Privacy Policy

ButtsApp is a private training log for small invite-only groups. It holds things people are picky about: body measurements, progress photos, and sometimes the route of a run that starts at their front door. This page explains exactly what is stored, who can see it, and how to remove it. It is written to be read, not to be survived.

The short version

• Your data is visible to the members of your own bakery, and to nobody else.
• There is no advertising, no analytics, no tracking pixels, and nothing is sold or shared for marketing.
• Photos are stripped of embedded location data before they leave your phone.
• Recorded routes have their first and last 200 metres cut off before being saved, so your address is not in the data.
• You can export everything, and deleting your account really deletes it, including the image files.

Who runs this

ButtsApp is an independent, non-commercial project run by an individual in San Francisco, California, for a private group of friends. It is not a company and it has no employees. The contact address is at the bottom of this page.

What is collected

Account details. When you sign in with Google, ButtsApp receives your name, email address and profile picture from Google. It never sees your Google password. If you sign in with an emailed link instead, only your email address is stored. You then choose a display name, a handle, your unit preference and your timezone.

What you log. Workouts, exercises, sets, notes, captions, reactions, comments, saved routines, and the body maps marking where you felt an exercise.

Measurements and photos. The body measurements you enter for a competition, and any progress photos, meal photos or workout photos you upload. These are the most sensitive things in the app and they are treated accordingly.

Recorded routes. If you use the recorder, your device's GPS position is sampled while you record. Before anything is saved, the first and last 200 metres are discarded by default and the remaining path is simplified. You can turn that trimming off per activity if you want the whole route stored.

Connected health apps. Only if you connect one. Oura, Whoop or Apple Health can send workout summaries such as start time, duration, activity type, calories and heart rate. Access tokens for those services are stored encrypted at rest and are not readable by other members. Disconnecting removes them.

Notifications. If you enable push, your browser's push subscription is stored so the reminder to log next-day soreness can reach you.

Technical data. The hosting provider keeps standard server logs, including IP addresses, for operational and security purposes on a short rolling basis. There is no analytics product and no behavioural profiling.

What is deliberately not collected

• No advertising identifiers, no ad networks, no third-party analytics or session-recording tools.
• No tracking of who views which photo.
• No location data outside an activity you explicitly record.
• No contacts, no calendar, no files beyond the images you choose to upload.
• No payment details. ButtsApp does not charge for anything.

How it is used

Your information is used to run the app for you and your group: to show your posts to your bakery, calculate your streaks and progress charts, render the leaderboard if you have opted into it, and send the notifications you asked for. It is not used to build a profile of you, train any model, or for any purpose unrelated to the app working.

Who can see what

Every table in the database enforces access rules at the database level, not just in the interface. Membership of a bakery is the gate for everything scoped to that bakery.

• Posts marked private are readable only by you.
• Measurements are visible to your bakery only while you are opted into the display case, and you can leave it at any time.
• Photos live in a private storage bucket and are served through links that expire after ten minutes, issued only after your permission to see that photo has been checked.
• Nothing is public. There is no page anyone can reach without an invite and an account.

Companies involved in running it

These providers process data on ButtsApp's behalf, in order to make it function:

• Supabase hosts the database, the authentication system and the image storage, on servers in the United States.
• Vercel hosts and serves the application itself.
• Google handles sign-in if you choose that option, and tells ButtsApp your name, email and profile picture.
• Apple and Google push services deliver notifications to your device if you turn them on.
• OpenStreetMap serves the map tiles shown behind a route. Your browser requests those tiles directly, so OpenStreetMap can see your IP address and which part of the map you are looking at. It does not receive your route, your identity, or anything else from ButtsApp.

Nobody is paid to receive your data, and no provider is permitted to use it for their own purposes. There is no sale of personal information, and no sharing for cross-context behavioural advertising, as those terms are used in California law.

Keeping it safe

Access rules are enforced by the database itself, so a bug in the interface cannot expose another member's data. Photos sit in a private bucket rather than at a guessable public address. Images are re-encoded in your browser before upload, which removes embedded EXIF metadata including GPS coordinates. Traffic is encrypted in transit.

No system is perfect, and this one is maintained by one person in their spare time. Please do not upload anything whose exposure would genuinely harm you.

How long it is kept

Your content stays until you remove it. Deleting a post, a photo or your whole account deletes the underlying image files as well as the database rows, rather than merely hiding them. Deletion is immediate and cannot be undone. Short-lived server logs and encrypted backups may retain traces for a brief period afterwards before rotating out.

Your choices

• Export. Settings has a one-click export of everything you have created, as data plus your original image files.
• Delete. Settings also has account deletion, which removes your posts, measurements, photos and profile.
• Leave the leaderboard. Opting out hides your measurements from everyone else while keeping them for yourself.
• Post privately. Any individual post can be logged for your eyes only.
• Turn off notifications and disconnect health apps at any time, from Settings.

Depending on where you live you may have additional rights to access, correct, or object to the processing of your information. The export and delete tools cover most of this immediately; for anything else, email the address below and it will be handled.

Age

ButtsApp is for adults. You must confirm you are 18 or older to finish signing up. It is not directed at children and no account should be created for one.

Where data lives

Data is stored and processed in the United States. If you use ButtsApp from elsewhere, you are sending your information to the United States for processing.

Changes

If this policy changes in a way that matters, the date at the top will change and members will be told in the app. Continuing to use ButtsApp after that means the new version applies.

Contact

Questions, requests, or a demand that something be deleted immediately: email jacob.brawer@gmail.com.