RAW — Privacy Policy

Version 1 · 15 September 2026

This is the policy for the current version of RAW. It is short because RAW currently does very little with your data, and it says only what is true today. It will be replaced by a longer one when RAW gains accounts and sync, and every change will be versioned and dated.

In one sentence

RAW keeps your training log on your phone, in an encrypted database, and sends it nowhere.

What RAW stores, and where

Everything you enter — workouts, exercises, settings — is written to a database on your device. That database is encrypted with SQLCipher (AES-256). The key is generated on your device and kept in the iOS Keychain or the Android Keystore. It never leaves the device, and neither does the database.

The database is excluded from device backups, both from iCloud and Google Drive backups and from device-to-device transfer. If you move to a new phone, your log does not travel with it.

What RAW sends

Nothing. This version has no account, no sign-in and no synchronisation. It does not contact any server of ours, because we do not run one yet.

Analytics, crash reports and advertising

There are none. RAW contains no analytics SDK, no crash reporter and no advertising SDK. It does not track you across apps or websites, and it does not use an advertising identifier.

When RAW later adds crash reporting and analytics, they will be off by default and will only be switched on if you explicitly consent, per consent type, and you will be able to withdraw that consent at any time.

Health data

Strength training data — and the body measurements and heart rate that RAW will record in future versions — are special category data under Article 9 GDPR. That is why the database is encrypted from the first version and excluded from backups, before there is anything in it worth protecting.

RAW does not read from or write to Apple Health or Health Connect in this version.

Permissions

This version requests no runtime permissions.

Minimum age

RAW is for people aged 16 or over.

Your rights

Because RAW does not send your data anywhere, there is nothing for us to access, export or erase on your behalf: deleting the app deletes the database with it. When RAW gains accounts, this section will describe how to exercise your rights under Articles 15–22 GDPR, including account deletion.

Who is responsible, and how to reach us

RAW is developed by Randy Esperben (Spain). For any question about this policy, write to privacy@getraw.fit.

Changes

Each version of this policy is dated and kept. If a change affects how your data is treated, it will be announced in the app before it takes effect.