Privacy Policy
Effective date: October 29, 2026
Privacy Summary
This summary gives you the main idea of how Specular handles your information. Your workout and training data is kept on your device and, if you use iCloud, synced through your own private iCloud account, which Specular cannot access. HealthKit data remains under Apple’s controls and is not saved to iCloud by Specular. Siri, Shortcuts, and Spotlight can find your workouts through an index iOS keeps on your device. Specular does not use third-party analytics or advertising SDKs, sell your information, or use health data for advertising. If you use a workout program, the app sends anonymous program usage information, which you can turn off. If you installed Specular after tapping one of its Apple Ads ads, RevenueCat records which campaign led to the install; this uses no advertising identifier and does not track you across apps.
Some limited information is shared with services such as Apple, RevenueCat, and Cloudflare when needed for features like subscriptions, maps, website operation, or workout sharing. When you create a share link, the workout data and display name included in the shared workout are sent to Specular’s sharing service so the link can retrieve them. The full policy explains what information is involved, how it is used and retained, your privacy rights, and how you can delete or request information associated with your use of Specular.
This Privacy Policy explains how Specular: Workout Tracker ("the app," "we," "us," "our") collects, uses, and protects information when you use it. Specular is developed and operated by Carlos Eduardo Mauleón Castañón, an individual based in México, who is responsible for the processing described below.
Scope
This Policy applies to the Specular iOS app and to specularlabs.app. It does not apply to third-party services linked from the app or this site, which are governed by their own privacy policies.
Data we access and why
| Data | Why we access it | Where it goes |
|---|---|---|
| Workouts, sessions, exercises, programs, and app preferences | To run the app's core features: tracking and displaying your training | Stored on your device. If iCloud is on for Specular, also synced through your private iCloud database, which Specular cannot access (see iCloud sync below). With Specular on Apple Watch, the session in progress, the workouts you can start there and the times you usually train also travel directly between your iPhone and your Apple Watch, not through any server |
| A generated support identifier | To identify your Specular installation for subscription and support-related purposes | Stored in your device's Keychain and used as the pseudonymous app user identifier for RevenueCat |
| Health data (workouts, heart rate, energy burned, distance, routes, effort, heart rate variability, sleep, height, weight, date of birth, sex) | To read your existing health and fitness history and display it in the app, and to show your heart rate on Apple Watch during a session | Read from Apple Health and stored only on each device. Not saved to iCloud by Specular |
| Workouts and effort data from your sessions, the heart rate and energy Apple Watch measures during a session, and the route of a session recorded on Apple Watch | To save your Specular sessions back into your Health data | Written to Apple Health: on iPhone, or by Specular on Apple Watch when it records the session. Specular doesn't estimate energy; a session's energy is only what Apple Watch measured. A route is saved only when the session moved from where it started |
| Subscription/purchase status and a pseudonymous app user identifier | To verify your subscription and unlock Pro features | Sent to RevenueCat and Apple's App Store purchase systems |
| Apple Ads attribution: a token generated by Apple's AdServices framework, and the result Apple returns for it (whether the install came from one of Specular's Apple Ads campaigns and, if so, the campaign, ad group, and keyword) | To measure which of Specular's own Apple Ads campaigns lead to installs and subscriptions | Sent once per install to RevenueCat, which exchanges it with Apple and stores the result with your pseudonymous app user identifier and subscription information. No advertising identifier (IDFA) is used |
| Approximate location where a session starts, and workout route coordinates | To record where supported workout sessions take place and render route maps in relevant workout and story views | A session's start location is stored with the session, on your device and in your iCloud sync if it's on. When Specular on Apple Watch records a session, the Watch reads its location during the session: where it started goes to the session, and its route is saved to Apple Health. Routes read from Apple Health stay on the device. Coordinates may be sent to Apple MapKit when a map image is requested |
| Workout data you choose to export, backup files, and story images you create | When you actively export, back up, or save them, and once a day for automatic backups, which you can turn off | Sent only to the destination you pick (Files, Messages, etc.). Automatic backups stay on your device, in Specular's folder in the Files app (On My iPhone > Specular); the app keeps the last 7 days and one a week for the 4 weeks before, and they are deleted with the app. A backup file contains your Specular data; data read from Apple Health is not included, since it comes back from Apple Health |
| Names and details of your workouts, sessions, exercises, and programs (such as exercise names, muscles, set counts, durations, and dates) | To let you find and open them in Spotlight, and ask Siri or the Shortcuts app about them | Indexed by iOS on your device. Requests you make to Siri or Apple Intelligence are handled by Apple; Specular does not receive your voice or the text of your requests |
| Notification permission | To send one reminder the morning after a planned break ends | Scheduled on your device; nothing is sent to a server |
| Workout data and display name included in a workout share link | To create a shareable link that allows the shared workout to be retrieved | Sent to and stored by Specular’s Cloudflare-hosted sharing service; anyone who has the link can access the shared workout |
| Photos permission | To save a workout story image that you choose to save | Used only to add the generated story image to your Photos library; Specular does not access your existing photo library for this feature |
| Anonymous program usage: the program you start, the week and session number, how many of a session's sets were completed, whether a session was repeated or edited and what changed, whether weight suggestions were accepted, and when a program is left or finished. Each event includes a random install identifier, the app version, and whether you have Specular Pro | To improve the workout programs | Sent to Specular's Cloudflare-hosted service. It never includes your name, workouts outside programs, weights, notes, Health data, or location, and the install identifier is not linked to your support identifier or purchases. You can turn it off in Profile → Data & Privacy → Share anonymous data |
| Program catalog and program images | To show and download the available workout programs | Downloaded from Specular's Cloudflare-hosted service. The download itself sends no personal information beyond the technical request information described below |
| Diagnostic details you choose to include in a support email | Only if you contact support | Sent only to our support address, via your own Mail app |
We do not run third-party analytics or advertising SDKs. Anonymous program usage is received by Specular's own service, as described above. Apple Ads attribution is used only to measure Specular's own Apple Ads campaigns. No data described above is used to show you ads, sold to data brokers, or shared with anyone for purposes unrelated to running the app.
