Privacy Policy

01 Information We Collect

1.1 Data You Give Us

Sign-in is optional; our apps work fully without an account.

Sign in with Apple: where it is offered, Apple provides your name and email address once, when you authorize the app, along with an Apple user identifier, a stable, opaque ID used to associate your data with your account across your own devices. If you choose Hide My Email, we receive an Apple relay address instead of your real one. We never receive or store your Apple ID password.

TitanLog for iPhone and iPad offers Sign in with Apple, Sign in with Google, or an email and password. All three run through Firebase Authentication, a Google service. Firebase keeps your account record: your email address, a user ID, the sign-in method you used, sign-in dates, and, for email accounts, your password in hashed form. We never see your password. Firebase also logs the IP address of each sign-in for a few weeks.

TitanLog for Android offers Sign in with Google through Android's Credential Manager. Your name, email address and profile photo link are stored only on your phone, to show who is signed in. They are not sent to us, except your email address if you turn on the monthly report (1.6).

1.2 Data the App Creates

Content you create inside the app — such as workout logs, notes, exercises, sets, weights, templates, personal records, or other entries — along with in-app preferences and settings you configure.

1.3 Purchase Information

Where in-app purchases are offered, Apple's StoreKit (on iPhone and iPad) or Google Play Billing (on Android) processes the transaction and reports entitlement status to the app. We do not receive your payment method or billing address.

1.4 Data We Do Not Collect

1.5 Health App Access — TitanLog

Health Connect (Android) and Apple Health (iPhone). These are off unless you turn them on in TitanLog. When you turn on saving workouts, TitanLog writes each finished workout to Health Connect or Apple Health as strength training, with its start and end time and estimated active calories (on Android also the workout's name). When you turn on body-weight import, TitanLog reads your most recent weight and uses it as your body weight in the app. TitanLog reads no other health data. Health data stays on your phone, and your imported body weight is kept with your other app data in your private iCloud or Android backup if those are on (Section 02). TitanLog never sends health data to us or anyone else, never uses it for advertising, and never sells it. You can turn either option off in TitanLog, or revoke access in Health Connect or the Health app, at any time.

1.6 Monthly Report Email — TitanLog (Optional)

TitanLog can email you a report on your training once a month, with an evaluation written by AI. It is off until you turn it on in the app (Profile tab → Monthly report), agree to the summary of what is sent, and are signed in. It is included with Full Access on iPhone and Android.

While it is on, early each month TitanLog sends our report server a summary of the previous month:

• Number of workouts, active days, working sets, total volume and training time, for that month and the month before.
• Weekly consistency (average sessions per week and your week streak) and working sets per muscle group.
• Up to eight top exercises by name, with their best set, estimated one-rep max and trend.
• Personal records set that month.
• Your app language, weight unit, platform and app version.

To know where to send the report, we also receive your account's verified email address and the identifier of the account you signed in with (Firebase on iPhone, Google on Android).

We use this data only to write and send your report. Anthropic's Claude reads the summary to write the evaluation, and Resend delivers the email. Neither may use it for any other purpose, and Anthropic does not use it to train its models. See Sections 05 and 06 for who handles it and how to delete it.

1.7 Crash Reports — TitanLog for iPhone and iPad

TitanLog for iPhone and iPad sends a crash report to Firebase Crashlytics, a Google service, when the app crashes. This is on by default, and you can turn it off at any time on the Profile tab under Diagnostics → Share crash diagnostics.

A crash report contains the technical details of the crash (which code was running), your device model, iOS version, app version, and random installation identifiers that Crashlytics creates for this copy of the app. It contains no workout data, and we do not attach your name, email or account to it. Firebase keeps crash reports and their identifiers for 90 days. TitanLog for Android does not send crash reports.

02 Where Your Data Lives

• On your device — app content is stored locally inside the app's private storage (SwiftData on iPhone and iPad, a private database on Android).
• In your private iCloud database — on iPhone and iPad, if iCloud sync is on and you are signed into iCloud, the app mirrors the same data to your private CloudKit database. We cannot read it. Apple's iCloud terms govern that storage.
• In your Android backup — on Android, if your phone's backup is on, Android includes the app's workout data and settings in your device backup with Google, as it does for other apps. We cannot read it. Your signed-in account is excluded from that backup.
• In Firebase Authentication — if you create a TitanLog account on iPhone or iPad, the account record described in 1.1 is kept by Firebase. It holds no workout data.
• On our report server, only if you turn on TitanLog's monthly report — your email address, account identifier, the monthly summaries described in 1.6 and the reports written from them are stored in a database we run on Railway, in the United States.
• Nowhere else — apart from the monthly report, we operate no servers that store your app data, and it does not pass through Yost Group infrastructure.

03 How We Use the Information

• To run the app's features and sync data across your devices via iCloud.
• To validate in-app purchases and unlock paid features on devices you sign into.
• To write and email your TitanLog monthly report, if you turn it on.
• To find and fix crashes in TitanLog for iPhone and iPad, from crash reports (unless you turn them off).
• To respond to support requests you initiate by contacting us.

We do not use any data for advertising, profiling, sale, or sharing with third parties.

04 Tracking

Our apps do not track you across apps or websites owned by other companies, as Apple defines "tracking" under its App Tracking Transparency framework. We do not request the ATT permission.

