Privacy Policy

Last updated: June 23, 2026

This Privacy Policy explains what information Illustrated Workout ("we", "us", "our") collects about you, how we use it, and the choices you have. By using the service you agree to the practices described here.

1. Information we collect

Account information. When you register, we collect your name, email address, and a hashed version of your password.

Workout data. The programs you build, the exercises you select, and the logs you record (sets, reps, weights, dates).

Payment information. Handled entirely by Stripe. We never see or store your full card number. We receive a subscription identifier and high-level billing status from Stripe.

Usage data. Technical information automatically collected when you use the service, such as IP address, browser type, pages visited, and timestamps, used for security and performance monitoring.

Communications. If you contact us (for example, via the contact form), we retain the contents of your message and your email address so we can respond.

2. How we use your information

  • To provide, maintain, and improve the service
  • To process payments and manage your subscription
  • To send transactional emails (account, security, billing, and service-related messages)
  • To respond to your inquiries and provide support
  • To detect, prevent, and address technical issues, fraud, and abuse
  • To comply with legal obligations

3. Legal basis for processing (EEA/UK users)

If you are in the European Economic Area or United Kingdom, we process your personal information under the following legal bases: performance of our contract with you (to provide the service), our legitimate interests (to secure and improve the service), your consent (for optional communications), and compliance with legal obligations.

4. Sharing with third parties

We share limited personal information only with service providers that help us operate the service:

  • Stripe — payment processing and subscription management
  • Resend — transactional email delivery
  • Our cloud hosting provider — server infrastructure and database hosting

These providers are contractually bound to protect your information and use it only to provide services to us. We do not sell your personal information. We may disclose information if required by law, to enforce our Terms, or to protect the rights, safety, or property of Illustrated Workout or others.

5. Cookies and similar technologies

We use cookies to keep you logged in, remember your preferences, and understand how the service is used. Essential cookies are required for the service to function; you may disable non-essential cookies in your browser settings, but parts of the service may not work as expected.

6. Data retention

We retain your personal information for as long as your account is active, or as needed to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or anonymize your personal information within a reasonable period, except where retention is required by law (for example, billing records).

7. Your rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information (update it from your settings page if logged in)
  • Delete your account and associated data (from your settings page)
  • Export your workout data
  • Object to or restrict certain processing
  • Withdraw consent for optional communications at any time

To exercise rights that aren't self-service, contact us.

8. Data security

We use industry-standard security measures to protect your information, including HTTPS encryption in transit, hashed passwords, and limited administrative access. No internet transmission or electronic storage is perfectly secure, so we cannot guarantee absolute security.

9. Children's privacy

Illustrated Workout is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. International users

By using the service, you acknowledge that your information may be transferred to and processed in countries where our service providers are located, which may have different data protection laws than your country of residence.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes we will notify you by email or through the service. The "Last updated" date at the top of this page shows when it was most recently revised.

12. Contact

Questions about this Privacy Policy or your data? Get in touch.