Loading...

Privacy Policy

Last updated: August 4, 2026

1. Introduction

PRzilla ("we," "our," or "us") provides a web and mobile application for tracking CrossFit workout scores and progress. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

2. Information We Collect

Account Information

When you create an account, we collect your email address and name. If you sign in with Google or Apple, we receive this information from your identity provider. We also generate a unique user ID for your account.

Workout Data

We collect the workout data you enter, including WOD scores (time, reps, load, rounds, distance), movement and lift logs, session dates, and any notes you add. This data is linked to your account so you can track your progress over time.

Affiliate Report Data

With a CrossFit affiliate's approval, we may import workout programming and member results from that affiliate's SugarWOD account to create an affiliate report. Imported data can include member names and SugarWOD identifiers, workout dates and descriptions, divisions or scaling choices, scores, and result units, including member-entered notes attached to those results. These reports are separate from PRzilla accounts.

Profile and Training Preferences

If you add them to your profile, we collect your gender, date of birth, body weight, preferred weight and distance units, and weekly training-day target. These values are linked to your account and used to personalize workout displays, progress features, and AI coaching. AI prompts receive your completed age rather than your exact date of birth.

Daily Check-Ins (Optional)

If you log how you feel, PRzilla stores your daily mood, soreness, and optional note with your account. Recent check-ins, including note text, may be processed by AI model providers when AI Coach generates or refreshes your automatic daily briefing, or when you chat with Coach, so its response can account for what you reported. Product analytics include the mood and soreness ratings, where the check-in was opened, and whether a note was provided, but never the note text. This data is not sold or used for advertising.

Photos (Optional)

If you use the "Scan photo" feature on the web or mobile app to import a workout, the image you select (or capture with your camera) is sent to Google Vision API for text extraction and then immediately discarded. We do not store your photos. The mobile app requests camera and photo library access only for this optional OCR scan feature.

Health Data (Optional)

If you enable recovery sync, PRzilla reads resting heart rate, sleep stages, and awake periods from Apple Health on iOS or Health Connect on Android. On iOS it can also read heart rate variability. Sleep timelines, source identifiers, and onset timestamps stay on your device. PRzilla derives and stores account-linked daily aggregates such as total and main sleep, nap-aware duration, bedtime deviation, and interruption counts and minutes. These recovery metrics are used for in-app recovery history and scoring and may be included as context when you invoke AI coach features. PRzilla requests read access only and does not write data back to Apple Health or Health Connect. Health data is not sold or used for advertising.

Usage Data

We use PostHog for product analytics to understand how features are used and improve the app. This includes page views, feature interactions, and general usage patterns. PostHog may collect technical information such as browser type, device type, and approximate location (country/region level, not precise location).

Referral Data

Redeeming a referral code reveals your first name to the person who referred you. We do not collect an email address before signup for referral attribution. If either account is permanently deleted, we remove its account link from the referral record while retaining the anonymized reward ledger needed to honor the other participant's earned reward and prevent promotion abuse.

3. Information We Do Not Collect

We do not collect precise location data, videos, financial or payment card information, contacts, phone numbers, or advertising identifiers. Apple and Google process subscription payments. We receive subscription status and purchase-history details from RevenueCat, but we do not receive your payment-card number or bank-account details. Except for optional Apple Health or Health Connect recovery sync that you enable in the mobile app, we do not collect health data from device sensors. Photos used for the optional OCR scan feature are processed for text extraction only and are not stored.

4. How We Use Your Information

We use your information to:
  • Provide and maintain the workout tracking service
  • Authenticate your identity and secure your account
  • Store and display your workout history and progress
  • Store and display optional Apple Health or Health Connect recovery metrics, when you enable sync
  • Provide optional recovery context to the in-app AI coach, when recovery sync is enabled
  • Store daily mood, soreness, and optional notes and use recent check-ins as context for automatic daily briefings and AI Coach conversations
  • Validate purchases, provide subscription features, and restore PRzilla Pro access across signed-in devices
  • Attribute and fulfill referral rewards
  • Improve the app based on usage patterns

5. Data Sharing

We do not sell your personal data. Your data is sent only to our backend servers and service providers acting on our behalf to provide the service. Google and Apple receive authentication requests when you sign in and process purchases made through their respective app stores. RevenueCat receives your PRzilla account ID and store purchase history to validate purchases and provide subscription status; it does not receive your workout history or payment-card details from us. We use PostHog for analytics, which processes usage data on our behalf. When you use AI features, relevant workout, recovery, and self-reported daily check-in context, including optional check-in note text, along with relevant profile demographics, body measurements, training target, and unit preferences, may be processed by AI model providers, such as Anthropic or OpenAI, acting as service providers/subprocessors to generate the response. We do not sell this data, use it for advertising, or share it with data brokers. For approved affiliate reports, public leaderboard views use pseudonymous athlete aliases. Member names are available only through an affiliate- and report-specific review link intended for authorized affiliate recipients. Review links remain stable across report refreshes so an authorized recipient can keep using the same private URL.

6. Data Storage and Security

Your data is stored in a PostgreSQL database hosted with industry standard security practices. Authentication tokens are transmitted over HTTPS. We do not store passwords in plain text — social sign-in uses OAuth tokens, and email/password authentication uses secure hashing.

7. Account Deletion

You can delete your account at any time from the Settings page in the app. When you request account deletion, your account is deactivated immediately. All associated personal data (account information and workout data) is permanently removed from our systems after 30 days. During this period, you can contact us to cancel the deletion and restore your account.

8. Third-Party Services

We use the following third-party services:
  • Google Sign-In — for authentication (receives email, name, profile image)
  • Apple Sign-In — for authentication on iOS (receives email, name)
  • PostHog — for product analytics (receives usage data)
  • Google Vision API — for optional OCR photo scanning (receives image data, not stored)
  • AI model providers — for optional AI coach and workout analysis features (receives the workout, recovery, self-reported check-in, and relevant profile/preference context needed to generate a response)
  • RevenueCat — for in-app purchases and subscriptions (receives your account ID and store purchase history, but not payment-card details)
  • SugarWOD — as the source of approved affiliate workout programming and member-result data used in affiliate reports
  • Vercel — for hosting and web analytics

9. Your Rights

You have the right to:
  • Access your personal data through the app
  • Delete your account and all associated data
  • Disable Apple Health or Health Connect recovery sync and delete stored recovery data from Settings in the mobile app
  • Export your workout data
  • Opt out of analytics tracking
  • Ask us to correct or remove your data from an affiliate report

10. Children's Privacy

PRzilla is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date at the top of this page.

12. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at hello@przilla.app.