05 Sharing

We do not sell, rent, lease, or share your personal information. No mobile information will be shared or sold to third parties or affiliates for marketing or promotional purposes (see 10.5). The only third parties that touch any data are:

• Apple — provides Sign in with Apple, iCloud, and StoreKit. Their handling is governed by Apple's privacy policy.
• Google — for TitanLog: Firebase Authentication runs sign-in on iPhone and iPad; Firebase Crashlytics receives crash reports (1.7); Google Sign-In and Google Play Billing run sign-in and purchases on Android. Their handling is governed by Google's privacy policy.
• GitHub — TitanLog for Android streams exercise demo animations from our website, which GitHub Pages hosts. As with any website, GitHub sees the request and your IP address. No account or workout data is sent.
• TitanLog monthly report only — if you turn it on: Railway hosts our report server and its database; Anthropic (Claude) receives the monthly summary to write the evaluation; Resend receives your email address and the finished report to deliver it. Each acts as our service provider and may use the data only to provide that service.
• Legal requirement — we would disclose information only if compelled by a valid legal process directed at us. The only app data we hold is TitanLog monthly report data for users who turned it on.

06 Data Retention & Deletion

• Local data: removed when you delete the app or use any "Reset App Data" option inside the app.
• iCloud data: removed when you delete the app from iCloud — Settings → Apple ID → iCloud → Manage Account Storage → [App Name] → Delete Data.
• Sign in with Apple: revoke access in Settings → Apple ID → Sign In with Apple → [App Name] → Stop Using Apple ID.
• TitanLog account (iPhone and iPad): Profile tab → Account → Delete account deletes your Firebase account. Firebase removes it from its backups within 180 days. On Android, signing out removes the account details from your phone.
• Crash reports: Firebase deletes them after 90 days. Turning off Share crash diagnostics stops new ones.
• Purchase records: Apple retains transaction records per its own policies; we cannot delete them.
• TitanLog monthly report: turning it off on the Profile tab, signing out, or deleting your account deletes your email address, summaries and reports from our server. The unsubscribe link in each report stops the emails; to also delete the stored data, turn the report off in the app or email us.

You may also email us to request deletion of any data we hold (typically only your name and email if you used Sign in with Apple, plus monthly report data if you turned it on). We will delete it within 30 days.

07 Children's Privacy

Our apps are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently received such information, contact us and we will delete it promptly.

08 Your Rights (GDPR / CCPA)

If you reside in the EEA, UK, or California, you have the right to:

• Access the personal information we hold about you.
• Correct or delete it.
• Object to or restrict processing.
• Receive a copy in a portable format.
• (CCPA) Opt out of "sale" or "sharing" of your data — we do neither.

To exercise any of these rights, email us at the address below. We do not discriminate against users who exercise these rights.

09 Security

Data on your device is protected by your phone's built-in data protection and your device passcode. Data in iCloud is encrypted in transit and at rest by Apple, and Firebase protects account records and crash reports under Google's security practices. Apart from the TitanLog monthly report, we operate no Yost Group servers that store your app data. The report server accepts connections only over HTTPS, stores each device's access key only as a one-way hash, and holds no passwords, notes, body weight or health data.

10 Our Website

This section covers www.yost.group. The website has no accounts or logins and sets no cookies of its own.

10.1 Analytics

We use Google Analytics to see how visitors use the website: which pages are viewed, how visitors arrived, and general device, browser, and approximate location (country or city) information. Google Analytics sets cookies in your browser to tell visits apart and collects this information on Google's servers. We use these reports only to understand and improve the website. You can block analytics with your browser's cookie or tracking settings or with Google's Analytics opt-out add-on.

10.2 Forms, Booking, and Email

• Waitlist and intake forms run on Google Forms. We receive what you enter, such as your name, email address, and, for coaching intake, the background you choose to share, and use it only to contact you and prepare for your coaching.
• Booking a call runs on Google Calendar's appointment scheduling. We receive the name, email address, and any notes you provide, and use them only to hold and prepare for the call.
• Email you send us is used only to respond to you and provide the services you ask for.

Coaching and consulting clients may share more detailed financial or business information during an engagement. We keep it confidential, use it only to serve you, and do not sell or share it except as required by law.

10.3 Hosting

The website is hosted on GitHub Pages. Like any web host, GitHub receives your IP address and browser details when you load a page, and may keep them in its server logs for security purposes.

10.4 Retention and Your Choices

Google Analytics data is kept under Google's retention settings for our property and then deleted. Form submissions, booking details, and email are kept for as long as needed to serve you and meet our business and legal obligations. You can ask us to access, correct, or delete what we hold at any time, and the rights in Section 8 apply to website data too.

10.5 Text Messages (SMS)

If you give us your mobile number and agree to receive text messages from Yost Group LLC, including Citadel Money account notifications you opt in to inside the Citadel Money app, we use your number only to send the messages you agreed to and to respond to you. Message frequency varies, and message and data rates may apply. Reply STOP to stop receiving messages or HELP for help, or email info@yost.group. Our Terms of Use describe the text messaging program in full.

No mobile information will be shared or sold with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

11 Changes to This Policy

We will update this page when we make material changes and revise the "Last Updated" date above. Significant changes will be surfaced inside the affected app on its next launch.