Privacy policy

Last updated: 4 October 2026

1. Who we are

Repwise is the data controller for personal data processed through repwise.dk. Contact: support@repwise.dk.

2. What we collect

Account: email address, password (stored only as a salted hash), date of birth, and for users under 18, a record that a parent or guardian consented.
Profile: name, height, weight, sex used for calculations, optional gender, goal, experience, equipment and training days.
Health-related information you choose to give: injuries or pain, whether a doctor has cleared you to exercise, pregnancy or postpartum status (if you pick that goal), and answers to safety questions such as eating-disorder history.
Training data: workouts, weights, reps, bodyweight and cardio logs.
Technical data: your IP address and basic request data are processed to run and protect the service, for example to limit repeated login attempts. We do not use advertising or analytics trackers.

3. Why we use it and our legal basis

To create and run your account, build your plan and show your progress. Basis: performing our agreement with you (GDPR Article 6(1)(b)).
To protect the service from abuse and keep it secure. Basis: our legitimate interest (Article 6(1)(f)).
To process health-related information. This is sensitive data, and we use it only to provide Repwise to you. Basis: your explicit consent (Article 9(2)(a)), which you give when you enter it. You can withdraw consent by deleting the information or your account.

We do not sell your data, use it for advertising or make automated decisions with legal effects about you.

4. Who we share it with

Hosting and database: Netlify, which hosts the site and stores your data on our behalf.
Email delivery: an email service provider that sends password reset emails. It receives your email address and the message.

These providers act on our instructions. Some may process data outside the EU/EEA, in which case we rely on appropriate safeguards such as the EU Standard Contractual Clauses. We may also disclose data if the law requires it.

5. How long we keep it

We keep your data until you delete your account. Deleting your account removes your profile and training data from our database. Password reset tokens expire after one hour. Login attempt records are used only for security and are kept for a short time.

6. Your rights

You have the right to access your data, correct it, delete it, restrict or object to its use, receive a copy in a portable format, and withdraw consent. In Profile you can download your data and delete your account yourself. For anything else, email support@repwise.dk. You can also complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk) or your local authority.

7. Cookies

Repwise uses one essential cookie that keeps you logged in. It is needed for the service to work and is not used for tracking or advertising. Your browser may also store a small amount of data locally so the app can save workouts when you are offline.

8. Children

Repwise is not for children under 13. Users aged 13 to 17 need a parent or guardian’s consent. Under-18 users do not get calorie targets or fat-loss plans.

9. Security

We protect your data with encrypted connections (HTTPS), hashed passwords, access controls and limits on repeated login attempts. No system is completely secure, so please use a strong password that you do not use elsewhere.

10. Changes

We may update this policy. If we make an important change we will tell you in the app or by email.