Privacy Policy

Last updated: 7 August 2026

This policy describes exactly what MySweaty stores, why, and who can see it. It is written to be specific rather than reassuring — where something is stored in a way that has limits, those limits are stated plainly. If a section here ever stops matching what the app actually does, the policy is the thing that is wrong, and we want to hear about it.

1. Information you give us

Everything in this section is typed or chosen by you. None of it is gathered in the background.

What Why we store it Required?
First name, last name Identifies you to people you connect with Yes
Username Your public handle; must be unique Yes
Email address Sign-in, login codes, password resets Yes
Password Sign-in — stored only as a hash (see section 3) Yes
City and state Shows you people and groups near you (see section 2) Optional
Search radius How far out your feed reaches, 1–100 miles Optional
Up to two sports Matches you with people who train the same way Optional
Bio Free text shown on your profile Optional
Profile photos Shown on your profile and in feeds (see section 4) Optional
Messages, groups, events, RSVPs The content you create in the app (see section 5) Optional

2. Location — we never read your device's location

MySweaty has no ability to access your real location. Not your GPS, not your precise position, not your movements, not in the background.

This is not a promise we are asking you to take on trust. An iOS app is physically incapable of reading your location unless it declares a location permission and you approve the system prompt. MySweaty declares no location permission of any kind, so iOS will never even offer you that prompt. The app contains no location-tracking code to go with it.

What we actually store

When you set your location, you choose a city and state from a fixed list of US cities. We then look that city up in our own reference table and save the coordinates of the city itself — a single point representing that city, the same point for everyone who picks it.

So if three people in Dallas set their location, all three have byte-for-byte identical coordinates stored against their accounts. Those coordinates describe Dallas. They do not describe any of those three people, their neighborhood, their gym, or their home. They are used for one thing: measuring the rough distance between two cities so your feed can be ordered by how near someone is.

If you type a city we do not recognize, we reject the update rather than guessing. Your location stays exactly as you last set it until you change it yourself, and you can leave it unset entirely.

Photos cannot leak your location either

Photos taken on a phone often carry hidden GPS coordinates in their metadata. Before any image leaves your device, MySweaty re-encodes and resizes it, which produces a new file containing only the picture. Camera metadata — GPS coordinates, timestamps, camera model — is not carried across. We audited every image currently stored on our servers and confirmed that none of them contains GPS data.

Group meeting places

A group owner may type a street address as the group's meeting spot, and events may carry an address the organizer types. These are addresses of places, entered deliberately by a person, and they are converted to map coordinates on the device using Apple's built-in address lookup. That conversion turns written text into a map pin; it does not involve your device's position. Group owners control whether the meeting place is publicly visible.

3. Passwords — we cannot read yours

We do not store your password. We store a bcrypt hash of it.

The distinction matters, and it is worth being precise rather than saying the usual "your password is encrypted." Encryption is reversible — whoever holds the key can turn it back into the original. Hashing is not. A hash is a one-way fingerprint: your password goes in, a fixed-length scramble comes out, and there is no key and no procedure that turns it back. When you sign in, we hash what you typed and compare the two fingerprints. At no point does your actual password exist in our database.

This means nobody at MySweaty can tell you your password, look it up, or recover it — not an engineer, not support, not anyone with full database access. If you forget it, the only path is to reset it. Anyone who claims to be from MySweaty and tells you your password is not from MySweaty.

The hash uses bcrypt with a deliberately slow work factor, so even if the database were stolen, guessing passwords from the hashes would be enormously expensive rather than instant. That is protection, not a guarantee, which is why a password you do not reuse elsewhere still matters.

Login codes and resets

Signing in on a new device emails you a six-digit code. That code is hashed in the same one-way manner as your password, expires ten minutes after it is issued, and is erased the moment it is used. Password reset codes work the same way. Requests for new codes are rate-limited.

4. Photos

Photos you upload are stored on our own server, on a private disk with no public web address. There is no way to reach an image by guessing a URL, and they are not hosted on a public CDN. Every image request must carry a valid login, so a photo can only be fetched by someone signed in to MySweaty. We also generate smaller copies so that list screens do not download full-size originals.

