Privacy Policy

Last updated: October 1, 2026

Wolfore LLC, a Wisconsin limited liability company (“Wolfore,” “we,” “us”), operates Wolfore, a strength-training app. This policy is written to be read, not to cover us. It says what we collect, why, who else touches it, how long we keep it, and what we can’t delete, including the parts that are less convenient to admit.

The short version: your training data is yours. We don’t sell it, we don’t run ads, and we don’t track you across other apps or websites. We collect only what the product actually needs. You can export everything at any time, including after you cancel. And Wolfore is a small, independently built product, which means the developer can access your data to run, support, and improve it. We’d rather tell you that plainly than bury it.

Information we collect

We keep this to the minimum needed to give you the best experience. Here is what that includes:

Account details: your email address and a display name. We use passwordless sign-in (magic links and passkeys), so we never create or store a password for you.
Your training data: the content you create and log, including programs, exercises, workout sessions and sets, personal records (“Marks”), notes, effort ratings, and the weights, reps, distances, and times you record.
Optional profile details: information you can add to personalize your training, all optional. This includes your training goals and body metrics such as bodyweight and height. If you connect to a Studio (a gym or trainer), it can also include your age (from a birth year you enter), your sex, and notes for your trainer such as injuries or limitations. You choose what, if anything, to fill in, and you can edit or clear it anytime.
Subscription details: billing is handled by our payment processor (Stripe). We receive your subscription status but never see or store your full card number.
Basic technical & security data: information needed to keep you signed in and the service secure, such as session tokens. To keep Wolfore fast, reliable, and secure, we and our providers automatically collect technical logs and metrics. These can include your IP address, device and browser type, the requests and actions you make in the app, performance data, and error and security events. We use this for performance monitoring, troubleshooting, and detecting and investigating abuse or security threats. Cloudflare also provides cookieless, aggregate traffic measurement that is not tied to your identity. We don’t use advertising trackers, and we don’t track you across other apps or websites.

How we use your information

To provide the app and sync your training data across your devices.
To operate, support, and improve Wolfore. Because Wolfore is a small, independently built product, the developer can access data in our systems to operate the service, investigate and fix problems, respond to your support requests, and build new features. We use your data to run and improve Wolfore, not to profile you or serve you advertising.
To send you essential account email, such as sign-in links and important notices about your account or the service. We send these through our email provider (Resend).
To process subscriptions and payments through Stripe.
To keep the service secure, prevent abuse, and meet legal obligations.

What we don’t do

We don’t serve ads, we don’t sell or rent your personal information, and we don’t track your behavior across other apps or websites. Your training data is yours. Videos you choose to watch are the one exception to “other websites”: they come from YouTube, as described under “Exercise videos” below.

Service providers

We use a small number of trusted providers to operate Wolfore. They process data only to provide their service to us:

Supabase: database, authentication, storage, and application logging.
Cloudflare: hosting, content delivery, and network security.
Resend: email delivery, including sign-in links and account notices, and messages a Studio you train with sends you through Wolfore, such as notices, newsletters, and your programs.
Stripe: payment processing.

Support email sent to us is forwarded to a mailbox we read directly. It is not processed by a third-party helpdesk.

Your data is stored and processed in the United States.

Exercise videos

Some exercises can have a demo video: a YouTube link that you, or a Studio you train with, attached. Videos are hosted and played by YouTube, which is operated by Google. Wolfore stores only the link. When a video’s thumbnail is shown or you play a video, it loads from YouTube’s servers, and YouTube receives the information any website visit shares, such as your IP address and device details. Videos play in YouTube’s privacy-enhanced mode, which doesn’t set YouTube cookies until you press play. Once a video is playing, YouTube may use cookies or similar technology under Google’s own Privacy Policy. Wolfore does not share your account details or training data with YouTube.

How long we keep your data

We don’t delete your training data the moment you stop paying. Taking a few months off shouldn’t cost you your history. When your access ends, whether a subscription ends, a free trial ends, or a Studio stops covering you, we keep your account and everything in it for 12 months from that day, then permanently delete it. We don’t hold it indefinitely, because keeping personal data nobody is using is a risk to you rather than a favour.

An account nobody ever signed in to is deleted after 7 days. It holds no training data and no trial has started. We send one reminder before then, and nothing else: an address that has never signed in never receives our lifecycle emails. Accounts a Studio created for you are the exception and are covered below.

What changes is access, not existence. Without an active subscription you can still sign in, but you’ll only reach your profile page, enough to export everything or resubscribe. You can’t use the app itself.

