privacy.
Updated 8 November 2026
This page covers the tapwod apps for iPhone and Android and the website tapwod.app. It is short because we collect very little: there is no account, no tracking and no ads, and we never sell your data.
Who we are
tapwod provides the apps and tapwod.app, and is responsible for the data on this page. Write to [email protected] with any question about your data.
On your phone
The apps keep what you enter only on your phone: your Profile (Gender, Level, Equipment, usual duration, Training days and Reminder time), your History, your Mixes, your Routines, the exercises you skip and, if you turn on weight tracking, your weigh-ins and goal weight. We cannot see any of it. Only a short summary of each workout leaves the phone, in the anonymous usage events below. The apps need no account.
Your phone’s own backup (iCloud Backup on iPhone, Google’s backup on Android) can copy this data, so it moves with you to a new phone. Apple or Google keeps that backup for you, under their own privacy terms, and we cannot read it. When you delete the app, its data on the phone is deleted.
Reminders
A Reminder is a notification that the app sets on your phone for your Training days. It comes from your phone, not from our server, so we do not know when it comes or whether you open it. Turn it off on the You tab, or in your phone’s settings.
The Google Play sign-up: what we store
When you sign up on tapwod.app to hear when tapwod is on Google Play, we store:
- Your email address
- The language of the page you used
- Where you signed up: the page of tapwod.app you used, and the campaign name in the link, if there is one
- Your browser’s user agent: the text your browser sends to name itself and its version
- A one-way hash of your IP address. We cannot turn it back into your IP address
Why
We use your email for one thing: to tell you when tapwod is on Google Play. We use the IP hash only to stop one device from sending too many sign-ups. You give your consent when you send the form.
Where it stays
Your data stays in a database on our own server in the EU. We do not sell it or share it with third parties. The site has no ads, no trackers and no cookies.
How long
We keep your data until you unsubscribe or ask us to delete it. Every email we send has an unsubscribe link.
What the apps send
The tapwod apps for iPhone and Android send a few anonymous usage events to our own server:
- The app opened, once a day, and which tab you opened: Today, Workouts, Weight or You
- Each first-launch screen shown and finished, with your answers on equipment, level and usual workout length. Never your gender
- A workout started, with its focus, format and length, and whether other audio, such as music, was playing
- A workout ended: whether it counts as complete, the minutes done, its focus, its number of exercises, how many times it was paused and resumed, and your streak
- A workout was quit: where it was (the part, the place in the workout, and an exercise, a rest or “Get ready”), after how many seconds, and which exercise showed
- An exercise was done, skipped, swapped, deleted, put back or added: which exercise, and where in the app
- A workout setting changed (length, focus, equipment, intensity, warm-up or cool-down), and its new value
- Reminders: your answer to the notification permission, the reminder turned on or off, how many training days you picked (not which days), and a tap on a reminder, with whether the app was already running
- Weight tracking turned on or off, on a first-launch screen or later, and that a weigh-in was logged. Never your weight or your goal weight
Each event also has a random install ID, which the app makes the first time it opens, the platform (iPhone or Android), the app version and the app’s language. Each event also has the country of your App Store or Google Play account, or the region set on your phone when the app cannot read the account’s country. Each event also says where the app came from: the App Store, TestFlight, Google Play, or another source, such as a test build. We use the country to count installs per country, and the source to leave our own test phones out of that count. The apps do not send your name, email, the position of your phone (they never ask for it), contacts, a device ID or an advertising ID, and the usage data we store does not hold your IP address. When you delete the app, its install ID is gone.
Why the apps send it
We use usage data for one thing: to learn how people use tapwod, which workouts and exercises they use and where they stop, so we can make it better. It is not linked to you. We do not use it for ads and we do not sell it or share it with third parties. The legal basis is our legitimate interest in making the app better (GDPR, article 6(1)(f)). The data holds nothing that names you, so its effect on you is very small.
Where usage data stays
Usage data stays in the same database on our own server in the EU. The apps keep the events they could not send yet on your phone for up to 30 days. We keep usage data while it helps us improve tapwod; it holds nothing that names you.
Crash reports
When the iPhone app crashes, freezes or uses too much processor time, iOS gives the app a report of it the next time it opens, and the app sends that report to our own server. A report holds what the app was doing at that moment (the code it was running), the app version, the iOS version and the phone model. It has no install ID and nothing that names you, and the reports we store do not hold your IP address. We use crash reports for one thing: to find and fix what made the app fail. They are not linked to you, and we do not share them with third parties. We delete each report after 90 days. The legal basis is our legitimate interest in an app that works (GDPR, article 6(1)(f)).
Our web server’s log
Like every web server, ours writes each request to a log: the time, the address asked for, the answer, the user agent of your browser or the app, and the name of the site that sent you, for example google.com, never its full address. The log does not hold your IP address. Only when the server refuses a request or cannot answer it, for example because one device sends too many, does it note that request’s IP address and the full address of the page that sent it. We use the log to keep the server safe, to find faults, and to count in total how many visits come from search engines and assistants. We never link it to the usage data, the crash reports or to you. The log keeps only its newest lines, 30 MB at most, and deletes the older ones.
Always on, and your right to object
The apps always send usage data and crash reports: there is no switch in the app. If you object to it, write to [email protected]. We answer within one month.
What we never do
- Track you across other apps or websites
- Show ads, or use an advertising ID
- Sell your data
- Use another company’s analytics or crash tools: the data goes only to our own server
Service providers
Two companies help us run our server. They handle data only on our instructions, and only to do this work:
- Hetzner Online GmbH hosts our server and its database in the EU
- Cloudflare, Inc. carries the traffic between the apps or your browser and our server, and protects it from attacks. It sees your IP address to do this. It also forwards the email you send to [email protected] to the mailbox where we read it (Cloudflare Email Routing). Cloudflare can handle data outside the EU, under the EU-U.S. Data Privacy Framework and the EU’s standard contractual clauses
Apple and Google deliver the apps through their stores, under their own privacy terms.
Your rights
You can ask to see, correct or delete your data, to limit how we use it, to get a copy of it, and to object to how we use it. Write to [email protected]; for your sign-up data, write from the address you signed up with. We answer within one month.
If you think we use your data wrongly, you can complain to the Spanish data protection authority, the AEPD (www.aepd.es), or to the authority where you live.
Children
tapwod is for adults of 18 or older, and we do not knowingly collect data from anyone younger. If you think a child sent us data, write to [email protected] and we delete it.
Changes
When we change this page, we change the date at the top.