MySweaty never asks for access to your photo library. When you add a photo, iOS shows you its own picker, and only the specific image you choose is handed to the app. We cannot see anything else in your library.

5. Messages and content

Messages you send, group descriptions, event details and RSVPs are stored in our database so they can be delivered and displayed.

To be straightforward about the limits here: MySweaty messages are not end-to-end encrypted. They are stored as readable text on our server. This is what allows messages to sync across devices and be recovered, and it is how most non-specialist messaging works — but it does mean that, unlike your password, message content is technically readable by someone with direct database access, and could be disclosed if we were compelled by valid legal process. We do not read your messages, sell them, mine them for advertising, or feed them to any analytics or AI system. If you need guaranteed-private conversations, use a dedicated end-to-end encrypted messenger.

6. Sign-in and device information

To let you skip the emailed code on a device you have already verified, we store a record of that device for 90 days. What we keep is deliberately minimal:

If you use the website rather than the app, your browser session record includes your IP address and browser user-agent string, which is standard for signed-in websites. IP addresses are also used transiently to rate-limit sign-in attempts so that accounts cannot be brute-forced. We do not build location profiles, browsing histories or behavioral profiles from any of this.

7. What other people can see

In the discovery feed, other signed-in members see your username, first name, city, state and your chosen sports. Your email address is never shown to other users, and your last name is not included in the feed. Your profile, photos, bio and group memberships are visible to signed-in members as you would expect from a social app. Private groups and any group meeting place the owner has not made public are restricted accordingly.

You can block another member, which stops them from reaching you through the app.

8. What we do not collect

This list is specific because vague privacy claims are worth very little:

MySweaty requests no iOS privacy permissions at all. The app ships with no analytics, crash-reporting or advertising libraries of any kind; the only third-party code bundled into the app is an icon set, which collects nothing.

9. Who else touches your data

We do not sell, rent or trade personal data. The only outside party that handles any of it is our email delivery provider, which receives your email address and the contents of the message (a login code or password-reset code) purely so the email can be delivered. That is the complete list.

We may disclose information if legally required to do so by valid legal process, or where necessary to protect the safety of our users.

10. Keeping and deleting your data

We keep your information for as long as your account exists. You can delete your account at any time from your profile settings; you will be asked to confirm your password first.

Here is precisely what deletion does today, rather than a claim that implies more than is true. Deleting your account immediately removes your user record — name, email, password hash, bio, city, sports and coordinates — along with your connections and your active login tokens. You disappear from discovery and can no longer sign in.

However, some records that reference your account are not yet removed by that same action. Messages you sent, your membership rows in groups, uploaded image files, notifications and trusted-device records can persist in our database after deletion. Content you sent to other people — the messages in their conversation history — is inherently part of their data too, and does not vanish from their view.

If you want that residual data purged as well, email us at the address below and we will remove it manually. We are working to make account deletion cover all of it automatically, and this section will be updated when it does.

11. Your choices

You can edit or clear your bio, sports, photos and location at any time from the app, and you can leave your location unset entirely — the app works without it, you simply will not get a distance-ordered feed. You may request a copy of your data or its deletion by contacting us. Depending on where you live, you may have additional statutory rights over your data; we will honor valid requests regardless of where you live.

12. Children

MySweaty is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, contact us and we will remove it.

13. Security

Passwords and login codes are hashed one-way. Photos sit on a private disk behind an authentication check. Sign-in requires an emailed code on any device we have not seen before, and sign-in attempts are rate-limited. Our sign-in responses are deliberately written so they cannot be used to work out whether a particular email address has an account.

No service can promise perfect security, and we will not pretend otherwise. If we ever discover a breach affecting your data, we will tell you.

14. Changes to this policy

If we change what we collect or how we use it, we will update this page and move the date at the top. Material changes will be surfaced in the app rather than quietly published here.

15. Contact

Questions about this policy, requests for your data, or requests for full deletion:

contact@mysweaty.com

MySweaty, LLC