SetWell App Privacy
This Privacy Policy explains how Total Safety Solutions LLC (“we,” “us,” or “our”) handles information in connection with the Setwell mobile application (the “App”). We built Setwell to be local-first: your workout data lives on your device, and cloud features are optional. This policy describes what we collect, why, who we share it with, and the choices and rights you have.
The short version
- If you don’t create an account, your data never leaves your device. Setwell works fully offline with no sign-in.
- If you sign in to sync, we store your workout data and account email on our cloud provider so it can sync across your devices.
- We show you no ads, and we use no third-party analytics or tracking SDKs.
- We do not sell or share your personal information for advertising.
- You can access, export, or delete your data and account at any time.
1. Who we are (Data Controller)
The data controller responsible for your personal information is:
- Total Safety Solutions LLC
- 31441 Santa Margarita Pkwy Ste A-113
Rancho Santa Margarita, CA 92688
United States - Email: clay@cybersafetycop.com
- Website: www.cybersafetycop.com
2. Information we collect
2.1 Information you provide
- Account information. If you choose to sync, we collect the email address associated with your account. If you sign in with Apple or Google, we receive your email address and, where you permit it, your name, from that provider. If you use Sign in with Apple’s “Hide My Email” feature, we receive only Apple’s private relay address.
- Workout content you create. Exercises, workout templates, logged sessions, and individual sets — including values such as weight, reps, duration, calories, distance, dates and times, and any notes you add.
- App settings and preferences (for example, display and unit preferences) that you choose to sync.
- Communications. If you contact us for support, we receive your message and contact details.
2.2 Information collected automatically
Setwell does not include advertising SDKs, third-party analytics, or cross-app tracking. We do not build advertising profiles and we do not track you across other companies’ apps or websites.
When you use cloud sync, our infrastructure provider (see Section 4) processes limited technical data that is inherent to operating any internet service — such as your IP address and request timestamps — to authenticate requests, enforce rate limits, and protect against abuse. This is used for security and reliability, not advertising.
2.3 Information we do not collect
We do not collect your precise location, contacts, photos, microphone or camera data, health-kit records, or payment information.
3. How we use your information
- To provide the App’s core features and store the workout data you create.
- To sync your data across your devices when you are signed in.
- To authenticate you and keep your account secure.
- To maintain, troubleshoot, and improve the reliability of the service.
- To respond to your support requests.
- To comply with legal obligations and enforce our terms.
4. How your data is stored and who we share it with
We do not sell your personal information and we do not share it with third parties for their own marketing. We use the following service providers (“sub-processors”) strictly to operate the App:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase (database, authentication & hosting) | Stores your synced workout data and account, and manages sign-in | Account email, workout content, technical/security data |
| Apple — Sign in with Apple | Optional authentication | Authentication token, email (or private relay address), optional name |
| Google — Google Sign-In | Optional authentication | Authentication token, email, optional name |
These providers process data on our behalf under their own security and privacy commitments. We may also disclose information if required by law, to protect our rights or users’ safety, or in connection with a business transfer (e.g., a merger or acquisition), subject to this policy.
5. Legal bases for processing (EEA/UK users)
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR/UK GDPR:
- Performance of a contract — to provide the App and cloud sync you request.
- Legitimate interests — to keep the service secure and reliable and to prevent abuse.
- Consent — where required; you may withdraw consent at any time by signing out or deleting your account.
- Legal obligation — where we must retain or disclose data to comply with law.
6. Data retention
We retain your synced data for as long as your account exists. Data you keep only on your device is retained until you delete it or uninstall the App. When you delete your account, we delete or irreversibly anonymize your associated cloud data within 30 days, except where we must retain limited records to comply with legal obligations. Uninstalling the App removes the on-device copy of your data but does not by itself delete data already synced to the cloud — use the account-deletion option described below for that.
7. Your rights and choices
- Use the App without an account. You can decline to sign in; your data then stays on your device only.
- Access and portability. You can view your data in the App and request a copy.
- Correction. You can edit or correct your workout data directly in the App.
- Deletion. You can delete your account and associated cloud data from within the App (Account settings) or by contacting us at clay@cybersafetycop.com.
- Withdraw consent / sign out. Signing out stops syncing on that device.
Depending on where you live, you may also have the right to object to or restrict certain processing and to lodge a complaint with your local data protection authority. We will not discriminate against you for exercising your rights. To make a request, email clay@cybersafetycop.com; we may need to verify your identity before responding.
8. Data security
We protect your data using industry-standard measures, including encryption in transit (HTTPS/TLS) and access controls that restrict each account to its own data. No method of transmission or storage is 100% secure, but we work to protect your information and to promptly address any issues.
9. International data transfers
Our providers may process and store data in countries other than the one you live in, including the United States. Where required, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) for these transfers.
10. Children’s privacy
Setwell is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us at clay@cybersafetycop.com and we will delete it.
11. Your California privacy rights
If you are a California resident, the CCPA/CPRA gives you rights to know, access, delete, and correct your personal information, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information as those terms are defined under California law, and we do not use it for cross-context behavioral advertising. In the preceding 12 months, the categories of personal information we collected are “identifiers” (email) and “internet/electronic activity and user content” (your workout data and related technical data), as described in Section 2. To exercise your rights, contact clay@cybersafetycop.com.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the App. Your continued use of Setwell after an update means you accept the revised policy.
13. Contact us
If you have questions or requests regarding this policy or your data, contact us at:
- Total Safety Solutions LLC
- Email: clay@cybersafetycop.com
- 31441 Santa Margarita Pkwy Ste A-113
Rancho Santa Margarita, CA 92688
United States