Privacy Policy

Last updated: 2026-10-13

Draft text. It is being reviewed and may change.

This policy explains what the Triceptor app and this website do with your information. We wrote it in plain words. If something is unclear, write to us.

Who we are

The Triceptor app and website are run by Ahmed Magdi, who publishes under the name iMegz. There is no registered company yet. Contact: triceptor@imegz.dev

The short version

Your health notes stay on your phone. Injury and pain notes are never sent to our servers.
No ads. No third party advertising trackers.
We do not sell your data. We do not share it for marketing.
You can delete your account from inside the app, and ask us for a copy of your data.
You can start as a guest. No email is needed to try the app.
We never delete your account because you were inactive. Your data is deleted only when you ask us to delete your account.

Who can use Triceptor

If you are under 18, you use the app with the permission of a parent or guardian where the law of your country requires it.

When you create an account, you confirm that you read this policy and accept it.

What we collect

If you start as a guest

A random install ID. The app creates it on your phone. It is not your MAC address and it is not a hardware ID of your phone. It is a random value that means nothing outside the app.
Your training data: workouts, sets, body measurements, program choices, XP, streaks and achievements. In guest mode this stays on your phone. A guest has no sync.

If you use a feature that needs our servers, the app can create an anonymous guest account there. It holds a random account ID, the language and time zone the app sends, and the dates it was created and last used. It has no name, no email and no age. A guest account that has not been used for 90 days is deleted automatically, and you can delete it yourself at once. This is the only automatic deletion we do.

An account is optional. You need one to sync your data between devices. Sync is off until you turn it on. When you create an account we store:

Your email address and a sign in method. For email sign in we store a protected form of your password, never the password itself. For Google sign in we receive your Google account email and ID from Google.
Your real name, as given by Google or as you enter it when you sign up. It is optional for email sign up.
Your language and time zone.
The data you sync, when you turn sync on: workouts, sets, body weight, height, personal records, favorites and app settings. Points that follow from your workouts (XP, streaks, achievements and ranks) are kept with them.
Your subscription status, if you have Premium. See “Payments” below.

Injury and pain notes

Injury and pain notes you add in the app are stored on your phone only. They are not part of sync, and our servers reject them if an app sends them. They are never uploaded.

What we do not collect

No advertising ID.
No contacts, photos, microphone, camera or precise location.
No user uploaded images or videos. The app does not let you upload any.
No payment card details. Google handles payments.

Why we use your information

To run the app: sign in, sync, show your history, calculate XP, ranks, streaks and achievements.
To check that purchases are valid and to unlock Premium.
To keep the service safe and fair, for example to stop automated abuse.
To answer your messages.

We do not use your health notes for anything except showing them to you inside the app.

Payments

Premium is an optional subscription sold through Google Play Billing. Google collects and processes your payment. We receive the purchase token, the plan and the status (active, expired or cancelled) so we can unlock Premium. We never see your card number. Google’s own privacy policy applies to payments.

Who receives your information

We do not sell your data and we do not share it for marketing. We share it only in these cases:

Service providers that help us run the service, under our instructions. Today these are our hosting provider, Hetzner, and Google (sign in and Google Play Billing).
If the law requires it, or to protect the safety of users or the service.
If the business is sold or merged, with the same protections for your data.

Where your data is kept

Account data is stored on servers that we operate, located in Germany (Hetzner). Data moves between your phone and our servers over HTTPS.

How long we keep it

We keep your account data while your account exists. We never delete a registered account or its data automatically because you stopped using the app, however long that is. Data is deleted only when you ask us to delete your account. The only exception is the anonymous guest account described above.

When you ask to delete your account:

Your account goes into pending deletion for 30 days. You can cancel any time until day 30.
After day 30 we erase your training and body data: workouts, sets, personal records, body weight, height, settings, favorites and profile details.
Server backups rotate out within 30 days, so the erased data also leaves the backups within 30 days after the erase.

What we keep after deletion

We keep a minimal identity record: your real name, your email, your Google ID, the date your account was created, whether it was banned, your purchases and entitlements, and references to audit log entries. We keep it for security, fraud prevention and legal claims. We do not use it for marketing.

Purchase records are never deleted.

The account deletion page on this website explains the same steps.

Your choices and rights

Copy of your data. Write to us and we send you everything we hold about your account as a JSON file.
Delete. In the app, open Settings, then Delete account. You can also ask by email. See the account deletion page on this website.
Correct. You can change your profile details in the app.
Access and other rights. Depending on your country, you may have more rights, such as asking what we hold about you or objecting to some use. Write to us and we will answer. You can also complain to the data protection authority in your country.

Security

We use HTTPS for all traffic and limited access to our servers. No system is perfectly safe, so we cannot promise absolute security. Please keep your password private.

This website

This website is a set of static pages. It has no ads and no advertising trackers. The server may keep standard technical logs (such as IP address and page requested) for a short time for security and to fix errors.

Changes to this policy

If we change this policy in a way that matters, we will update the date at the top and tell you in the app. The latest version is always on this page.

Contact

triceptor@imegz.dev