for your phone.

How it's used

Only to run Flex: syncing your workouts, leaderboards, friends, battles, challenges and competitions, sending the notifications you asked for, and keeping the community safe (reviewing reports and blocks) and keeping leaderboards fair (checking sets that look impossible, and removing them or hiding cheaters from leaderboards).

Who can see what

Other Flex users can see your display name, handle, photo and verified totals, and your place on leaderboards and in competitions you join. Friends also see your bests, streak and your head-to-head record. People you block can't find or see you.

Who processes it

Supabase hosts our database and servers (United States). Apple provides Sign in with Apple, push notifications and Flex Pro payments (we never see your payment details). They process data only to provide those services to us.

Keeping and deleting

We keep your data while you have an account. Me > Delete account permanently deletes your profile, photo, workouts, friends, battles, competitions you created, challenges, reports and push tokens straight away. Our sign-in service keeps a basic record of your Apple account ID and relay email, which you can ask us to erase using the contact details below. Signing out removes this phone's push token.

Children

Flex isn't intended for children under 13 and we don't knowingly collect their data.

Your rights

You can see and change your profile in the app, delete your account at any time, and contact us about your data using the details below.

Contact

Questions, data requests or reports: support@mully.io