Privacy at Ratha.

Who operates Ratha

Ratha is a training app from Active Living Coach, the registered business name of a sole trader in New South Wales, Australia (ABN 83 234 439 874). “We” and “us” mean the business operating Ratha. Coaching is a separate service; the app doesn't give a coach access to your training records.

Data on your device

Ratha stores app settings, training preferences, exercise filters, exercises, workouts and plans on your device. Logged information includes sets, weights, reps, durations, distances, effort ratings, notes and progress records. Planning and automatic progression run on your device.

We don't upload or sync this training database. The app doesn't access your precise location or health-platform records. Notes and preferences can still reveal personal or health information, so take care when sharing them.

Your device's backup service may copy app data to cloud storage or another device. Check your device's backup settings to control those copies.

Accounts and subscriptions

An account uses your email address and verification codes to manage Plus access. We use account, purchase and security information to sign you in, verify subscriptions, restore access, prevent misuse and answer support requests.

• Supabase hosts account and access records, including your email address, account ID, sign-in and session records, subscription status and security events.
• Brevo sends sign-in codes and account messages, and passes website form messages to our support mailbox. It handles your email address, message content, delivery results and email opens and link clicks.
• RevenueCat verifies purchases and manages Plus access using a random Ratha account ID. It processes purchase history, store receipts or purchase tokens, products, prices, currencies, renewal and trial status, and related app and device information, which can include device identifiers (not advertising identifiers), connection times and country information. It also provides purchase analytics.
• Apple or Google handles payment through your store account. We receive purchase and access information, not your full payment-card details.

We don't send training records to these services or your email address to RevenueCat. The random ID isn't anonymous: we can link it to your Ratha account. Account and purchase requests can also expose your IP address, device details and request time to the services handling them.

These providers run their own services and handle information under their own privacy policies. To provide, secure and improve those services, they may collect technical information beyond what we list here, such as device identifiers, app and operating-system versions and usage of their service. We choose providers that fit Ratha's purposes and limit what we send them, but we don't control how they run their services. Their linked policies describe what they collect and how long they keep it.

We don't collect your training activity for analytics. We don't use advertising identifiers or track you for advertising.

Account emails may contain a small tracking image and links rewritten by Brevo to record opens and clicks. These records can include your email address, IP address, the time of the event and the link clicked. Brevo makes these records available in email reports and logs to help monitor email delivery and use. We use account emails for sign-in and account administration, not marketing, and sending them doesn't subscribe you to a marketing list.

Subscription services may continue processing purchase and service information after you sign out. Signing out isn't an account-deletion request.

Exercise videos and other links

When a YouTube preview appears, the app can load its thumbnail before you tap play. Google receives the request, including your IP address, the requested image and device or browser headers. Use the app offline or avoid opening video previews to avoid that request.

Tapping a guide opens YouTube, Vimeo or another site in your browser or another app. The provider may use cookies or connect the visit to an account you're signed into. Its privacy policy applies: see Google's policy and Vimeo's policy. Ratha doesn't receive your watch history or playback results.

Notifications

Ratha asks for notification permission for rest alerts and trial reminders. These are scheduled on your device, without a remote push service. You can decline or turn off permission in device settings and still use the app.

Export and import

You can export logged set history, including dates, exercises, results and notes, as a CSV file. General history CSV is for spreadsheets; Ratha compatible CSV can be imported into Ratha. Neither is a full app backup.

On mobile, Ratha creates a file in temporary app storage and opens your device's sharing options. In a browser, it downloads the file. You choose where it goes. A service or recipient you choose then handles its copy.

Imports are read on your device and aren't uploaded to us. A compatible CSV adds missing history without replacing existing data. A custom-plan JSON import creates a draft for review. Choosing a file from a cloud service can bring a copy into app storage.

This website

Cloudflare hosts and protects the website. Visiting a page sends your IP address, requested page, browser headers and request time to Cloudflare. This includes legal pages opened from the app.

We don't use advertising or visitor-analytics scripts. Cloudflare processes request information for delivery, security and fault diagnosis, and may use essential security cookies when its protections need them.