Legal basis for processing
Where data protection law requires a legal basis for processing (for example, under the GDPR), we rely on:
- Performance of a contract — to provide the features you use directly, such as storing your workouts or verifying your subscription.
- Consent — for Health data access, which iOS requires you to explicitly grant before Specular can read or write it, and which you can withdraw through Apple's Health privacy controls.
- Legitimate interests — for basic diagnostic information you choose to send us when contacting support, for anonymous program usage, which is used only to improve the programs and which you can turn off at any time, and for Apple Ads attribution, which is used only to measure Specular's own ad campaigns.
We do not rely on legitimate interests for any special category data, including health data. That access always depends on your explicit, revocable iOS permission.
Health data specifically
Health data accessed through HealthKit is used only to power Specular's own fitness-tracking features, never for advertising, marketing, or other data-mining purposes, and never sold or disclosed to advertising platforms, data brokers, or resellers. HealthKit permissions are controlled by Apple. You can review or withdraw Specular's access through Apple's Health privacy controls. Specular does not save data it reads from Apple Health to iCloud; on each of your devices, it reads that data from Apple Health. If access is withdrawn or unavailable, Specular will no longer be able to read or write the affected HealthKit data unless you grant the relevant permission again. Revoking access does not delete records already stored in Apple Health.
Location and route data
Specular requests location access only when needed for supported workout features. Location may be used while you are recording a workout to create a route associated with that session, and route data may be used to render maps in workout and Story Composer views. On Apple Watch, Specular reads location only while it records a session's workout. Specular does not request or use background location access under its current implementation.
The type of location permission requested may change if future features require a different level of access. If an app update introduces a change to the location permission required by Specular, we will notify users through the app or the applicable update information before or when that change takes effect.
iCloud sync
Specular uses Apple's iCloud (CloudKit) to keep your workouts, session history, programs, and settings in sync across devices signed in to the same Apple Account, and to bring them back when you reinstall the app. This data is stored in your private iCloud database, which only your Apple Account can access; Specular, its developer, and its service providers cannot read it. Data Specular reads from Apple Health is not included, nor is the body model Specular takes from the sex in Apple Health, which stays on each device; a body model you pick in Profile syncs with your settings. iCloud storage counts toward your iCloud plan and is governed by Apple's terms and privacy policy.
Specular also stores one setting in iCloud key-value storage that tells a new installation your account already holds Specular data, so it waits for that data instead of starting over. Apple uses silent push notifications to tell the app when synced changes are ready; they contain no Specular data.
Sync stays off if you're not signed in to iCloud or turn off iCloud for Specular in the Settings app. When iCloud is turned off, Specular keeps a copy of your data on the device so you can keep using it. You can check the sync status in Profile → Data & Privacy → iCloud Sync, and save everything to a file you keep from Profile → Data & Privacy → Manage Data → Back Up and Restore.
Siri, Shortcuts, and Spotlight
Specular makes your workouts, sessions, exercises, and programs available to Siri, the Shortcuts app, and Spotlight, so you can start a session, check your history, or open an item by asking Siri or searching. To do this, Specular gives iOS their names and details such as exercise names, muscles, set counts, durations, and dates, which iOS keeps in an index on your device. Specular also tells iOS when you start a workout or program session, so iOS can suggest it later. Heart rate, energy, and route data are not included.
When you ask Siri about Specular or about what's on screen, the request is handled by Apple under Apple's privacy policy, and Siri may continue a request on another of your devices. Specular receives only the action you asked for, such as which session to start. It does not receive your voice or the text of your requests. You can control what Siri learns from Specular and what appears in search in the Settings app, under Specular's Siri settings. Delete All Data removes Specular's items from the index.
How we share information
We do not sell your information, and we do not use it to show you ads. The outside services involved in operating specific features are:
- RevenueCat, Inc. — subscription and entitlement management. Specular uses a pseudonymous app user identifier and subscription or purchase information for this purpose. RevenueCat also receives the Apple Ads attribution token described above and reports the resulting campaign information with subscription data. RevenueCat does not receive your workout, HealthKit, or route data from Specular.
