Reppo

Privacy Policy

Last updated 7 October 2026

Reppo is a training and nutrition app. This policy says what it collects, why, and what you can do about it. It is short because the app does little.

Who runs it

Reppo is run by an individual developer, based in India. Contact: thearyanbasantani@gmail.com.

What is collected

• Your email address and password, or, if you sign in with Google, your email address and name from your Google account, or, if you sign in with Apple, your name and the email address Apple shares (which can be a private relay address). Handled by our authentication provider. A password is hashed there; this app never sees or stores it in readable form, and with Google or Apple sign-in no password reaches us at all.
• Your name. Only the first word of it is ever shown to other people.
• What you told the app about your body — height, weight, age, sex, experience and calorie goal. Used to work out a daily calorie target and to size your sessions.
• What you log — the days you trained, the food you added, and your weight over time.
• Photographs you choose to post to Discover, and any caption you write with them.
• A profile picture, if you set one. It is shown next to your first name on Discover and when you race somebody.
• Which mode you use — men or women — and, on the women's side, the start and end days of your periods if you use the period tracker, and that you opened the menstrual-pain sessions. This is health information and is treated as such: it is stored against your account and shown to nobody else, not even the administrator.
• A notification token, only if you turn reminders on.

What is not collected

• No location, ever. Photographs are re-encoded before upload, which strips the GPS coordinates a phone camera writes into them.
• No contacts, no call logs, no microphone.
• No advertising identifier. There are no ads and no ad networks in this version. If that ever changes, this policy will be updated before the version that changes it is released.
• No analytics or tracking SDK of any kind.
• Nothing is sold or shared with anyone, for advertising or otherwise.

The camera

The camera is used in two places. Posting a photograph to Discover uses it once, when you press the button, and the photograph is uploaded only after you press Post. On the website, the rep counter watches the camera to count push-ups and squats — that video is processed on your own device, frame by frame, and never leaves it. No video is recorded, stored or uploaded by either.

Where it goes

Everything is stored with established cloud infrastructure providers, who host the database, the photograph storage and the app itself under their own privacy and security terms. Push notifications, on the website, go through the browser maker's push service — Google, Apple or Mozilla depending on your browser — and carry no content: the message is chosen on your own device after the notification arrives.

AI features

Two features use artificial intelligence: Scan food, which reads a photo of a meal, and Ask Coach, which answers questions about training, food and the app.

When you use them, the photo or your question is sent to an AI service run by our cloud infrastructure provider, together with the facts the coach needs to answer: your goals, targets, diet type and what you have logged today. That service processes it to produce an answer. It does not keep it, and it does not use it to train AI models.

Reppo does not keep photos taken for Scan food. Your conversation with the coach is stored only on your own device. Each account has a small daily limit on AI use.

AI can be wrong. Food scans are estimates that you check before anything is logged, and the coach is not medical advice. For pain, injury, illness, pregnancy or medication, speak to a qualified professional.

Payments

Reppo Premium is paid through Razorpay, a payment company regulated in India. You enter your card, UPI or bank details on Razorpay's own checkout, never in Reppo, and Reppo never sees or stores them. Razorpay tells us only that a payment succeeded, the amount, a payment reference and the email or phone you paid with, so that Premium can be switched on for your account. Razorpay handles your payment details under its own privacy policy. A promo code, if you use one, is recorded against your account so it cannot be used twice.

Direct messages

You can send private messages to anyone on Reppo. A message from somebody who is not your friend arrives as a request; they cannot see whether you have read it until you accept. You can block or report anyone from inside a conversation.

Messages are stored on our database so that they reach the other person and stay in your inbox. They are not end-to-end encrypted. To keep people safe, every message is checked automatically by an AI safety model run by our cloud provider (Cloudflare Workers AI), which does not keep the text or use it to train models. A message it considers harmful — for example threats, harassment, sexual content, hate or a scam — is flagged for review. Messages that are flagged or reported, and the conversation around them, can be read by the Reppo administrator in order to act on them. Nobody else can read your messages.

Unsending a message removes it for both people. Every message is deleted automatically 10 days after it was sent.

Who can see what

• Your food diary, your weight, your workouts, your numbers and your health information: only you. This is enforced by the database itself, not only by the app.
• Photographs you post to Discover, your profile picture and your first name: anyone signed in, depending on who you share each post with. Posts stay until you delete them.
• Your league and how many days you have trained: anyone signed in, on the leaderboard.
• Who liked a photograph: anyone who can see that photograph, as a first name, league and profile picture. Nobody can see a list of what a given person has liked.
• Friends: people you added and who accepted, or who you accepted. Friends see each other's friends-only photographs.
• Likes and comments on your own photographs are shown to you inside the app when you open it. Nothing about them is pushed to your phone's lock screen.
• The developer, as the administrator, can see the list of accounts — email, first name, join date, and counts of how much each has trained and posted — in order to answer reports and remove accounts that break the rules. The administrator cannot read anybody's food diary, weights or journey notes; the database returns counts and dates only. The administrator can read direct messages in order to review ones that were flagged or reported (see Direct messages above).
• Your direct messages: you and the person you are talking to.

How long it is kept

• Discover photographs are deleted automatically 7 days after they are posted. The administrator can choose to keep a post on the feed permanently. You can delete your own photograph sooner at any time.
• Journey progress photographs are deleted automatically after 7 days.
• Direct messages are deleted automatically 10 days after they are sent.
• Photos taken for Scan food are never kept.
• Your profile, workouts, score, food log and period days are kept until you delete your account, at which point they go with it.
• Payment records are kept for as long as Indian tax law requires, even after an account is deleted.

On Android, the phone's own backup copies only your workouts, score and basic settings — never photographs or messages.

Deleting everything

In the app: the three dots at the top right, then Delete my account. It removes the account and everything attached to it, and cannot be undone. Or ask from a browser at reppo.thearyanbasantani.workers.dev/delete-account.

Children

Reppo is not directed at children and is not intended for anyone under 13. If you believe a child has an account, write to thearyanbasantani@gmail.com and it will be removed.

Your rights

You can see, correct, export or delete your data. Ask at thearyanbasantani@gmail.com and it will be dealt with within 30 days.

Changes

If this policy changes in a way that matters, the app will say so the next time you open it. The date at the top always reflects the current version.