Privacy Policy
Last updated: July 11, 2026
This policy explains what information the Glute Max iOS app collects, how we use it, and the choices you have.
The short version
- Your scan photos are never stored on our servers. They're sent securely, analyzed by AI to produce your score, and immediately discarded.
- We don't sell your personal information. Ever.
- We collect what we need to run the app: your account, your training data, your answers to setup questions, and anonymous usage analytics.
- You can make your profile private, and you can ask us to delete everything.
What we collect
Account information
When you subscribe, the app creates an account for you (initially anonymous). If you register with an email address, we store that email and an auto-generated username. We don't require your real name.
Training and program data
Your generated programs, workout logs (sets, reps, weights, dates), XP and rank progress, streaks, and scan results (numeric scores) are stored in our database so they sync and survive reinstalls.
Setup answers
During onboarding you answer questions (equipment, goal, training intensity, days per week) and may provide body metrics (height, weight, age, sex — typed in or auto-filled from Apple Health with your permission). These are used to personalize your program: they are sent to our servers and processed by our AI provider (Amazon Web Services Bedrock) to generate your plan. We also ask where you heard about us — that answer is used only in aggregate marketing analytics.
Scan photos (ephemeral)
The Glute Max Score works from photos you take or choose. Photos are transmitted over an encrypted connection, analyzed in memory by our AI provider to produce your scores, and discarded immediately. They are not written to storage on our servers, and we cannot retrieve them afterward. A copy stays on your device so you can see it with your report; deleting the app deletes it.
Community content
If you post to the community feed, your post text, optional photo, username, rank, and reactions/comments are stored and visible to other users. Feed photos are stored in a private bucket and are only served to signed-in app users — they are not publicly accessible on the web. You can enable Private profile in Settings, which hides your profile and stats from other users (posts you explicitly published remain visible).
Apple Health (optional)
With your permission we read height, weight, age, biological sex, and calories burned to pre-fill your profile and personalize your program, and we write your completed workouts back to Health. Health data is used as described above (body metrics are included in program generation); we do not use Health data for advertising and never sell it. You can revoke access anytime in iOS Settings → Health.
Purchases
Subscriptions are processed by Apple. We use RevenueCat, a subscription-management service, which receives your purchase receipt and an anonymous app-user ID to determine your subscription status. We never see your payment card details.
Usage analytics
We collect anonymous product analytics (for example, which onboarding screens are viewed and whether a purchase completes) tied to a random device identifier — not your name, email, or account. These events contain no photos, no health data, and no workout content, and are retained for up to 12 months.
Advertising attribution
With your consent via Apple's App Tracking Transparency prompt, we use AppsFlyer to measure which of our ads lead to installs and subscriptions (device identifiers plus install and purchase events). If you decline, we only receive aggregated, non-identifying campaign statistics from Apple, and the app works exactly the same.
How we use information
To provide the app (generate programs, score scans, sync your data), operate the community, process subscriptions, understand aggregate usage, and improve the product. That's it.
What we share
- Service providers that run our infrastructure: Google Firebase (authentication and database), Amazon Web Services (servers, AI processing, analytics storage), RevenueCat (subscription status), AppsFlyer (ad attribution, with your consent), Apple (payments). They process data on our behalf and cannot use it for their own purposes.
- Other users, only for content you post to the community and your public profile (unless set to private).
- Legal, if required by law.
- We do not sell personal information and do not share it with data brokers.
Data retention & deletion
Your account data is kept while your account exists. You can delete your account and all associated data (profile, programs, workouts, scan results, posts) instantly in the app — Settings → Delete account & data — and export everything as JSON via Settings → Export my data. You can also email bmurtaza@blob.technology from the address linked to your account (or include your username) and we'll delete it within 30 days. Local data is deleted when you remove the app. Anonymous analytics expire automatically within 12 months.
Children
Glute Max is not directed at children under 16, and we don't knowingly collect their data. If you believe a child has provided us data, contact us and we'll delete it.
Security
Data is encrypted in transit (TLS) and stored with reputable cloud providers using industry-standard protections. No system is 100% secure, but we design conservatively — the clearest example being that scan photos are never stored at all.
Your rights
Depending on where you live (e.g. GDPR, CCPA), you may have rights to access, correct, delete, or export your data, and to object to processing. Contact bmurtaza@blob.technology and we'll honor them. We don't discriminate for exercising your rights.
This website
The website itself doesn't require an account and sets no tracking cookies.
Changes
We'll update this page when the policy changes and adjust the effective date. Material changes will be announced in the app.