Privacy Policy

StockFit is published by Summer Labs LLC ("we", "us"). We do not collect, transmit, or sell any personal information, and we run no servers of any kind.

That is meant literally, and it is a property of the app rather than a promise about our conduct: StockFit contains no networking code. It makes no web requests, bundles no third-party SDKs, and includes no analytics, advertising, crash-reporting or tracking library. There is nowhere for your data to go to us, because we have built nowhere for it to arrive.

Three things leave your device, and all three go to Apple, not to us:

• Your training data is mirrored to YOUR OWN private iCloud account, if you are signed in to iCloud. It is stored under your Apple Account, in Apple's infrastructure, and we cannot read it. See "iCloud sync".
• Subscription purchases are handled by Apple through the App Store. We receive only whether your subscription is active.
• Anything you explicitly choose to share — a routine, a CSV export, a recap image — goes to whichever app you hand it to in the iOS share sheet.

Nothing else is transmitted anywhere, by anyone, at any time.

What we store

All workouts, routines, exercises, cardio sessions (time, distance, calorie estimates), and preferences you log are stored on your iPhone using Apple's SwiftData framework. That includes the optional "reps in reserve" you can attach to a set, the muscle-recovery percentages the app derives from your own logged sets — derived, not collected: nothing new is asked of you to produce them — and, for a workout recorded with the Apple Watch app while Apple Health was switched on, the calories it measured (see "Apple Watch"). None of this data is sent to our servers, because StockFit does not have any. If you are signed in to iCloud, the same data is also mirrored to your private iCloud database so it is backed up and available on your other devices. See "iCloud sync".

iCloud sync

StockFit mirrors your training data to the private CloudKit database of whichever Apple Account is signed in to your device. This is Apple's infrastructure, not ours: the data sits in your iCloud storage, under your Apple Account, governed by Apple's privacy policy. We cannot read it, we are not sent a copy, and no account is created with us. It is the same mechanism that backs up Notes or Reminders, and the same place Apple's own Photos app keeps your photos.

A private CloudKit database is not a service we operate and is not shared storage. Your data is not pooled with other users', is not used to train anything, and is not visible to Summer Labs in any form. If you are not signed in to iCloud, none of this happens at all.

What syncs is what the app stores: workouts, routines, exercises, cardio sessions, per-exercise notes, and any progress photos you attach. What does not sync is anything kept outside that store — your appearance and accent choices, notification preferences, custom baskets, which lift each stock is priced from, the price targets you set, and the trial record described below, all of which stay on the device they were set on.

Sync is automatic and follows your device's iCloud setting; there is nothing to switch on in StockFit. If you are not signed in to iCloud, or you turn iCloud Drive off for StockFit in the iOS Settings app, the app keeps working exactly as before with everything held locally. Profile shows the current status and when it last synced. Deleting the app does not delete the iCloud copy; you can remove it from iOS Settings under your Apple Account's iCloud storage.

Progress photos

If you choose to attach progress photos to a day on your training calendar, those photos are captured with your camera or selected from your photo library and stored locally on your device alongside the rest of your StockFit data. They are stored with the rest of your StockFit data, which means that — like your workouts — they are included in the iCloud mirror described above if you are signed in to iCloud. That mirror is your own private iCloud account and nowhere else: the photos go to the same place Apple's Photos app would put them, we never receive them, and no third party is involved. If you would rather they stayed only on this device, turning iCloud off for StockFit in the iOS Settings app stops all syncing, photos included, and the app carries on working with everything held locally. iOS asks for your permission before StockFit can use the camera or read from your photo library, and you can revoke that access at any time in the iOS Settings app. Deleting a photo in StockFit, or deleting the app, removes the copies StockFit holds.

Calorie estimates and optional body details

The app estimates the calories each workout burns: cardio from the duration and distance you enter, and lifting from how long you trained and how many sets you completed, both using standard MET (metabolic equivalent) values. When an Apple Watch measured a workout, its measurement is shown instead. Profile ▸ Calorie Tracking lets you optionally supply your body weight and biological sex, which sharpen those estimates. These two fields are entirely optional and are never required to use any part of the app. They are stored on your device alongside your StockFit settings and are never sent to us or to any third party, and you can clear them at any time by emptying the fields. Calorie values are estimates for motivational purposes only and are not medical measurements.

