Privacy Policy

Last updated 17 October 2026

This policy explains what RepUp collects, why, and what you can do about it. It is written to be read, not to be survived.

Who we are

RepUp is a training-partner app operating in Riyadh, Saudi Arabia. For any question about this policy or your data, write to repup.sa@gmail.com.

What we collect

• Your account: your email address, or your Apple or Google sign-in.
• Your profile: name, age, gender, photos, a short bio, your gym or club memberships, your level in each sport, your goals and the days you are usually free.
• Past injuries, if you choose to add them. This is health information and we treat it as sensitive. It is private by default, used only to match you sensibly, and shown to others only if you explicitly turn that on.
• Approximate location. We store your location rounded to roughly 500 metres. We never store or show your exact position. Other people only ever see venues and a rough distance.
• Your activity: who you passed or repped, your matches, messages, proposed sessions, and the ratings you give and receive.

Why we use it

• To find you training partners at a compatible level, at a venue you can reach, at a time you are free.
• To run matches, chat and session proposals.
• To keep people safe — moderation, reports, blocks, and removing accounts that repeatedly behave badly.
• To send you the notifications you have agreed to.

Gender and matching

Gym matching is restricted to the same gender and this is enforced on our servers, not merely in the app. Other sports allow mixed matching, and any member can turn on same-gender-only for every sport.

Automated processing

We use Google Gemini, running on our servers and never inside the app, to write the short line explaining why you and another member might train well together, to tag profile text, and to help moderate photos and bios. These systems support human decisions; they do not decide on their own to remove an account. No API key or model access ever ships inside the app.

Who else is involved

• Supabase — our database, accounts, file storage and server functions.
• Google — Gemini for the processing above, Maps and Places for venues, and Google sign-in if you use it.
• Apple — Sign in with Apple, and push notifications.
• Resend — sending sign-in emails.

Where your data is held

Our database and files are hosted in Frankfurt, Germany. That means your personal data is transferred outside Saudi Arabia. Saudi Arabia's Personal Data Protection Law places conditions on such transfers. We rely on your consent to this policy and on the contractual protections offered by our hosting provider, and we transfer only what the service needs to work. If you are not comfortable with this, please do not create an account.

Your rights

Under Saudi Arabia's Personal Data Protection Law you may ask us to show you the data we hold about you, correct it, or delete it, and you may withdraw consent.

• Delete your account from Settings in the app. This removes your profile, photos, matches and messages. We may keep a minimal record of a safety report where we are required to.
• For anything else, write to repup.sa@gmail.com.

How long we keep things

We keep your profile while your account exists. When you delete your account we remove your data, except for records tied to an open safety investigation, which we keep only as long as needed to resolve it.

Children

RepUp is for people aged 18 and over. We do not knowingly allow anyone younger. If you believe a minor has an account, tell us and we will remove it.

Changes

If we change this policy in a way that matters, we will tell you in the app before it takes effect.