Privacy Policy
Effective date: August 31, 2026
Privacy Summary
This summary gives you the main idea of how Specular handles your information. Your workout and training data is primarily kept on your device, while HealthKit data remains under Apple’s controls. Specular does not use analytics or advertising SDKs, sell your information, or use health data for advertising.
Some limited information is shared with services such as Apple, RevenueCat, and Cloudflare when needed for features like subscriptions, maps, website operation, or workout sharing. When you create a share link, the workout data and display name included in the shared workout are sent to Specular’s sharing service so the link can retrieve them. The full policy explains what information is involved, how it is used and retained, your privacy rights, and how you can delete or request information associated with your use of Specular.
This Privacy Policy explains how Specular: Workout Tracker ("the app," "we," "us," "our") collects, uses, and protects information when you use it. Specular is developed and operated by Carlos Eduardo Mauleón Castañón, an individual based in México, who is responsible for the processing described below.
Scope
This Policy applies to the Specular iOS app and to specularlabs.app. It does not apply to third-party services linked from the app or this site, which are governed by their own privacy policies.
Data we access and why
| Data | Why we access it | Where it goes |
|---|---|---|
| Workouts, sessions, exercises, and app preferences | To run the app's core features: tracking and displaying your training | Stored only on your device |
| A generated support identifier | To identify your Specular installation for subscription and support-related purposes | Stored in your device's Keychain and used as the pseudonymous app user identifier for RevenueCat |
| Health data (workouts, heart rate, energy burned, distance, routes, effort, heart rate variability, sleep, height, weight, date of birth, sex) | To read your existing health and fitness history and display it in the app | Read from Apple Health, stored locally on your device |
| Workouts, active energy, and effort data generated by the app | To save your Specular sessions back into your Health data | Written to Apple Health |
| Subscription/purchase status and a pseudonymous app user identifier | To verify your subscription and unlock Pro features | Sent to RevenueCat and Apple's App Store purchase systems |
| Location and workout route coordinates | To record routes during supported workout sessions and render route maps in relevant workout and story views | Route data is stored locally; route coordinates may be sent to Apple MapKit when a map image is requested |
| Workout data you choose to export, and story images you create | Only when you actively export or save them | Sent only to the destination you pick (Files, Messages, etc.) |
| Workout data and display name included in a workout share link | To create a shareable link that allows the shared workout to be retrieved | Sent to and stored by Specular’s Cloudflare-hosted sharing service; anyone who has the link can access the shared workout |
| Photos permission | To save a workout story image that you choose to save | Used only to add the generated story image to your Photos library; Specular does not access your existing photo library for this feature |
| Diagnostic details you choose to include in a support email | Only if you contact support | Sent only to our support address, via your own Mail app |
We do not run analytics or advertising SDKs. No data described above is used for advertising, sold to data brokers, or shared with anyone for purposes unrelated to running the app.
Legal basis for processing
Where data protection law requires a legal basis for processing (for example, under the GDPR), we rely on:
- Performance of a contract — to provide the features you use directly, such as storing your workouts or verifying your subscription.
- Consent — for Health data access, which iOS requires you to explicitly grant before Specular can read or write it, and which you can withdraw through Apple's Health privacy controls.
- Legitimate interests — for basic diagnostic information you choose to send us when contacting support.
We do not rely on legitimate interests for any special category data, including health data. That access always depends on your explicit, revocable iOS permission.
Health data specifically
Health data accessed through HealthKit is used only to power Specular's own fitness-tracking features, never for advertising, marketing, or other data-mining purposes, and never sold or disclosed to advertising platforms, data brokers, or resellers. HealthKit permissions are controlled by Apple. You can review or withdraw Specular's access through Apple's Health privacy controls. If access is withdrawn or unavailable, Specular will no longer be able to read or write the affected HealthKit data unless you grant the relevant permission again. Revoking access does not delete records already stored in Apple Health.
Location and route data
Specular requests location access only when needed for supported workout features. Location may be used while you are recording a workout to create a route associated with that session, and route data may be used to render maps in workout and Story Composer views. Specular does not request or use background location access under its current implementation.
The type of location permission requested may change if future features require a different level of access. If an app update introduces a change to the location permission required by Specular, we will notify users through the app or the applicable update information before or when that change takes effect.