No analytics or tracking

StockFit does not use third-party analytics, ad networks, or tracking SDKs. Crash diagnostics provided by Apple may be sent to Apple if you have opted in via iOS settings; we do not receive that information.

Ratings and reviews

After you have finished a few workouts, StockFit may ask iOS to show its standard rating prompt, and Profile has a button that opens the App Store review page. It asks at most twice, ever: once after your third workout, and a second time only after at least eight months, twenty-five more workouts and a new feature version of the app. If you open the review page from Profile yourself, it never asks again. To decide when to ask, StockFit keeps a few values on your device: how many workouts you have finished, how many times it has asked, when it last asked, how many workouts you had finished at that point, the app version it asked on, and whether you have opened the review page yourself. None of them is transmitted. The prompt itself is Apple's, the rating and any review you write go to Apple and are governed by their privacy policy, and we see only what any developer sees on a public App Store listing.

Accessibility

StockFit follows the accessibility settings you choose in iOS, such as text size, Reduce Motion and VoiceOver, so it can size its text, calm its animations and describe its screens. It reads those settings from iOS as it runs, the same way every app does; it does not store them, record whether you use them, or transmit them anywhere.

In-app purchases

StockFit+ is an auto-renewable subscription processed by Apple through the App Store. We offer a monthly plan and a yearly plan; pricing is shown on the paywall before you commit and is set per-storefront by Apple. Apple handles payment, receipt validation, and subscription management. We receive only the entitlement status (active or inactive) so the app can unlock StockFit+ features on your device. We never see your payment details, Apple ID, or billing address.

When StockFit does need a connection

Buying a subscription, restoring one on a new device, and showing the current price on the paywall are conversations between your iPhone and the App Store, so those need an internet connection. Nothing else in StockFit does: logging, charts, notifications, the calendar, the heatmap and every number the app derives all work with the phone in Airplane Mode, and none of them reach a network even when one is available. Sharing a routine to a nearby phone uses a direct device-to-device link rather than the internet (see Routine sharing below). Those requests go to Apple, not to us, and they carry nothing about your training.

Free trial

The one-time 7-day free trial is granted by the app itself and involves no payment method and no purchase, so nothing about it is sent to Apple or to us. To keep it to one per person, StockFit stores a single value, the date the trial started, in the iOS keychain on your device. Keychain items are not removed when an app is deleted, which is deliberate and is the only reason the record works; it is also included in an encrypted iPhone backup, so it follows you to a new device. That date is the entire record. It is never transmitted, contains nothing about you, and is not linked to any identifier.

Complimentary codes

If you were given a StockFit+ code and redeemed it in Profile ▸ Redeem a Code, StockFit records what the code granted and the date you redeemed it, in the iOS keychain on your device. A kind and a date is the entire record. It is never transmitted, contains nothing about you, and is not linked to any identifier. Redeeming involves no payment method and no purchase, so nothing about it is sent to Apple or to us.

It is kept in the keychain for the same reason the trial date is: keychain items are not removed when an app is deleted. That is deliberate here too — it is what lets a code you were given stay yours if you reinstall the app or move to a new iPhone.

Accepting these documents

When you accept the Terms of Use on first launch, StockFit stores the date and the version number you accepted, on this device, so the app knows not to ask again and can ask again if the terms materially change. You can see both at the bottom of Profile ▸ Legal. Nothing is transmitted.

Everything StockFit derives about your training (strength index, stock and basket prices, market breadth, next-session estimates and their confidence bands, price-target paces and projected dates, post-workout earnings verdicts, 52-week ranges, volume, coverage, allocation and rotation, muscle-contribution heatmaps and recovery indicators, suggested replacement exercises and rest times, streaks and milestones) is computed on this device from the workouts you log, and is stored only on this device. None of it is transmitted anywhere.

Your settings are stored on this device too, and nowhere else: appearance and accent colour, units, default tab, ticker motion, market extras, training phase, haptics, your default rest (suggested for each lift, or one fixed length) and rest-timer sound, your warm-up and plate calculator setup, which stocks and baskets your portfolio shows and in what order, the baskets you build yourself and the names you give them, which variant of a lift each stock is priced from and which stocks you have already been asked about, the price target you set for any lift, and every toggle on the Profile screen.

