Privacy Policy — The Process

Who is responsible

The Process is developed by Johan von Boer, who is responsible for the data handled by the app and by api.theprocesstracker.com. See Contact below.

Data stored on your device

Your exercises, workout log and settings are stored only on your device. Nothing is uploaded unless you turn on sync. Uninstalling the app removes this data.

Sync (optional)

When you turn on sync, the server creates an anonymous account made of a random ID (GUID) and a secret key. No name, email or phone number is needed. The secret is stored only as a hash.

Your exercises, workout log, workout schemas and settings are then stored on api.theprocesstracker.com so they can be synced between your devices. Deleting an item in the app marks it as deleted so the change reaches your other devices; the record itself stays on the server until you delete your account.

Sharing a workout schema (optional)

When you share a schema, a copy of it (its name and exercises, not your workout log) is uploaded and anyone with the link or code can import it. Nothing identifying you is stored with the shared copy. Shared schemas expire after one year.

Feedback form (optional)

Messages you send through the feedback form are stored on the server, together with your email address if you choose to give one. They are used only to read and reply to your feedback, and are not linked to your sync account. Ask us if you want your feedback removed.

Server logs and abuse protection

To keep the service secure and working, the server logs requests, including your IP address and, for sync requests, your account ID. Logs are rotated automatically, and older entries are deleted as new ones are written. For rate limiting, the server also keeps short-lived records keyed by a hash of your IP address.

What we don't do

No analytics, advertising or tracking SDKs.
We don't sell your data or share it with other companies.
No third-party requests: fonts are bundled with the app and this website.

All data sent between the app and our server is encrypted in transit (HTTPS).

Deleting your data

You can delete your sync account and all synced workout data at any time, either from the Settings tab in the app or on the Delete account page. Deletion is immediate and permanent. Data stored locally on your devices is not affected.

Your rights

Under the GDPR you have the right to access, correct and delete your personal data, and to object to how it is handled. We process sync and feedback data because you asked us to provide those features, and server logs because we have a legitimate interest in keeping the service secure. Because sync accounts are anonymous, we may need your account ID to find your data. You can also complain to the Swedish Authority for Privacy Protection (IMY).

Contact

Questions about this policy? Use the feedback form in the app's About tab, or open an issue on GitHub.