Privacy
Effective August 22, 2026
ProofPad is a calisthenics workout log for iPhone. This page says plainly what the app stores, what is public, and how to delete all of it. There are no advertising or analytics SDKs in the app, and nothing is sold or shared for marketing.
Your account
You sign in with Sign in with Apple. We receive only Apple's anonymous identifier for your account — we do not ask Apple for your name or email address. You then choose a username, which is public: it names every board entry and profile of yours.
Your training log
Every workout you record — exercises, sets, reps, holds, the date — is saved on your phone and synced to our servers so it survives a new phone and backs up your log. Custom exercises you add are synced the same way.
Your log is public by default under your username, so another athlete can open your profile and see your workouts and records. You can switch this off at any time in Settings → Public training log; your username stays visible, your log does not.
Boards
When you post a workout to a regional leaderboard, that workout becomes public on the board. To place you in the right region, the app reads your location once, at the moment you complete a workout that is being posted — never in the background. That single fix is stored privately with the posted workout. It is never shown to anyone, and it is used only to verify the region you compete in.
You can attach your Instagram handle so it appears beside your name as a link. To prove the account is yours, the app opens a chat with @proofpad and you send one message. Meta delivers that message to our server, which reads the sender's Instagram username from Meta and saves it with Meta's identifier for your account and the time. We act only on that one message — its hidden verification tag — and do not store message content. You can remove the handle at any time in Settings → Instagram → Disconnect. Never share a handle you don't own; only the account that actually sent the message is ever attached.
Notifications
If you allow notifications, we keep your device's push token so the app can tell you when you are overtaken on a board and remind you to log during a workout. Revoking the permission in iOS ends both.
Operations
A few actions send a short internal alert to the people who run ProofPad, naming your username: requesting a username change, suggesting a new place, and deleting your account. These alerts are private and exist only so those requests get handled.
Where it lives
Account and training data is stored on infrastructure hosted by Supabase. Apple delivers notifications; Meta delivers the one Instagram message described above. We do not move your data anywhere else.
Delete your data
In the app: Settings → Account → Delete account. This is immediate and complete — your profile, username, training log, board entries, Instagram link, and push token are erased from our servers. Your log also leaves your phone when you delete the app.
If you no longer have the app, send a message to @proofpad on Instagram from the account you'd like deleted and we will remove it.
Changes
If this page changes in a way that affects you, the date at the top changes with it. Questions: message @proofpad.