Notifications

StockFit can send two kinds of notification, both controlled in Profile ▸ Notifications and both switchable off at any time: rest-timer finish alerts, and progress updates about your streak and weekly totals. Both start switched on, and neither can deliver anything until you grant iOS notification permission, which the app asks for once. Progress updates are capped at four in any seven-day window, at most one a day, and are never sent outside 8am–9pm local time. Every one of them is scheduled locally on your device using Apple's UserNotifications framework, and their content is computed on-device from your own logged history. A progress update may carry a small image showing the direction and size of the change; that image is drawn on your device when the notification is scheduled and is stored with it, on your device, until the notification is cleared. We do not operate a push notification server: every alert is scheduled on your device, from your own history, and none of your data is sent to us to produce any of it.

Rest-timer alerts ask iOS for the Time Sensitive delivery level, which is what lets an alert reach you through a Focus mode, and fall back to the ordinary level whenever the system does not grant it. Whether it is granted is iOS's decision and yours, not ours — you can withdraw it, or withdraw notifications entirely, at any time in Settings ▸ Notifications ▸ StockFit — and the app checks each time rather than assuming. Either way it changes nothing about what the notification contains or where it is scheduled. Progress updates never ask for Time Sensitive.

Live Activities and the Lock Screen

While a workout is in progress, StockFit can show a Live Activity on your Lock Screen and in the Dynamic Island. It carries the name of the workout you are doing, including a routine name you typed yourself, plus your session's elapsed time, how many of the session's sets you have logged, the rest countdown, the name of the exercise you are on, and the weight and reps of the set you are about to do. This card is rendered on your device by an app extension and is not transmitted anywhere. Because it appears on the Lock Screen, all of that is visible to anyone who can see your screen without unlocking it, which is worth keeping in mind when you name a routine. You can turn Live Activities off for StockFit at any time in the iOS Settings app, and the card disappears as soon as you finish or discard the workout.

Apple Health

If you switch on Profile ▸ Apple Health, StockFit adds each finished workout to the Health app on your device: the fact that a workout happened, when it started, how long it lasted, and what kind it was. iOS asks your permission first, and you can withdraw it at any time in the Health app under Sources.

One other switch asks for the same permission without writing anything: Profile ▸ Apple Watch ▸ Live Sync, which needs it only to open the Watch app when you start a workout on your phone. See "Apple Watch". Granting Health access there does not start adding workouts to Health — that is this switch, and it is separate.

StockFit only ever WRITES workouts to Health from your iPhone. It does not read your Health data there, and it does not read anything you have stored from any other app.

For completeness: the iPhone app does declare Health access that includes reading, because Apple grants that capability as a single permission and the StockFit Watch app genuinely needs the reading half. iOS may therefore mention reading when it asks. The iPhone app does not use it — the only reading StockFit does is your heart rate and active calories on the Watch, during a workout. See "Apple Watch".

Health data stays on your device and in your own iCloud, governed by Apple's privacy policy. We never receive it. If you allow another app to read your workouts from Health — Strava, for example — that app reads them from Health under its own privacy policy; StockFit sends it nothing and has no connection to it. The toggle is off until you turn it on, and turning it off stops any further workouts being added; anything already added stays in Health until you delete it there.

A workout your iPhone adds to Health includes its estimated calories. If the Apple Watch app recorded the workout — one you started on the Watch, or one started on your iPhone while the Watch app was open — the Watch saves that session to Health itself, with the heart rate and calories it measured, and your iPhone does not add a second copy of it.

Siri, Shortcuts and Spotlight

You can ask Siri to start one of your routines, to tell you your Strength Index, how your training week is going, or where one of your stocks stands, and Siri can open a stock's chart for you. The same actions appear in the Shortcuts app and in Spotlight. What you say is handled by Apple under Apple's privacy policy. StockFit answers on your device, from the same small summary the widgets use (described below), and sends nothing anywhere. A stock's price is only spoken if you have StockFit+, the same as in the app.

So that Siri and Spotlight can find things by name, StockFit adds two kinds of entry to the on-device search index iOS keeps on your iPhone: the names of your most recent routines, and the name of each stock and basket with the lifts and everyday names it goes by (for example "LCRL · Lying Hamstring Curl", "leg curl"). No weights, prices or workout history go into that index. It is kept by iOS on your device, it is not sent to us, and deleting the app removes it.

