Last updated 22 October 2026
Muscle Memory is made by me, Ruaridh Bell, a sole trader based in Scotland. I am the data controller for the personal data described below. The short version: I collect what the app needs to log your training and show it to the people you choose, I don’t sell anything to anyone, and there are no ad networks or third-party trackers in the app.
Muscle Memory uses Sign in with Apple, and it’s the only way to sign in. Apple gives me a unique identifier for your account along with your name and email address. If you choose Hide My Email, that address is one of Apple’s private relay addresses and I never see your real one. Sign-in is handled by Clerk, which stores that identity and keeps you signed in.
When you set up your account you choose a username, and can add a display name, a bio, a profile photo and your date of birth. Your username, display name, bio and photo are visible to other people using the app. Your date of birth is used only to estimate your maximum heart rate and is never shown to anyone.
Everything you log is stored on my server so it’s on every device you sign in on and your stats can be calculated: exercises, sets, weights, reps, effort ratings, notes, workout photos, the gym name if you type one, and the privacy setting you chose. Your body weight at the time of a workout is saved with it so training volume can be worked out, and any measurements you log are stored with your account.
The app never asks for your location. A gym name is only ever text you type in yourself.
Every workout has its own privacy setting: public, followers only, or only you. You pick a default in Settings and can change any workout afterwards. You can also make your whole account private, so that people have to ask to follow you and nothing is visible until you approve them. Likes and comments are visible to anyone who can see the workout they’re on. If you block someone, neither of you can see the other’s profile or workouts.
Health access is optional. The app offers it during setup and in Settings, and nothing is read or written until you allow it.
Data from Apple Health is only used to provide these features. It is never used for advertising or marketing, never sold, and never shared with third parties.
The Muscle Memory server runs on Railway. Your data lives in a Neon Postgres database, workout and profile photos are stored in Cloudflare R2, and a short-lived cache speeds up the feed and stats. Photos on private and followers-only workouts are served through links that expire, so they can’t be found by guessing an address. The server keeps short-lived logs that include your IP address, used to enforce rate limits and spot abuse. They are not used to build a profile of you.
If you allow notifications, your device’s push token is stored on my server so it can tell you about new followers, follow requests, likes, comments and streak reminders through Apple’s push service. Rest-timer alerts are scheduled on your phone and never touch my server.
Muscle Memory Pro and streak repairs are bought through the App Store. Apple takes the payment — I never see your card details, billing address or Apple ID password. Purchases are managed with RevenueCat, which tells the app and my server whether your account has Pro.
I use PostHog to see which features get used and to catch errors, configured to store its data on PostHog’s EU servers. Events are linked to your account identifier so I can tell how many people a problem affects, and record things like which screens were opened and which errors occurred. They never include the contents of your workouts. There is no advertising SDK in the app, no IDFA, no cross-app or cross-site tracking, and nothing is shared with data brokers.
If you send feedback or a feature request, it’s handled by UserJot. Your post, and the name and account identifier attached to it, are stored on their service so I can reply and other people can vote on ideas. If you report a user, workout or comment, the report and what it points to are stored so I can review it.
Settings → Delete account removes your sign-in identity, your profile, every workout, comment and like, and all your photos. This is permanent and immediate. Workouts already written to Apple Health stay there until you remove them in the Health app. If you have an active subscription, cancel it through the App Store before deleting your account — deleting the account does not stop the billing.
Muscle Memory isn’t aimed at children and I don’t knowingly collect data from anyone under 13. If you think a child has given me personal data, email me and I’ll delete it.
Under UK GDPR you can ask for a copy of your data, ask me to correct or delete it, object to how it’s used, or ask for it in a portable format. Email support@getmusclememory.app and I’ll respond within one month. If you’re unhappy with how I’ve handled it, you can complain to the Information Commissioner’s Office at ico.org.uk.
If this policy changes I’ll update the date at the top, and for anything significant I’ll say so in the app.
