First Rep Privacy Policy

Data We Process

First Rep processes account email, including Apple private relay email where selected, sign-in identifiers, display and squad names, age-gate status, fitness goal, workout summaries, live exchange photos, purchase history, device-integrity identifiers, and product interaction or preference data needed to provide the service.

Your full birth date and private progress photos remain on your device in the current version. They are not uploaded as part of the account service.

Device Integrity and Fraud Prevention

For verified workout check-ins, First Rep uses Apple App Attest to confirm that the request came from the genuine iOS app and has not been replayed or altered. The backend stores an App Attest public-key hash, Apple attestation receipt, assertion counter, app build, and validation category with your account. This security data is not an advertising identifier, is not used for cross-app tracking, and is used only to operate and protect the service.

Camera, Photos, and Video

Camera access is requested only for live photo exchange and user-started exercise verification. Exchange photos are uploaded for safety checks and matching. Exercise verification uses on-device body landmarks and equipment labels or bounding boxes to identify a supported fitness movement, confirm required equipment, and count repetitions. Raw exercise frames and body landmarks are not uploaded or saved and are discarded after verification; only movement, repetition, confidence, frame-coverage, and equipment-label summaries may be sent to the backend.

AI Safety Checks

First Rep uses automated checks to detect nudity, contact information, face masking preferences, abnormal workout signals, and abuse reports. Human review may be used for safety or support cases.

Purchases

Characters, medals, and revive tickets are digital content purchased through Apple In-App Purchase on iOS. Apple processes payment information. First Rep stores transaction and entitlement records needed to deliver, restore, prevent duplicate grants, and support purchased digital content.

Cookies and Tracking

The native app does not use third-party cookies, cross-app tracking, or third-party targeted advertising in the current version. Essential local storage is used for login state, language, age gate, consent, and app settings. First Rep will request any legally required permission before introducing tracking in a future version.

Account Deletion

You can request account deletion from Privacy & Account in the app. First Rep will remove the account and associated personal data unless retention is required by law, safety, fraud prevention, dispute resolution, or transaction-record obligations.

Retention and Security

First Rep keeps personal data only for as long as needed to provide the service, meet legal obligations, resolve disputes, prevent fraud, and enforce agreements. Reasonable technical and organizational safeguards are used to protect stored and transmitted data.

Contact

A verified privacy and support channel will be published on the Support page before launch. No public email address is currently authorized.