PRIVACY POLICY

PLATES ("the app", "we", "us") helps you track your training and turn it into strength ranks, a training plan and an optional body-scan score. Creators who promote PLATES can also link social accounts in our creator portal for post attribution. This policy explains what data we handle, where it lives, and what your choices are. The short version: your training data belongs to you and stays on your device, body-scan photos are sent to be scored and are never stored by us, we never sell personal data, and TikTok data is only used for creator attribution you opt into.

1. Data we collect

Data you provide

• Workout data — exercises, sets, reps, weights, workout dates and notes you log in the app.
• Imported history — workout data contained in CSV files you choose to import from other apps (for example Hevy or Strong). Imports are processed on your device.
• Profile details — optional details such as body weight, height, age and sex, used solely to calculate bodyweight-, age- and sex-adjusted strength ranks.
• Body-scan photos — if you choose to run a body scan, the two photographs you take or upload. See section 2 for exactly what happens to them.
• Sign in with Apple — optional. If you use it we store the anonymous, Apple-issued user identifier on your device. We do not send it to our servers and there is no account behind it in this version of the app.
• Creator portal details— if you join the creator programme, details such as your handle, profile URL, follower count, country, optional city or region, optional Discord username, payout preference, and the two analytics screenshots you provide with your application. The screenshots show your previous month's overview or views and your audience demographics, including viewer countries and percentages.

Data collected automatically

• Usage and diagnostics — basic, aggregated information such as crash reports and feature usage, used to keep the app working and improve it. This data is not used to identify you.
• Install identifier — a random identifier generated on first launch and kept in your device keychain. It is not a login and is not linked to your name, email or Apple ID. It exists so your phone can read back its own body scans and so we can rate-limit the scan service.
• Purchase status — if you subscribe, purchases are processed entirely by Apple. We receive only an anonymous confirmation of your subscription status, never your payment details.

TikTok data (creators only, opt-in)

If you connect a TikTok account to the PLATES creator portal via TikTok Login Kit, you authorise us to access only the scopes you approve. We currently request:

• user.info.basic — open id, display name and avatar, so we can show which TikTok account is linked.
• video.list — metadata for your public videos (id, title/description, cover image URL, share URL, create time, duration, and view / like / comment / share counts), so we can detect posts about PLATES and attribute views.

We do not access private videos, direct messages, followers, or video file contents. We do not post, edit or delete anything on TikTok on your behalf. Access tokens and refresh tokens from TikTok are encrypted at rest and used only to keep the connection working and to sync the metadata above.

2. Where your data lives

Your workout history, routines, profile details and ranks are stored only on your device. They are not synced to us, and uninstalling the app removes them. Creator-portal data, creator application screenshots and TikTok attribution data are stored on our servers. We use trusted infrastructure providers to host this data and protect it in transit with encryption (HTTPS/TLS).

3. Body scan

The body scan is optional. You can use every other part of PLATES without ever running one. If you do run one, this is exactly what happens:

• The two photographs are resized on your device and sent over an encrypted connection (HTTPS/TLS) to our scan service, together with your install identifier.
• Our service sends the images to OpenRouter, which processes them using an AI model and returns a set of region scores. OpenRouter processes the images only to provide the body-scan result.
• We never store the photographs. They exist only for the duration of the request and are not written to any database or file storage on our side. There is no image bucket behind the scan service.
• The scores that come back are stored, keyed to your install identifier, so your phone can show your scan history and track change over time. The photos themselves stay on your device, where you can delete them.

The body scan is intended for adults. We ask you to confirm you are 18 or older before the camera opens.

4. How we use your data

• To calculate your strength ranks, heatmaps and progress on your device.
• To produce your body-scan region scores, if you run a scan.
• To fix crashes and improve the app.
• To manage your subscription entitlements.
• For creators: to link your TikTok account, sync public post metadata, attribute PLATES-related posts, and calculate estimated views for the creator programme.
• For creator applicants: to review programme fit using the profile, location, recent reach and audience geography supplied with the application, and to contact you about the decision.

We do not sell your personal data, and we do not share it with third parties for their own advertising. TikTok data is not used for ads targeting and is not sold.

5. What other users can see

Nothing. PLATES has no social features — no profiles, no leaderboards, no friend lists, no messaging — so there is no way for another user to see your training, your ranks or your scans. Anything you choose to share outside the app (for example a rank card screenshot) is under your control.

Creator programme dashboards are private to you and PLATES admins — other creators cannot see your linked TikTok stats.

6. Data retention & deletion

You can erase everything from inside the app at any time: Profile → Settings → Delete account and app data. That one action deletes your workouts, routines, profile and ranks from the device, deletes your body-scan photos from the device, deletes your stored scan scores from our server, and clears the Sign in with Apple identifier. Individual scans can also be deleted one at a time.

Otherwise, local data stays on your device until you delete it or uninstall the app. If you would like us to confirm a deletion or help with one, email the address below and we will respond within 30 days.

When you disconnect a TikTok account in the creator portal, we invalidate tokens immediately and delete synced TikTok video metadata within 7 days. You can also revoke PLATES access in your TikTok account settings.

Creator application details and analytics screenshots are retained while we review and administer the creator relationship. Deleting a creator record removes its stored application screenshots. You can also ask us to delete a rejected or pending application using the contact address below.

7. Health and fitness data

Workout data, body metrics and body-scan scores are used only to provide the app's features. They are never used for advertising, never used to train anyone's models, and never disclosed or sold to data brokers.

If you choose Settings → Data → Import from Apple Health, PLATES requests read-only access to your latest body weight and up to one year of workout records. Imported Health data is processed and stored only on your device and is not sent to PLATES, OpenRouter, Superwall or any other third party. PLATES does not write any data to Apple Health. You can deny or revoke access at any time in Apple Health or iOS Settings without affecting the rest of the app.

8. Children

PLATES is not directed at children under 13 (or the equivalent minimum age in your region), and we do not knowingly collect data from them. If you believe a child has provided us personal data, contact us and we will delete it.

9. Your rights

Depending on where you live (for example under GDPR or CCPA), you may have the right to access, correct, export or delete your personal data, and to object to certain processing. To exercise any of these rights, email us — we will respond within the timelines required by law.

10. Third-party services

• OpenRouter — processes body-scan photographs using an AI model to produce region scores, as described in section 3.
• Apple — processes all subscription payments and provides Sign in with Apple. We never see your payment details.
• Superwall — renders our subscription screen and reports whether a subscription is active. It receives app usage events relating to the paywall, not your training data.
• TikTok— Login Kit and Display API, for creators only and only if you opt in. Their handling of data during authorisation is governed by TikTok's own terms and privacy policy.

PLATES contains no advertising, analytics-for-advertising or attribution SDKs, and does not track you across other apps or websites. Our Terms of Service describe the creator tools in more detail.

11. Changes to this policy

If we make material changes, we will update this page and note the new date at the top. Continued use of the app after changes take effect means you accept the updated policy.

12. Contact

Questions about privacy or your data: support@getplates.xyz