Home Screen and Lock Screen widgets

StockFit's widgets are drawn by the same on-device app extension that draws the Live Activity. A widget cannot read the app's database directly, so the app writes a small summary into a shared container on your device that only StockFit and its own extension can open. That summary holds your Strength Index and its recent history, your streak and how many sessions you have logged this week, the names of your most recent routines, and the current value and weekly change of each stock and basket. It is derived from workouts you have already logged. Nothing new is asked of you to produce it, and it is not transmitted anywhere.

Your training history itself is not placed in that container. The summary is rewritten whenever your logged data changes, it is removed when you delete the app, and it is the only thing the widgets can see.

The part worth thinking about is where a widget appears. Anything on a Home Screen or Lock Screen widget is visible to anyone who can see your screen, and a Lock Screen widget is visible without unlocking the phone. That includes routine names you typed yourself. You can remove any widget by touching and holding it, and you can keep widgets off the Lock Screen entirely in the iOS Settings app.

Apple Watch

If you install StockFit on a paired Apple Watch, your iPhone sends it the same summary described above plus your recent routines and their planned sets, so you can start and log a workout from your wrist. The transfer uses Apple's WatchConnectivity framework, which carries data directly between your own iPhone and your own Watch. It does not pass through a server, ours or Apple's, and no account is involved.

A workout you log on the Watch is held on the Watch until your iPhone is reachable, then handed back and saved into your history as an ordinary workout. Your full training history is never copied to the Watch. Only the routines you might start and what you log during a session are stored there, and deleting the Watch app removes them.

Live Sync, in Profile ▸ Apple Watch, is on by default and can be switched off. With it on, a workout running on your iPhone is mirrored to your Watch while it runs, so the two show one session instead of two: the name of the workout, how long it has been going, the exercises in it and how many sets of each you have logged, the rest countdown, and the weight and reps your plan has queued up next. Sets you log from your wrist, and finishing or discarding the workout from your wrist, travel back the same way, as do the calories the Watch is recording. Your heart rate does not: it is never sent to your iPhone. All of it goes over the same direct iPhone-to-Watch link described above, none of it is stored on the Watch beyond the session, and nothing reaches a server. Turning Live Sync off stops the mirroring entirely and leaves the Watch app working on its own.

Live Sync also lets your iPhone open the Watch app for you when you start a workout, and that is the one part of StockFit that asks for a permission in order to do something other than what the permission is named after. iOS provides exactly one way for an app to open its own Watch app — a HealthKit call — so switching Live Sync on asks for Health access, and StockFit uses that access solely to bring the Watch app up when you start a workout on your iPhone. It writes nothing to Health by doing so: adding your workouts to Health is the separate Apple Health switch described above, and that one has to be on for anything to be written. You can decline, and everything else about Live Sync keeps working; you just open the Watch app yourself.

If you switch on Profile ▸ Apple Health, then while a workout is running the Watch app READS two things from Health: your heart rate and your active calories. It reads them only for the duration of that workout, to show your heart rate, heart rate zone and calories on your wrist, and so the session it saves counts toward your activity rings. It reads nothing else you have stored in Health. Your heart rate stays on your Watch and in the Health app: it is not sent to your iPhone and StockFit does not store it. The only measurement sent to your iPhone is the calories burned, over the same direct link, and it is kept with that workout. Nothing is ever sent to us. Running that workout session is also what keeps the app alive between sets rather than being suspended when you lower your wrist. Apple asks your permission first, on a screen in the Watch app that explains it before any workout starts; you can decline, and declining does not affect logging. With Apple Health switched off, the Watch app reads nothing from Health at all.

The Watch app can also ask permission to send you a notification when a rest timer finishes, so the alert reaches you when the app is not on screen. That request is made once, on a screen before your first set that explains what it is for, and you can decline it or revoke it later in the Watch app on your iPhone. Declining it does not affect logging.

Training calendar

The premium Training Calendar surfaces the dates you've logged a workout and computes streaks entirely on-device from your existing workout history. No additional data is created or transmitted.

Routine sharing

StockFit+ users can send routines to nearby StockFit users using Apple's MultipeerConnectivity framework, the same technology AirDrop uses. It carries the transfer over peer-to-peer Wi-Fi, so no internet connection and no shared Wi-Fi network is required, though Wi-Fi does need to be switched on for the two phones to find each other. Routines are exchanged directly between the two devices and never pass through a server. Discovery only runs while the app is in the foreground and only when both the sender and the recipient have opted in.