If you send a message or a scholarship request through a form on this website, we receive what you enter: your email address and, for the support form, your topic, your message and the optional phone and app version. The website passes it to our support mailbox through our email provider. We use it only to reply, to add a scholarship or to look into a problem. A hidden field and a timing check help us spot automated spam, and a limit on repeated submissions from one network address uses your IP address briefly. Cloudflare Turnstile checks that a person sends each form: Cloudflare processes your IP address and information about your browser, such as its user agent, to tell people from automated scripts. We don't use a tracking service for this.

If you delete your account on this website, the email address and codes you enter and a random request key pass through the website to our account service, which emails the codes and performs the deletion. The website keeps none of it. A limit on repeated requests from one network address uses your IP address briefly here too.

Support and sharing

We don't sell or rent personal information or give your training history to advertisers or data brokers.

If you email us or use a website form, we and our email provider receive the details you send, such as your email address, sender name, message and attachments. Send only what's needed to explain the issue. Opening an email link creates a draft; you choose whether to send it.

We limit access to people and providers who need it for account administration, support, security or legal obligations. We may disclose information if the law requires it. The app doesn't give a coach access to your training database.

Retention and deletion

Account deletion and training deletion are separate. We keep account and access records while your account exists. Request account deletion in Settings or on the account deletion page if you don't have the app. We'll verify the request with codes sent to your email, disable the account when it's accepted and complete deletion of active account and associated customer records with our providers within 30 days.

We keep Ratha-controlled operational logs for 14 days and minimal evidence of deletion requests and completion for 90 days after a deletion is complete. Providers may retain separate backup, security or legally required records under their own retention rules; the 30-day account-deletion period isn't a promise to erase every provider record. Store purchase records can remain in your Apple or Google account.

Deleting your account doesn't cancel your subscription or erase local training. Cancel renewal through the store that bills you. You can keep using saved training and free tools after account deletion. If Ratha stays installed, our subscription provider may start a new record for the app on that device under a new random ID that isn't linked to your email or the deleted account. That record can receive app and device information and the device's store receipts. To stop this, cancel renewal and uninstall Ratha.

Delete workout history permanently removes past training. It deletes completed, missed and skipped workouts, their sets and notes, and the automatic-progression records based on them. It can't be undone. Plans, open workouts, system exercises and other settings stay. Custom exercises stay unless you choose to include them, and those used by a plan or open workout always stay. An included custom exercise's one-rep maxes and preferences go with it. Exported files and device backups don't change, and a backup may restore older data. To remove all local storage, use your device's app-data controls or uninstall Ratha.

Imported and exported files can remain in the app cache until cleared. Copies you save or send remain with you or the recipient. We keep support correspondence while needed to resolve your request or meet legal obligations. Website and provider log retention depends on the service and its configuration.

Security

We use encrypted connections for account services and limit access to account records. Keep your device updated, use a screen lock and don't share sign-in codes. No system can guarantee complete security.

CSV exports are plain text, without password protection or file encryption. Anyone with a copy may be able to read it. Email, device backups and files you share also depend on the protections of the services you choose.

International processing

Our primary Supabase account database is in Sydney, Australia. That doesn't keep all processing in Australia: RevenueCat stores customer data in the United States, and Brevo's database hosting includes France, Germany and Belgium. Cloudflare operates a global network.

Provider support, security services, app stores, video services and your chosen email or backup providers may process information in other countries. Their privacy and data-processing information explains their arrangements. Contact us for more detail about the services we use.

Your choices and rights

You can edit training records, export set history, manage notifications and choose whether to create an account, open external links or share files.

Blocking remote images in your email app may limit open tracking. It doesn't prevent tracking when you click a tracked link.

Email us to request access to, correction of or deletion of personal information we hold. We'll explain any legal reason we need to retain it. We can't retrieve training held only on your device or delete independent copies held by recipients or services you chose. Account deletion, subscription cancellation and local data removal have different effects, as explained above.

Children

Ratha is intended for people aged 16 and over. If you believe someone under 16 has sent us personal information, please contact us.

Changes to this policy

We'll update this policy when our data handling changes. The date at the top identifies the version. We'll explain material changes in the app or on the website before they take effect where practical.