Last updated: 13 September 2026
Recomp Coach is built around a simple principle: your data lives on your phone. There are no accounts, no ads, and we never sell or share your data with anyone for marketing.
Your workouts, nutrition logs, body weight and measurements, exercise notes, chat history with the Coach, and progress photos are stored in the app's private storage on your phone. We do not run a server that holds copies of them. Deleting the app deletes this data. You can export your data from Settings at any time.
Storage and processing are different things. Nothing above is stored on our servers - but if you choose to use the AI Coach, meal photo logging, progress photo analysis or the gym scan, the relevant data is sent to Google's Gemini API to produce that result, without being retained by us. The AI Coach section lists exactly what is sent.
With your permission, Recomp Coach reads heart-rate variability, resting heart rate, sleep, and workout data from Apple Health to compute a daily recovery score. Your recovery score, and everything the app derives from it, is computed on your device. This data is stored on your phone; we do not run a server that holds a copy of it.
One exception, and it is important. If you use the AI Coach, a summary of your last 14 days of recovery data - daily recovery score, HRV, resting heart rate, sleep duration and stages, and training strain - is included in the request sent to Google's Gemini API to generate the reply. This happens only when you send a Coach message or open an AI-written note; it never happens in the background. See AI Coach below, and note that you can use every other part of the app without ever sending a Coach message.
If you connect a WHOOP, Oura, or Garmin account, you authorise Recomp Coach via that service's official sign-in (OAuth). Your recovery, sleep, and heart-rate data is fetched from the service directly to your phone and stored there. Our server briefly relays the sign-in token exchange (so app secrets stay off your phone) and does not store your health data. As with Apple Health, a 14-day summary of this data is included in AI Coach requests when you use the Coach - see AI Coach. You can disconnect at any time in the app or from the service's own account settings.
Fitbit and Google Pixel watch data reaches the app through the Google Health API, authorised with your Google account. Recomp Coach requests three read-only scopes and uses each for one purpose only:
This data is fetched to your phone and stored there. Our server relays the sign-in token exchange so app secrets stay off your phone, and does not store or log your health data. Nothing is ever written back to your Google account. It is never sold, never used for advertising, never used to train any AI model, and never transferred to anyone else except as described here or as required by law.
As with the other trackers, if you use the AI Coach a 14-day summary of this recovery data is included in the request to Google's Gemini API that generates your reply - see AI Coach. It is used only to answer the question you asked, is not retained by us, and under the paid Gemini API terms is not used to train Google's models. You can disconnect in the app's Recover tab, or revoke access at myaccount.google.com/permissions.
Recomp Coach's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
When you send the Coach a message, that message plus a summary of your recent data is sent over an encrypted connection through our server to Google's Gemini API to generate the reply. That summary is what the Coach needs to answer accurately, and it includes:
If you tap Analyse on a progress photo, that photo is sent once for the same purpose. If you use Snap to log a meal, that photo is sent once to identify the food.
If you use Scan my gym, up to three photos of the gym floor are sent once to list the equipment in them. The request asks for equipment only: nothing about any people who happen to be in the photos is requested or returned, and the photos are not stored by us.
Our server does not store your messages or photos. Google processes them under its Gemini API terms; Recomp Coach uses the paid tier, under which Google does not use the data to train or improve its models. AI requests are rate-limited per anonymous device identifier.
This only happens when you use an AI feature. If you never send a Coach message, never tap Analyse, never use Snap, and never scan your gym, none of the above leaves your phone. Every other feature - logging, targets, the recovery score, progress charts, the muscle map - works entirely on device.
The app ships a large offline food catalogue, and food search works entirely on your phone. Two things do leave it. When you scan a barcode, that barcode is sent to Open Food Facts, an independent open food database, to look the product up. When you use the online section of food search, the words you type in the search box are sent to the same service. Open Food Facts receives the barcode or the search words and your device's IP address; it receives no name, no account, no device identifier, and nothing about your logs, weight or health. Their privacy policy is at openfoodfacts.org/privacy. Product names and nutrition values come back from a database the public can edit, so treat them as a community label transcription rather than a lab analysis.
The friends leaderboard and stat comparison are off by default. If you opt in, the display name you choose plus your weekly points (and, if you enable Compare, a small set of numeric training stats - lifetime tonnage, streak weeks, sessions per week, typical training hour, badge count, and squat/bench/ deadlift estimated one-rep maxes) are stored on our server so your group can see them. On the public board, anyone using the app can see them. No workout details, health data, or photos are ever shared.
Turning sharing off removes your entry from our server. The app sends the removal as soon as you switch it off, including from any group you were previously in, and your entry stops being visible to anyone. If your phone is offline at that moment, or the removal otherwise fails, the app tells you so on the spot, and it also finishes the removal by itself the next time you open the app with a connection. You do not have to remember to switch sharing off again. Entries also expire on their own either way: weekly boards after 60 days, stat snapshots after 90.
You can report a display name and block another person from your board from the Leaderboard screen. Blocking happens entirely on your own phone and hides them from you immediately - nothing about who you have blocked is sent to us. Offensive display names are also filtered automatically.
A report is stored on our server so the developer can act on it. It contains the reported display name, the reason you picked, anything you typed in the description box, the group and week involved, and a one-way hash of your device identifier - not the identifier itself, so a report cannot be traced back to your own leaderboard entry. Reports are kept for 180 days and then deleted automatically. Please don't put anything in the description box you wouldn't want retained for that long.
If you turn crash reporting on in Settings, then when the app hits an error a technical report is sent to us so we can fix it. It contains the error message, the developer stack trace (the internal function names and file positions leading to the error), the app version, whether the error was fatal, and a random identifier generated for crash reporting only - separate from the one used for the leaderboard, so crash reports cannot be linked to your display name. Stack traces are technical, but they are text produced by the app and we cannot rule out that an error message quotes a value the app was handling. We do not deliberately collect health data, and we do not include the contents of responses from health services in error messages. Reports are automatically deleted after 30 days. Crash reporting is off unless you turn it on, and you can turn it off again at any time.
Recomp Coach Pro is an optional subscription. Buying one involves two companies besides us, and neither of them receives your training, nutrition, photo or health data.
What our server stores. When a subscription starts, renews, lapses or is refunded, RevenueCat notifies our server, which records that random identifier and whether it currently has an active subscription. That is the whole record: no name, no email, no payment details, no receipt, and nothing you have logged. It exists so that the AI features can tell a subscriber from a free user without taking the app's word for it, and it deletes itself automatically once the subscription has ended.
The identifier is random, generated on your device, and is deliberately separate from the one used for the leaderboard and the one used for crash reports, so your subscription cannot be linked to either. If you never buy a subscription, nothing in this section happens at all.
Recomp Coach is intended for adults. It is not directed at children under 13 and does not knowingly collect data from them.
Recomp Coach is a fitness app, not a medical service, and it is not appropriate for managing an eating disorder. Its calorie targets have hard minimum floors and the AI Coach is instructed never to suggest a target below them. If food, weight, or your body is taking up more room in your head than you want it to, please talk to someone - in Australia the Butterfly Foundation is on 1800 33 4673, or start with your GP.
Questions, requests, or a report about another user: support@recompcoach.app. You can also reach it from inside the app at Progress > Leaderboard > Contact support about the leaderboard, which opens your mail app with the address already filled in. The same address is on the support page.