- Apple Inc. — App Store purchases and subscriptions, HealthKit (including workouts recorded on Apple Watch), the connection between your iPhone and Apple Watch, MapKit, iCloud sync, Siri, Shortcuts, Spotlight, notifications, and Apple Ads attribution (AdServices). HealthKit remains under Apple's controls, synced data stays in your private iCloud database, and route coordinates may be processed by Apple when MapKit is used to render maps.
- Cloudflare, Inc. — hosting and delivery of the Specular website, the workout-sharing service, the workout program catalog, and the service that receives anonymous program usage (stored with Cloudflare Workers Analytics Engine). When you create a workout share link, Cloudflare’s service stores the workout data and display name included in that shared workout so the link can retrieve them. Cloudflare may also process technical request information, such as IP address and network or traffic information, as necessary to deliver and secure these services.
No other third party receives your data from Specular for the app's operation. These providers' own handling of information is governed by their respective privacy policies. RevenueCat Privacy Policy · Cloudflare Privacy Policy.
Workout sharing
Specular lets you create a shareable link for a workout. When you choose to create a share link, the workout data included in that share and your display name are uploaded to Specular’s Cloudflare-hosted sharing service and stored there so the link can retrieve the shared workout.
A shared workout can be accessed by anyone who has the link. You are responsible for deciding what you share and with whom. Specular does not make shared workouts publicly searchable. If you come across a shared workout that violates our Terms, you can report it to hello@specularlabs.app and we will review and remove it.
International data transfers
Some third-party providers used by Specular may process information in countries other than your country of residence, including the United States. This may apply to subscription-related information processed by RevenueCat, website traffic processed by Cloudflare, and services provided by Apple, including iCloud. Where applicable law requires safeguards for international transfers, the relevant provider is responsible for maintaining those safeguards under its applicable agreements and privacy practices.
Data retention and deletion
Specular's workout history, sessions, exercises, programs, preferences, and related training information are stored on your device and, if iCloud sync is on, in your private iCloud database, and remain there until you delete them. Profile → Data & Privacy → Manage Data → More Options → Delete All Data deletes them on this device, in iCloud, and on your other devices that sync with the same Apple Account, and removes them from Spotlight and Siri. Deleting the app removes only this device's copy; the copy in iCloud stays and returns when you reinstall. You can also delete it from the iCloud storage settings in the Settings app. Backup files you saved, and automatic backups in Specular's folder in the Files app, are not deleted; you can delete them in Files. Delete All Data also does not delete information stored separately by Apple Health, subscription and Apple Ads attribution information maintained by Apple or RevenueCat, or an already-created workout share stored by the sharing service.
Anonymous program usage is kept for up to three months. It is not linked to you, so it can't be looked up or deleted per person; Delete All Data resets the install identifier, and turning off Share anonymous data stops it and clears events not yet sent.
Shared workouts are stored remotely by the sharing service and do not currently have an automatic expiration or a user-facing deletion control in Specular. The sharing service may also retain technical request information as described above.
The pseudonymous support identifier used for the RevenueCat subscription relationship is stored separately in the device Keychain. If you want to request deletion of information held by Specular or associated with your RevenueCat subscription record, contact us using the details below. Requests involving information controlled by Apple, RevenueCat, Cloudflare, or another provider may need to be directed to that provider where applicable.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. These may include rights available under Mexican privacy law, the GDPR or UK data protection law, or the CCPA/CPRA where applicable.
Because Specular workout and training data remains on your own devices and in your own iCloud account, you can exercise many rights directly through the app by using Profile → Data & Privacy → Manage Data → More Options → Delete All Data, or by managing HealthKit permissions through Apple's Health privacy controls. For information held by Specular or associated with your subscription identifier, you may contact us using the details below. We may need to verify your request and may be unable to fulfill requests concerning information controlled solely by Apple or another service provider.
For requests to access, correct, cancel, oppose, or delete personal data under applicable Mexican privacy law, you may contact us at the address below. We will process requests within the period required by applicable law and will explain any lawful reason a request cannot be fully completed.
California residents: we do not sell or share personal information for cross-context behavioral advertising.
Children's privacy
Specular is not directed at children and we do not knowingly collect data from children under 13, or the relevant minimum age where you live.
Security
Your workout and health data is stored on your device, protected by iOS's own security model. Data synced through iCloud is encrypted in transit and stored by Apple as described in Apple's iCloud security documentation. Your support identifier is stored in the device Keychain. Data sent to RevenueCat, Apple, or Cloudflare is transmitted over encrypted connections. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
Tracking
Specular does not use advertising or cross-app/cross-site tracking SDKs, and does not track you across other companies' apps or websites. Apple Ads attribution uses Apple's AdServices framework, which does not use an advertising identifier and does not require the App Tracking Transparency permission.
Changes to this policy
If we change what data Specular collects, how it is used, or materially change the practices described here, we'll update this page and change the "Last updated" date at the bottom of this policy. Where required by law, we will provide additional notice or obtain consent.
Contact us
Questions about this policy or your data: hello@specularlabs.app
Last updated: October 29, 2026