Privacy Policy

Last updated: April 24, 2026

1. Introduction

PRzilla ("we," "our," or "us") provides a web and mobile application for tracking CrossFit workout scores and progress. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

2. Information We Collect

Account Information

When you create an account, we collect your email address and name. If you sign in with Google or Apple, we receive this information from your identity provider. We also generate a unique user ID for your account.

Workout Data

We collect the workout data you enter, including WOD scores (time, reps, load, rounds, distance), movement and lift logs, session dates, and any notes you add. This data is linked to your account so you can track your progress over time.

Photos (Optional)

If you use the "Scan photo" feature on the web or mobile app to import a workout, the image you select (or capture with your camera) is sent to Google Vision API for text extraction and then immediately discarded. We do not store your photos. The mobile app requests camera and photo library access only for this optional OCR scan feature.

Apple Health Data (Optional)

If you enable Apple Health recovery sync on iOS, PRzilla reads heart rate variability, resting heart rate, and sleep data from HealthKit. These recovery metrics are linked to your PRzilla account, stored on PRzilla servers, and used for in-app recovery history and AI coach context. PRzilla requests read access only and does not write data back to Apple Health.

Usage Data

We use PostHog for product analytics to understand how features are used and improve the app. This includes page views, feature interactions, and general usage patterns. PostHog may collect technical information such as browser type, device type, and approximate location (country/region level, not precise location).

3. Information We Do Not Collect

We do not collect precise location data, videos, financial or payment information, contacts, phone numbers, or advertising identifiers. Except for optional Apple Health recovery sync that you enable in the iOS app, we do not collect health data from device sensors. Photos used for the optional OCR scan feature are processed for text extraction only and are not stored.

4. How We Use Your Information

We use your information to:

Provide and maintain the workout tracking service
Authenticate your identity and secure your account
Store and display your workout history and progress
Store and display optional Apple Health recovery metrics, when you enable sync
Provide optional recovery context to the in-app AI coach, when Apple Health sync is enabled
Improve the app based on usage patterns

5. Data Sharing

We do not sell your personal data. Your data is sent only to our backend servers and service providers acting on our behalf to provide the service. Google and Apple receive only authentication requests when you sign in — they do not receive your workout or recovery data from us. We use PostHog for analytics, which processes usage data on our behalf. When you use AI features, relevant workout and recovery context may be processed by AI model providers, such as Anthropic or OpenAI, acting as service providers/subprocessors to generate the response. We do not sell this data, use it for advertising, or share it with data brokers.

6. Data Storage and Security

Your data is stored in a PostgreSQL database hosted with industry standard security practices. Authentication tokens are transmitted over HTTPS. We do not store passwords in plain text — social sign-in uses OAuth tokens, and email/password authentication uses secure hashing.

7. Account Deletion

You can delete your account at any time from the Settings page in the app. When you request account deletion, your account is deactivated immediately. All associated personal data (account information and workout data) is permanently removed from our systems after 30 days. During this period, you can contact us to cancel the deletion and restore your account.

8. Third-Party Services

We use the following third-party services:

Google Sign-In — for authentication (receives email, name, profile image)
Apple Sign-In — for authentication on iOS (receives email, name)
PostHog — for product analytics (receives usage data)
Google Vision API — for optional OCR photo scanning (receives image data, not stored)
AI model providers — for optional AI coach and workout analysis features (receives the prompt context needed to generate a response)
Vercel — for hosting and web analytics

9. Your Rights

You have the right to:

Access your personal data through the app
Delete your account and all associated data
Disable Apple Health recovery sync and delete stored recovery data from Settings in the iOS app
Export your workout data
Opt out of analytics tracking

10. Children's Privacy

PRzilla is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date at the top of this page.

12. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at hello@przilla.app.