01 Who is responsible for your data
Setlane is operated by Serhii Hrybkov, an independent developer based in Ukraine ("Setlane", "we", "us", or "our").
For privacy questions or requests, contact support@setlane.app.
02 Who may use Setlane
Setlane is intended only for people who are at least 18 years old. We do not knowingly collect personal data from anyone under 18. If you believe that a person under 18 has provided us with personal data, contact us so that we can delete it.
03 Information we collect
3.1 Account and profile information
When you create or use a Setlane account, we may process:
- your email address;
- an internal account identifier;
- authentication information managed by our authentication provider;
- basic profile information supplied by Google if you choose Google Sign-In, such as your name, email address, and profile image;
- account confirmation, password reset, and account security information.
We do not receive or store your plaintext password.
3.2 Workout and fitness information
The Service stores information that you choose to enter, including:
- workout routines and templates;
- exercises and custom exercises;
- workout dates, duration, exercise order, sets, repetitions, and weights;
- body-weight entries;
- workout history and progress information;
- related settings and preferences needed to provide the Service.
This information may constitute health or fitness data under applicable law.
3.3 Purchase and subscription information
If you purchase Setlane Pro through Google Play, we may process:
- the purchased product and base plan;
- purchase and order identifiers;
- a Google Play purchase token;
- purchase status, acknowledgement status, renewal status, and expiration date;
- limited Google Play verification responses required to confirm and maintain your entitlement;
- an account-binding identifier used to prevent a purchase from being claimed by a different Setlane account.
Google Play processes your payment method and payment transaction. Setlane does not receive or store your complete card or bank account details.
3.4 Technical and operational information
Our infrastructure providers may automatically process limited technical information necessary to operate and secure the Service, such as:
- IP address;
- device or browser type and user agent;
- request time, response status, and diagnostic logs;
- authentication, security, and error events.
Setlane does not currently use advertising SDKs, third-party behavioral advertising, or third-party analytics SDKs.
3.5 Information stored on your device
Setlane stores certain information locally to support authentication, offline use, faster loading, workout recovery, and rest-timer functionality. This may include:
- your authentication session;
- offline copies of workout and body-weight data;
- pending changes waiting to synchronize;
- cached screens and app preferences;
- rest-timer state.
When connectivity returns, pending account data may synchronize with the Service. CSV files that you export are saved to a location selected or controlled by you and are no longer controlled by Setlane.
3.6 Communications
If you contact us, we process your email address, message, and any information you choose to include so that we can respond and maintain appropriate support records.
04 How we use information
We use information to:
- create, authenticate, and maintain your account;
- save and synchronize workouts, routines, exercises, body-weight entries, and progress;
- provide offline functionality and restore interrupted workouts;
- verify Google Play purchases and provide Setlane Pro features;
- prevent purchase theft, fraud, abuse, and unauthorized access;
- operate rest-timer notifications and other features you request;
- provide customer support;
- diagnose failures, protect the Service, and improve reliability;
- comply with legal obligations and enforce our Terms of Use.
We do not sell your personal data.
05 Legal bases
Where the GDPR, UK GDPR, or similar law applies, we rely on the following legal bases:
- Performance of a contract: to create your account and provide the Service and purchased features.
- Legitimate interests: to secure, maintain, troubleshoot, and improve the Service, prevent fraud, and respond to support requests.
- Consent: where required for optional device permissions or other processing for which consent is legally required. You may withdraw consent through your device settings or by contacting us.
- Legal obligation: where processing is necessary to comply with applicable law or valid legal requests.
06 Device permissions
Setlane may request notification permission so that it can show an active rest-timer notification and notify you when a rest period ends. If you deny the permission, the related notification may not appear, but the rest of the Service remains available.
On supported Android versions, Setlane may request permission to schedule exact alarms for accurate rest-timer completion. Setlane does not use these permissions for advertising or unrelated tracking.
Older Android versions may request storage permission only when needed to save a CSV export to your Downloads folder.
07 Service providers and disclosure
We disclose information only as necessary to operate the Service, process purchases, comply with law, or protect users. Our main service providers include:
- Supabase: authentication, database hosting, server functions, and related infrastructure;
- Google: Google Sign-In, Google Play Billing, purchase verification, subscription notifications, and related Google Cloud services;
- website and infrastructure providers: hosting, network delivery, security, and operational logging.
These providers process information under their own terms and privacy commitments and only for the relevant services they provide.
We may also disclose information:
- when required by law, court order, or valid governmental request;
- when reasonably necessary to investigate fraud, security incidents, or violations of our Terms;
- as part of a merger, acquisition, financing, reorganization, or transfer of the Service, subject to appropriate safeguards and notice where required.
We do not share personal data with data brokers or advertisers.
08 International processing
Our service providers may process information in countries other than your country of residence. Where required, we rely on legally recognized transfer mechanisms and contractual safeguards. Privacy protections may vary between jurisdictions.
09 Retention
We generally retain account and fitness information for as long as your account remains active or as needed to provide the Service.
When your account is deleted:
- account data and user-linked workout, body-weight, profile, entitlement, and purchase records are removed from active Setlane systems;
- an external deletion request will be processed within 30 days after we verify the request;
- processed Google Play subscription-notification records are normally removed after 90 days;
- limited security, error, legal, or dispute records may be retained longer when reasonably necessary or legally required;
- temporary backups and infrastructure logs may remain for a limited period under our providers' retention and security procedures.
Information stored only on your device may remain there after server-side account deletion. You can remove it by clearing Setlane's app data or uninstalling the app.
10 Account and data deletion
You can delete your account inside Setlane:
Settings → Account → Delete account
You may also request deletion without access to the app by following the instructions at setlane.app/delete-account.
Account deletion is permanent. It deletes the Setlane account and associated data from active systems. Setlane attempts to cancel an active auto-renewing Google Play subscription during in-app deletion, but you should always confirm the subscription status in Google Play.
A Setlane Pro Lifetime purchase is linked to the Setlane account on which it was claimed. Deleting that account permanently removes access to the lifetime entitlement, and it cannot be transferred to a newly created Setlane account.
11 Your rights and choices
Depending on where you live, you may have the right to:
- request access to personal data we hold about you;
- request correction of inaccurate data;
- request deletion of your data;
- restrict or object to certain processing;
- request a portable copy of data you provided;
- withdraw consent where processing is based on consent;
- lodge a complaint with a competent data-protection authority.
You may export available workout information from the Service and may exercise applicable rights by emailing support@setlane.app. We may need to verify your identity before completing a request.
12 Security
We use reasonable technical and organizational safeguards, including encrypted network connections, authenticated access, database access controls, row-level authorization, restricted billing functions, and purchase verification with Google Play.
No method of storage or transmission is completely secure. You are responsible for protecting access to your device, email account, Google account, and Setlane credentials.
13 Third-party services and links
The Service may open or link to Google Play and other third-party services. Their processing is governed by their own privacy policies and terms. Setlane is not responsible for the independent practices of third-party services.
14 Changes to this Policy
We may update this Privacy Policy to reflect changes to the Service, law, or our practices. We will update the effective date and provide additional notice where required. Continued use of the Service after an update means that the revised Policy applies from its effective date.