Nothing is locked away from you during those 12 months. Any time in that window you can export your data, or resubscribe and carry on exactly where you left off. Subscribing stops the clock; if access ends again later, a fresh 12 months starts from then. We’ll email you before anything is deleted, roughly 3 months, 1 month, 1 week and 1 day beforehand, so the deadline never arrives without warning.

Your export is yours to keep. If your account is deleted, whether by you or after the 12 months, you can start a new one later and import that backup to restore your training history. Importing is a subscriber feature, so you’ll need an active subscription to bring it back.

If you’re an active member of a Studio, that countdown does not run at all. Your account stays open for as long as that relationship lasts, even if you have no personal subscription. The 12 months start when you leave or are removed, when the Studio is deleted, or when the Studio stops using Wolfore (you stay on its roster, so if it comes back you are reconnected, but your account is no longer being kept open by it). This applies even if you never signed in to the account the Studio created for you: the workouts they logged for you are kept for those 12 months so they are there if you do sign in, but we will not email an address that has never signed in.

If you ask us to delete your account, we delete it, 7 days later. The wait is a safety net: during it you can sign in and press Keep my account, and everything is exactly as you left it. Any subscription is cancelled when you ask. After 7 days your training data and personal information are permanently removed from our active systems. We retain one thing: your email address and the date of deletion, for 12 months, solely to enforce our one-free-trial-per-email policy. After 12 months that is deleted too. If you trained with a Studio, see “If you train with a Studio” below: they keep their own client record, and we explain exactly what that means.

The parts we can’t delete instantly. Some things outside our main database age out on a schedule rather than at the moment you ask: short-term operational and security logs held by Cloudflare, and routine encrypted backups, which expire automatically on a rolling retention window. Support requests you send us through Wolfore are deleted 12 months after the conversation last had any activity; email you send to our support address directly sits in a mailbox and isn’t removed automatically. Our own error logs are deleted after 90 days, and our security audit log after 12 months. None of this is used to profile you, and if you want any of it removed sooner, email support@wolfore.com and we’ll do what we can.

When we have to keep something. If we are legally required to preserve an account or a Studio’s records, for example because of a dispute or a lawful request, we place it on hold and nothing in it is deleted until the hold is lifted, including a deletion you asked for. We only do this when we must, and we tell you if we are allowed to.

Your rights and choices

Access & export: export your data anytime, including during your trial and after you cancel, as a single download containing a full JSON backup, a readable HTML copy, and a CSV lift log, from Settings. The export covers everything that is yours. Programs a Studio wrote for you are theirs and appear only while you are connected to them.
Correct: you can edit your information and training data directly in the app.
Delete: delete your account and your data anytime from Settings → Delete Account. Deletion happens 7 days after you ask, and you can keep your account until then; afterward we keep only your email and deletion date for a limited time (see “How long we keep your data” above).

Depending on where you live, you may have additional rights. For example, California residents have rights under the CCPA to access and delete their personal information and to opt out of its “sale” (we don’t sell it). To exercise any of these, contact us at support@wolfore.com.

Security

Data is encrypted in transit, and within the app your data is restricted to your own account through row-level security, so other users can’t see it. The developer maintains the systems and can access data to operate and improve the service, as described above. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard safeguards.

If you train with a Studio

Gyms and trainers use Wolfore Studio to program for their clients. We call each of them a Studio, whether it is a gym you go to or a single coach programming for you remotely. If you train with one, here is exactly what that means for your data.

A Studio may create an account for you. It may create a Wolfore account using the name and email it has on file for you, so your trainer can build your program and print it for you. If you are under 18, the Studio is responsible for having your parent or guardian’s consent first, and invitations and notices may be sent to your parent or guardian’s email instead of yours.

Connecting an existing account always requires your consent. If you already have a Wolfore account and a Studio asks to connect with you, they see nothing until you accept. You can review exactly what would be shared before you decide, and you can decline. Declining is final unless you later accept a new request. When you accept, you agree to Joining a Studio on Wolfore, which sets out in full what they can see and what they keep.

Joining a Studio can give you free trial time. If you join a Studio that subscribes to Wolfore, you get 35 days of the full Wolfore app, once per Studio. If the Studio is on its own free trial, your trial runs at least until the Studio’s does. Trial time never shortens an existing trial.

What their trainers can see while you are connected: your name and email on their roster; your training activity in Wolfore, meaning your workouts, sets, personal records, session notes, and any exercises or sets you skip, with the note you leave; any exercises you have created for yourself, meaning the name and how the exercise is set up; and the programs they build for you. They cannot see programs you build for yourself.