Because finding a nearby phone this way uses the local network, iOS asks your permission the first time you share, and you can revoke it at any time in the iOS Settings app. StockFit uses that permission for this one purpose. It does not scan for, connect to, or identify anything else on your network, and what travels over the link is the routine itself plus the name iOS gives your device on the invitation, which on current versions of iOS is the generic model name ("iPhone") rather than the name you gave it. Nothing else.

You can also share a routine as a file or a link. Both are produced on your device: the file is a .stockfit document containing only that routine's exercises and target sets, and the link encodes the same routine data inside the link itself. StockFit hands whichever you choose to the standard iOS share sheet, so it travels only through the app you pick to send it: Messages, Mail, AirDrop, or anywhere else you choose. A shared routine contains no personal details and none of your logged workout history. Note that once you send a file or a link, it is out of the app's hands and subject to the privacy of whatever service you sent it through.

A shared link is worth one more paragraph, because a link is the one thing here that has a web address in it. The routine is placed after the # in that address, and the part after a # is never sent to a web server: it exists only in the link itself, on your phone and on the phone you sent it to. So although a routine link points at summerlabs.dev, the routine in it does not travel there. Everyone's link asks that site for the same single page, and that page reads the routine out of the address inside the reader's own browser. We never receive it, never store it, and could not read a shared routine if we tried.

What the site does see is an ordinary web request for that one page, along with the network address it came from, the way every website sees every visit. That happens when someone taps a link without StockFit installed, and it can also happen without anyone tapping anything: apps like Messages fetch a link when you paste it in, so they can show a preview card. The card is the same for every routine anyone ever shares — our logo and the words "A StockFit routine" — precisely because the page has nothing specific to say. If you would rather nothing was requested at all, share the .stockfit file instead: it involves no web address and no server of any kind.

Exporting your data

You can export your workout history as a CSV file (a single workout or your full history). The file is generated on your device and handed to the standard iOS share sheet, so it goes only where you choose to send it. StockFit does not transmit the export anywhere on its own.

Importing your data

You can bring an existing training history into StockFit from a CSV file (Profile ▸ Import Workout History). You choose the file yourself through the standard iOS document picker, and StockFit reads only the file you pick, at the moment you pick it. It does not browse, index, or look at anything else in Files or iCloud Drive, and it retains no access to the file afterwards.

The file is read entirely on your device and is never uploaded, because there is nowhere for it to be uploaded to. What StockFit keeps is the training it finds inside — workouts, exercises, sets, weights, reps, and where present distances, times and calories — stored exactly like any workout you log by hand. The file itself is not copied or kept; if you delete it from Files afterwards, nothing of it remains in the app beyond the workouts you imported.

If StockFit cannot tell which column of your file holds which information, it shows you your own column names and asks. That question is answered on your device and the answer is used for that import only.

Any exercise in the file that StockFit does not already know is added to your exercise list as a custom exercise, using the name from your file. You can rename it, classify it, or delete it afterwards like any other custom exercise. An import can also be undone in one step (Profile ▸ Undo Last Import), which moves those workouts to Recently Deleted.

Deleting your data

Deleting a routine, a workout, or a custom exercise moves it to Recently Deleted (Profile ▸ Recently Deleted), where it stays on your device and out of the rest of the app for 30 days so you can restore it. After that StockFit removes it permanently, and you can remove anything sooner from that screen. Nothing about this leaves your device at any point.

Your rights

Because all personal data stays on your device, deleting the app removes all of it, with two deliberate exceptions: the free-trial start date and, if you redeemed one, the complimentary-code record — both described above, each a single value kept in the keychain, and neither containing anything about you. There is nothing for us to delete on our end. If you set up a new iPhone by restoring from an iCloud backup or a computer (Finder/iTunes) backup of your old phone, your StockFit data is restored along with the rest of your apps. Setting up a brand-new device without restoring from a backup, or moving to a non-Apple device, starts StockFit fresh.

Future changes

If a future update introduces an optional cloud sync feature, this policy will be updated and you will be asked to opt in before any data leaves your device.

Questions? Contact: contact@summerlabs.dev