Privacy Policy

Chalk Workout Planner is built to collect as little as possible. The downloadable and demo versions keep everything in your browser and never talk to our servers. The hosted app at chalkworkoutplanner.com signs you in by email and, so your training is available on every device you use, syncs your planner data to a private account that only you can read. This policy explains exactly what that means.

Who we are

Chalk Workout Planner (“the planner,” “we,” “us”) is a single-purchase web app for building and tracking training programs. It is operated by an independent developer and reachable at support@chalkworkoutplanner.com.

What we collect, and what we don’t

What we collect and store

• Your email address, when you sign up or sign in. We use it to verify access and to send you a one-time login code. We do not use it for marketing without your separate consent.
• Your planner data — hosted app only. When you are signed in at chalkworkoutplanner.com, your training data (PRs, workouts, weekly programs, achievements, injuries, notes) is saved to a private record tied to your account so it is available on every device you sign in on. It is protected by row-level security: only your authenticated account can read or write it — we do not browse it, and other users cannot access it. This is stored with our hosting provider, Supabase (see “Where data is stored and processed” below).
• Limited technical information needed to operate sign-in — such as the IP address and timestamp when a login code is requested, used to prevent abuse. This is handled by our authentication provider and retained only briefly.

What we don’t collect

• The downloaded file and the demo never send your data anywhere. If you run the offline copy of the planner or the demo, your training data stays entirely in your browser’s local storage on your device and is not transmitted to us or anyone else.
• Your payment card details. Payments are arranged through third-party channels. We receive only the email and order confirmation needed to grant access. We never see or store card information.
• We do not sell, rent, or share your data with third parties for their own marketing.

How we use the email address

• After the purchase, to give you access to the workout planner.
• To send you a one-time login code so you can access the hosted planner.
• To respond when you email us for support.
• Occasionally, to send important updates about the product you purchased (e.g., a critical bug fix or a major new feature). You can unsubscribe from product update emails at any time.

We do not sell, rent, or share your email address with third parties for their marketing purposes.

Where data is stored and processed

The hosted app uses Supabase as its backend (authentication, database, and realtime sync). Your account record — your email and your planner data — is stored in a Supabase project hosted in the European Union. Supabase acts as our data processor and does not use your data for its own purposes. Access is restricted by row-level security, so only your authenticated session can reach your record.

One-time login codes are delivered by email through Resend, our email provider. Web hosting is provided by Cloudflare. Payments are arranged through third-party channels. Each provider processes data in its own infrastructure under its own privacy policy.

Cross-device sync is automatic whenever you are signed in — there is no separate account to connect or disconnect. To stop syncing, simply sign out; to remove your stored data entirely, see “Your rights” below.

Cookies, local storage, and analytics

The planner uses your browser’s local storage to keep your workouts on your device and to hold your sign-in session — that’s not an advertising cookie. In the hosted app, a copy of your planner data also syncs to your account as described above. We do not use third-party advertising cookies or cross-site tracking. If we add basic analytics in the future, we will update this policy and use a privacy-respecting provider that does not track individuals across sites.

How long we keep things

• Your account email: as long as you have access to the planner, plus a reasonable period afterward for legal and accounting reasons.
• Your synced planner data (hosted app): until you delete it or ask us to remove your account, after which it is deleted from the hosted database.
• Sign-in technical logs (IP / timestamp): retained only briefly by our authentication provider to prevent abuse.
• Support emails: indefinitely, unless you ask us to delete them.

Your rights

Depending on where you live, you may have the right to:

• Ask what personal data we hold about you (which, as covered above, is essentially just your email and a recent sign-in log).
• Ask us to correct or delete it.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise any of these, email support@chalkworkoutplanner.com. We aim to respond within 30 days.

For the hosted app, you can ask us to delete your account and the planner data synced to it, and we will remove it from the database. The downloaded copy and the demo store data only on your device — we never receive it, so you control that directly. The Export and Import features give you full data portability in every version.

Children

The planner is not directed at children under 13. If you believe a child has signed up, contact us and we will delete their information.

Changes to this policy

If we make meaningful changes, we will update the date at the top of this page and, where the change affects how we use your data, send a notice to the email on file.

Contact

Questions, requests, or concerns: support@chalkworkoutplanner.com.