The optional profile details you choose to share. If you fill in any of the optional profile details described above (your goals, body metrics like bodyweight and height, and, in a Studio context, your age, sex, and notes for your trainer such as injuries or limitations), your connected trainer can see and update them, and you can see and update the same fields. This helps them program for you. It is entirely optional; leave any of it blank and there is nothing to share. These details stay on your own account: if you disconnect from the Studio the trainer stops seeing them, and if you delete your account they are deleted with it.

When you disconnect, their access ends. You can leave a Studio’s roster at any time from your profile, and they can also disconnect you. Either way, their trainers immediately stop seeing your training data, including any personal records one of them recorded for you. You keep your account and everything you logged, plus your own copy of the programs they wrote for you. The Studio keeps its copy of those programs and its own internal notes.

If you come back to a Studio later, they see your current numbers. Rejoining restores your trainer’s view of your training as it is now, including anything you logged elsewhere in between. That’s deliberate: a trainer writing you a new program needs today’s lifts, not the ones from the day you left.

If you delete your Wolfore account while you’re on a Studio’s roster, here is exactly what happens, and this is the part most services are vague about. Everything of yours is deleted: your training history, your Marks, your notes, your personal programs. The Studio keeps its own client record: the name and email it holds for you, its copy of the programs its trainers wrote for you, and its own internal notes about you. That record is theirs, not ours and not yours. It is the same information they would have in a spreadsheet or a filing cabinet, and it is theirs to keep or delete under the Wolfore Studio Agreement. When you delete your account we’ll offer to stop them emailing you marketing at the same time. If you want a Studio to remove its record of you entirely, ask them directly, and email us if they don’t.

A Studio cannot sell or misuse your data. They agree in writing, under the Wolfore Studio Agreement, to use your training data only to provide training services to you.

Questions about a Studio connection, or want one removed? Contact us at support@wolfore.com.

If you run a Studio

This section is for the gyms and trainers who use Wolfore Studio. Everything above applies to you as a Wolfore user too. The Wolfore Studio Agreement sets out the rules in full; this is what it means for your data.

What we collect about your Studio. Your Studio’s name, and anything you choose to add: your logo, brand colors, postal address, phone number, website, and social media profiles. We use these to run the service and to present your Studio to your Members: in the app, in email sent on your behalf, and on printed programs. Newsletters need a postal address because the law requires one on marketing email.

Your trainers. For each trainer you add, we hold their name, email, role, and the settings you choose for them. Each trainer signs in with their own Wolfore account, covered by the rest of this policy. While your Studio has an active subscription (or free access from us), your trainers’ own Wolfore accounts are included; during your free trial their trial runs alongside yours.

The records you keep about your clients. Your staff add Members and Contacts, with at least a name and email, and write programs, notes, and messages for them. Those records belong to your Studio, and you control them under the Wolfore Studio Agreement: you decide what to add and when to remove it, and you’re responsible for having the right to add it. We process them only to run Wolfore Studio for you. We don’t use them for anything else, and we never sell them.

Email you send through Wolfore. Announcements, newsletters, and programs you send are delivered by our email provider (Resend) on your Studio’s behalf. We keep a copy of each message so you can see it in your Sent list, and we honor unsubscribes automatically.

Billing. Your Studio’s subscription is billed through Stripe. We receive its status and plan, never your full card number. The Wolfore Studio app takes no payments; subscriptions are managed on the web.

If your Studio stops using Wolfore. If your subscription ends or your free trial runs out, your Studio is kept for 12 months: your staff can sign in to Settings to export or subscribe, and everything comes back as it was if you do. Your Members stay on your roster but are no longer covered by you. After 12 months the Studio’s records are permanently deleted: the programs your staff wrote, groups, notes, and the Member and Contact records you held. If you delete your Studio from Settings, billing stops at once and it is deleted 7 days later; any admin can keep it until then. Either way, your Members first get their own copy of the programs your trainers wrote for them, and keep their own Wolfore accounts and everything in them. We email your admins before anything is deleted.

Children’s privacy

Wolfore is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us information, contact us and we’ll delete it.

Wolfore may be used by people aged 13 to 17 only with the consent and supervision of a parent or legal guardian, who agrees to our Terms of Service on their behalf and is responsible for their use. This applies however the account is created, whether a young person signs up directly with a parent or guardian’s permission, or a Studio creates the account. Where a Studio is involved, it is also responsible for holding that consent, as described above and in the Wolfore Studio Agreement, and invitations and notices may be sent to the parent or guardian’s email.

Changes to this policy

We may update this policy from time to time. If we make material changes, we’ll update the “Last updated” date above and, where appropriate, notify you in the app or by email.

Contact us

Questions about this policy or your data? Reach us at support@wolfore.com.

wolfore.com