Effective date: September 24, 2026
The short version: your training journal stays on your device and in your own iCloud. Logging needs no account. We track nothing: no analytics, no ads. Two optional things send data off the device: joining a crew, which shares your sets with the people in it, and in-app support purchases. Both are described below.
Tons is a local-first workout tracker. Everything you log — sets, reps, weights, exercise names, bodyweight, settings — is stored on your device. If you use iCloud backup or export, your data is written to your personal iCloud container, which only you and Apple's iCloud service can access under Apple's own privacy terms. We (the developer) have no access to your journal.
If you grant permission, Tons reads your bodyweight from Apple Health to calculate volume on bodyweight exercises. That's the only HealthKit data Tons touches, it is read-only, and it stays on your device. Health data is never sent anywhere, never used for advertising or marketing, and never disclosed to third parties. If you join a crew, the tonnage of your bodyweight sets is shared with it, and that number is calculated with your bodyweight; the bodyweight itself is not sent. You can revoke access at any time in Settings → Health → Data Access & Devices.
Unless you join a crew, nothing about you or your training. Tons has no analytics SDK, no crash reporter of our own, no advertising identifiers, and no tracking of any kind. The app also fetches short Wikipedia summaries of the objects in its collection; those requests carry nothing about you.
A crew is a private group of up to 12 people who see each other's sets. Joining one needs Sign in with Apple and a display name you choose; Tons does not ask for your email address or contacts. From the day you join, the sets you log are sent to our crew service, hosted by Supabase in the European Union, and shown to the people in your crews. The personal journal, your history from before you joined, and your bodyweight are not sent. Crew data is not used for advertising and not sold. You can leave a crew or delete your crew account in the app at any time. The full details are in the crew privacy notice.
Tons is free. You can optionally leave a tip or start a monthly support subscription through Apple's in-app purchase system. Purchases are handled by Apple and verified by RevenueCat, a purchase-processing service. For that purpose, RevenueCat receives your Apple purchase receipt and a random, app-generated identifier that is not tied to your name, email, Apple ID, or training data. This is used only to confirm the purchase, restore it on a new device, and show your supporter status in the app. It is not used for advertising or tracking, and it is never combined with your workouts. RevenueCat's own policy is at revenuecat.com/privacy. Nothing else in Tons changes whether you support it or not.
Reminders are scheduled locally on your device. If you are in a crew and turn on its notifications, Tons stores your device's push token with the crew service and uses Apple's Push Notification service to tell you when someone cheers you on. The text is generic and contains no workout details.
Your data lives with the app: deleting Tons deletes everything it stored on the device. iCloud copies can be removed via Settings → iCloud → Manage Storage, and exports you created are ordinary files under your control. Deleting your crew account in the app removes your profile, shared sets, reactions and push tokens from the crew service.
Tons does not knowingly collect data from children. Crews and purchases both require an Apple Account, and nothing about a person leaves the device without one of them.
If this policy changes, the updated version will be posted at this address with a new effective date before the change takes effect. September 2026: added the sections on optional support purchases and on crews.
Questions? Email michal.ciesielski@me.com.