1.1 Account Information

When you create a Myosin account, we collect:

• Email address (for authentication)
• Password (encrypted and securely stored)

1.2 Workout Data

As a workout tracking application, we collect and store:

• Exercises performed, sets, repetitions, and weight lifted
• Custom exercises and routines you create
• Workout duration and timestamps
• Personal records (PRs) and progress data
• Training volume and analytics
• Notes and comments on workouts

1.3 Personal Habits

If you use the habits feature, we store your custom habit definitions and daily completion records.

1.4 Body Weight

If you choose to log your body weight, we store your weight entries over time to help you track progress.

1.5 Social Features (Crews)

If you join or create a Crew (training group), we collect data necessary for the social experience, including your display name, crew membership, and shared workout activity. This feature is entirely opt-in.

1.6 Device Information

We automatically collect certain technical information:

• Device type and operating system version
• App version
• Language preference
• Time zone
• Crash reports and performance data (for debugging)

1.7 Third-Party Login

If you sign in using a third-party service (such as Sign in with Apple or Google), we receive basic profile information from that service, which may include your name and email address.

3.1 Local-First Architecture

Myosin uses a local-first architecture:

• Your data is primarily stored locally on your device using a SQLite database
• The app works fully offline — you don't need an internet connection to track workouts
• Data is synchronized to our cloud servers only when you have an internet connection
• Cloud sync serves as a backup and enables multi-device access

3.2 Cloud Storage

When synchronized, your data is stored on secure cloud servers provided by Supabase (PostgreSQL). These servers may be located in the United States or other countries. By using Myosin, you acknowledge and consent to the transfer, processing, and storage of your data outside your country of residence.

3.3 Security Measures

We implement industry-standard security measures:

• Passwords are encrypted using secure hashing algorithms
• All data transmission is encrypted using HTTPS/TLS
• Access to cloud data is protected by authentication tokens
• Database access is restricted by role-based policies

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing or any other purpose.

5.2 Service Providers

We share data with trusted service providers who help us operate the app:

• Supabase: Cloud database and authentication
• Sentry: Error tracking and crash reporting (anonymized device and error data only)

These providers are contractually obligated to protect your data and may only use it to perform services on our behalf.

5.3 Crew Features

If you use Crew features, certain data (display name, workout activity) is shared with other Crew members. This sharing is entirely opt-in and only occurs when you choose to join or create a Crew.

5.4 Legal Requirements

We may disclose your data if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Myosin, our users, or others.

7.1 Access Your Data

You have the right to request a copy of all personal data we hold about you. Contact us at myosinapp@gmail.com to make a request.

7.2 Modify Your Data

You can update your personal information and workout data at any time through the app.

7.3 Delete Your Account

You can delete your Myosin account from the app's Settings screen. This will permanently delete your account and all associated data from our servers within 30 days. This action cannot be undone.

7.4 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Our legal basis for processing your data is contract performance (providing the Service you requested) and legitimate interests (improving the app, security).

7.5 CCPA Rights (California Users)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt-out of the sale of personal information. We do not sell your personal information.

7.6 Argentine Data Protection (Ley 25.326)

If you are located in Argentina, you have rights under Ley 25.326 de Protección de Datos Personales, including the ARCO rights:

• Acceso: Right to access your personal data
• Rectificación: Right to correct inaccurate data
• Cancelación: Right to request deletion of your data
• Oposición: Right to object to processing

Providing your personal data is voluntary. If you choose not to provide certain data, some features of the app may not be available.

El titular de los datos personales tiene la facultad de ejercer el derecho de acceso a los mismos en forma gratuita a intervalos no inferiores a seis meses, salvo que se acredite un interés legítimo al efecto conforme lo establecido en el artículo 14, inciso 3 de la Ley Nº 25.326. La AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA tiene la atribución de atender las denuncias y reclamos que se interpongan con relación al incumplimiento de las normas sobre protección de datos personales.