How we share information
We do not sell your information, and we do not use it for advertising. The outside services involved in operating specific features are:
- RevenueCat, Inc. — subscription and entitlement management. Specular uses a pseudonymous app user identifier and subscription or purchase information for this purpose. RevenueCat does not receive your workout, HealthKit, or route data from Specular.
- Apple Inc. — App Store purchases and subscriptions, HealthKit, and MapKit. HealthKit remains under Apple's controls, and route coordinates may be processed by Apple when MapKit is used to render maps.
- Cloudflare, Inc. — hosting and delivery of the Specular website and the workout-sharing service. When you create a workout share link, Cloudflare’s service stores the workout data and display name included in that shared workout so the link can retrieve them. Cloudflare may also process technical request information, such as IP address and network or traffic information, as necessary to deliver and secure these services.
No other third party receives your data from Specular for the app's operation. These providers' own handling of information is governed by their respective privacy policies. RevenueCat Privacy Policy · Cloudflare Privacy Policy.
Workout sharing
Specular lets you create a shareable link for a workout. When you choose to create a share link, the workout data included in that share and your display name are uploaded to Specular’s Cloudflare-hosted sharing service and stored there so the link can retrieve the shared workout.
A shared workout can be accessed by anyone who has the link. You are responsible for deciding what you share and with whom. Specular does not make shared workouts publicly searchable. If you come across a shared workout that violates our Terms, you can report it to hello@specularlabs.app and we will review and remove it.
International data transfers
Some third-party providers used by Specular may process information in countries other than your country of residence, including the United States. This may apply to subscription-related information processed by RevenueCat, website traffic processed by Cloudflare, and services provided by Apple. Where applicable law requires safeguards for international transfers, the relevant provider is responsible for maintaining those safeguards under its applicable agreements and privacy practices.
Data retention and deletion
Specular's workout history, sessions, exercises, preferences, and related training information are stored locally on your device and remain there until you delete them. You can delete Specular's stored data from Profile → Data & Privacy → Manage Data → More Options → Delete All Data, or by deleting the app. This does not delete information stored separately by Apple Health, subscription information maintained by Apple or RevenueCat, or an already-created workout share stored by the sharing service.
Shared workouts are stored remotely by the sharing service and do not currently have an automatic expiration or a user-facing deletion control in Specular. The sharing service may also retain technical request information as described above.
The pseudonymous support identifier used for the RevenueCat subscription relationship is stored separately in the device Keychain. Workout shares are stored remotely by the sharing service and do not currently have an automatic expiration or a user-facing deletion control in Specular. If you want to request deletion of information held by Specular or associated with your RevenueCat subscription record, contact us using the details below. Requests involving information controlled by Apple, RevenueCat, Cloudflare, or another provider may need to be directed to that provider where applicable.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. These may include rights available under Mexican privacy law, the GDPR or UK data protection law, or the CCPA/CPRA where applicable.
Because most Specular workout and training data remains on your own device, you can exercise many rights directly through the app by using Profile → Data & Privacy → Manage Data → More Options → Delete All Data, or by managing HealthKit permissions through Apple's Health privacy controls. For information held by Specular or associated with your subscription identifier, you may contact us using the details below. We may need to verify your request and may be unable to fulfill requests concerning information controlled solely by Apple or another service provider.
For requests to access, correct, cancel, oppose, or delete personal data under applicable Mexican privacy law, you may contact us at the address below. We will process requests within the period required by applicable law and will explain any lawful reason a request cannot be fully completed.
California residents: we do not sell or share personal information for cross-context behavioral advertising.
Children's privacy
Specular is not directed at children and we do not knowingly collect data from children under 13, or the relevant minimum age where you live.
Security
Your workout and health data is stored locally on your device, protected by iOS's own security model. Your support identifier is stored in the device Keychain. Data sent to RevenueCat, Apple, or Cloudflare is transmitted over encrypted connections. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
Tracking
Specular does not use advertising or cross-app/cross-site tracking SDKs, and does not track you across other companies' apps or websites.
Changes to this policy
If we change what data Specular collects, how it is used, or materially change the practices described here, we'll update this page and change the "Last updated" date at the bottom of this policy. Where required by law, we will provide additional notice or obtain consent.
Contact us
Questions about this policy or your data: hello@specularlabs.app
Last updated: September 1, 2026