Privacy Policy
Last updated: 31 May 2026
This Privacy Policy explains how Replapse Ltd ("Replapse", "we", "us" or "our") handles personal data in connection with the Replapse mobile app (the "App"). It also explains your rights under data protection law. We are the data controller for the limited processing described below.
1. Who we are
Replapse is provided by Replapse Ltd, a company registered in England & Wales (company number 17248651). If you have any question about this policy or your data, you can reach us at [email protected].
2. Our approach to your data
Replapse is a local-first app. Your training data is stored in a database on your own device and is not sent to us or to any third party as part of normal use. There is no account to create, no login, and no cloud profile. Because of this, most of your data is never "collected" by us in the usual sense — it stays under your control on your phone.
3. Information stored on your device
The following is created and held locally on your device. We do not have access to it:
- Workout and training data. The exercises, sets, reps, load, RPE, tempo, rest, notes and any other metrics you choose to log.
- Bodyweight and progress entries. Any bodyweight or related figures you record over time.
- Heart rate and HRV readings. If you pair a Bluetooth heart rate device, the readings are processed and stored on your device to show recovery information (see section 5).
- Profiles. Any profiles you set up within the App, including the name or label you give them.
- App preferences. Settings such as your measurement system and which optional metrics you have turned on.
This data remains on your device unless you actively export it or back it up using features that the App or your device provides. If you do that, the resulting file is yours to manage, and how it is stored or shared from that point is up to you.
4. Information that leaves your device
The only information that is sent off your device by the App is technical diagnostics:
- Crash reports and error diagnostics. To find and fix problems and keep the App stable, we use Sentry, a third-party error-monitoring service. When the App hits an error, Sentry may receive technical information such as the type of crash, a stack trace, the App version, and basic device and operating-system details. We have configured Sentry not to attach identifying personal information to these reports, and we use them only to diagnose and fix issues — never to identify or profile you.
- Messages you send us. If you contact us, for example by emailing [email protected], we receive whatever you choose to include so that we can read and reply to you.
Replapse contains no advertising, and we do not use analytics or tracking SDKs. We do not build advertising profiles, and we never sell your personal data.
5. Device permissions
The App asks for certain permissions only to provide specific features. You can decline or revoke them in your device settings, though some features will not work without them.
- Bluetooth. Used solely to connect to a heart rate device you choose, so the App can read heart rate and HRV. Readings are processed on your device.
- Notifications and background activity. Used to keep a workout recording and maintain the connection to your heart rate device while a session is running.
- Internet. Used to send the anonymous crash diagnostics described in section 4. Your training data is not transmitted.
6. Lawful bases for processing
Where data protection law applies to the limited processing we carry out, we rely on the following lawful bases under the UK GDPR and EU GDPR:
- Legitimate interests. For crash reports and error diagnostics, to keep the App secure, stable and working correctly. You can object to this (see section 9).
- Your request. When you contact us, we process the contents of your message to respond to you.
- Consent. Where a device permission requires it (such as Bluetooth), the App relies on the permission you grant, which you can withdraw at any time in your device settings.
7. Sharing and service providers
We do not sell your personal data and we do not share it for advertising. We share information only in these limited situations:
- Service providers. Sentry processes crash diagnostics on our behalf as a data processor, under terms that require it to protect the data and use it only for the agreed purpose.
- Legal reasons. Where we are required to disclose information by law, or to protect our rights, safety, or the integrity of the App.
8. International transfers
Our diagnostics provider may process crash data on servers located outside the United Kingdom and the European Economic Area. Where that happens, we rely on appropriate safeguards recognised under UK and EU data protection law, such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses, or a transfer to a country with an adequacy decision.
9. Retention
Data stored on your device is kept until you delete it within the App or uninstall the App, which removes the App's local database from your device. Crash diagnostics held by our provider are retained only for a limited period before being deleted automatically. Emails you send us are kept for as long as needed to deal with your query and to keep a reasonable record.
10. Your rights
Because your training data lives on your device, you are in direct control of most of it: you can view, edit and delete it within the App at any time, and uninstalling the App removes it. In addition, depending on where you live, you may have rights under data protection law over any personal data we process.
If you are in the UK or the European Economic Area, under the UK GDPR or EU GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing;
- data portability; and
- withdraw any consent you have given, without affecting processing already carried out.
To exercise any of these, email us at [email protected]. We will respond within the time limits set by law. You also have the right to complain to a supervisory authority. In the UK this is the Information Commissioner's Office (ICO) at ico.org.uk; in the EEA it is your local data protection authority. We would, of course, appreciate the chance to address your concern first.
If you are elsewhere in the world, you may have similar rights under your local laws. You are welcome to contact us using the details above and we will help where we can.
11. Children
Replapse is suitable for a general audience, and the App can be used to log training regardless of age. Because your data stays on your device, using the App does not involve us collecting personal data from anyone, including children.
We do not knowingly collect personal data from children through any online feature. If we introduce online features in future, such as cloud backup or shared data for premium users, we will put age-appropriate protections in place, including any parental-consent or age-assurance steps required by law, and we will update this policy before doing so. If you believe a child has provided us with personal data, please contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date above, and where changes are significant we will aim to make this clear within the App or on our website.
13. Contact
Replapse Ltd
Company number 17248651, registered in England & Wales.
[email protected]