Privacy Policy

Last updated: September 30, 2026

Firra ("Firra", "we", "us") makes the Firra workout tracker app for iOS and Android and the website https://firra.prept.pro. This policy explains what information we collect, why, and the choices you have.

The short version: your workouts, routines, body measurements and progress photos stay on your phone. We keep only what we need to run your account and your subscription. We do not show ads, we do not sell your data, and we do not track you across other companies' apps or websites.

1. Your training data

Your training data is stored on your device, so Firra works offline. While you are signed in, Firra also keeps a backup copy with your account on our servers, so it comes back when you reinstall the app or sign in on another phone. The backup contains:

  • Your workout history: exercises, sets, reps, weights, times, distances, effort ratings (RPE/RIR), rest times, notes and personal records
  • Your routines (without their cover images)
  • Body weight entries, body measurements, custom metrics and your start and goal weight
  • Your progress photos
  • Your favorite exercises

Routine cover images and your app settings stay only on your device and are never uploaded.

Sharing a routine is separate from the backup. When you tap Share on a routine, we store a copy of it on our servers (its name, notes, exercises and sets, but not its cover image) so the link works. Anyone who has the link can view that copy and save it to their own Firra. The shared page does not show your name or email.

Only you can reach the backup, by signing in to your account. Progress photos are kept in private cloud storage with no public link: they are encrypted in transit and at rest, and our server hands a photo only to the signed-in account it belongs to. We do not use the backup for advertising or analytics, and we do not share it with anyone except the hosting provider that stores it for us.

2. Information we collect

Account information. Firra uses Sign in with Apple or Google Sign-In. When you sign in we receive your name, your email address (Apple may give us a private relay address instead of your real one), your account identifier with that provider and, if the provider shares it, your profile picture. We also keep sign-in sessions, which record the IP address and device type used to sign in. You can also create an account with your email address and a password. We store your password only as a secure one-way hash, never in a form anyone can read. If you forget it, we email you a short one-time code to reset it; each code expires after 10 minutes.

Athlete profile. During onboarding and in Settings you can tell us your gender, age, height, current weight, target weight, main training goal, how often you plan to train, how fast you want to reach your goal, and your preferred units. We store this with your account so Firra can personalize your plan and restore it when you sign in on a new device.

Training data backup. The workout history, routines, measurements, progress photos and favorites listed in section 1, stored with your account so you can get them back on a new device.

Support messages. When you write to us in the app's Support chat, we store your messages and any photos or videos you attach, together with your app version, platform, operating system version and app language, so we can answer you. Attachments are kept in private cloud storage with no public link and are shown only to you and to the Firra team.

Onboarding survey. We ask how you heard about Firra, whether you have used other workout apps and whether you have a referral code, and we record your app language, platform (iOS or Android) and app version. We use this to understand which channels bring people to Firra.

Purchases. Payments are processed by Apple or Google. We never receive your card or bank details. Through Apple, Google and RevenueCat we receive details about your Firra Pro purchase: which plan you bought, the store, purchase and expiry dates, renewal status and transaction events such as renewals, cancellations and refunds.

App usage. We may collect limited information about how the app is used (for example, which screens are opened and which features are used), linked to a random identifier. We use it to fix problems and improve Firra. It never includes your workout content, measurements or photos.

Technical information. Like every online service, our servers and our hosting provider process technical data such as IP addresses, request times and error logs to keep the service running and secure.

3. Camera, photos and notifications

Firra asks for access to your camera or photo library only when you choose to take a progress photo or pick an image, for example a routine cover. Progress photos are also backed up to your account (see section 1); routine cover images stay on your device.

You can also attach photos or videos from your camera or library to a support message. They are uploaded when you add them to a message. Photos and videos can carry details stored in the file, such as when or where they were taken; we do not use them.

Reminders and workout notifications are scheduled on your device. We do not use push notification tokens and we do not send notifications from our servers.

Exercise videos and images are streamed from our content delivery network. As with any web request, that network sees your IP address when your device downloads them.

4. Health data

Firra does not read from or write to Apple Health or Google Health Connect. The height, weight and goals you share in your athlete profile are used only to provide and personalize Firra. We never use them for advertising and never sell them.

5. How we use information

  • To create and secure your account and let you sign in
  • To personalize your plan and keep your profile in sync across devices
  • To back up your training data and restore it on your devices
  • To process, verify and restore your Firra Pro subscription
  • To answer your support requests
  • To prevent fraud and abuse and to keep Firra secure
  • To understand, fix and improve the app, using aggregated or pseudonymous data
  • To meet our legal obligations

We do not use your information for advertising, we do not sell or rent it, and we do not share it for cross-context behavioral advertising.

6. Legal bases (EEA, UK and Switzerland)

Where the GDPR or a similar law applies, we process your information to perform our contract with you (your account and subscription), for our legitimate interests (security, fraud prevention and improving Firra, balanced against your rights), with your consent (for example camera, photo and notification permissions, which you can withdraw at any time in your device settings), and to comply with the law.

7. Who we share information with

We share information only with service providers that help us run Firra. They process it on our behalf and under our instructions:

  • Cloudflare: hosting, database, content delivery and sending account emails (password reset codes)
  • Apple and Google: sign-in and payment processing
  • RevenueCat: subscription management and purchase verification
  • PostHog: product analytics

We may also disclose information if the law requires it, to protect the rights and safety of our users or of Firra, or as part of a merger or acquisition. If that happens, this policy will continue to apply to your information.

8. International transfers

Firra is based in the United States, and our providers may process information in the United States and other countries. When we transfer personal data out of the EEA, the UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

9. How long we keep information

We keep your account, athlete profile and survey answers for as long as your account exists, and delete them when you delete your account. We may keep purchase records longer where we need them for accounting, tax, fraud prevention or dispute resolution. Technical logs are kept for a short period. Routines you share are kept until you delete your account. The backup of your training data is also kept until you delete your account.

Support messages and their attachments are kept until you delete your account, so we can see the history of your conversation.

10. Deleting your account

You can delete your account at any time in the app: go to Settings β†’ Account and tap Delete account. You'll confirm with Apple or Google, then we delete your account, athlete profile and survey answers from our servers and erase Firra's data from that phone. If you can't use the app, email support@prept.pro from the email address linked to your account and we'll do it for you. This also deletes the backup of your training data. If your account uses a password, you confirm with your password instead.

Deleting your account also deletes every routine you have shared, and their links stop working.

Deleting your account also deletes your support messages and the photos and videos you sent us.

Deleting your account does not cancel a subscription. Cancel it in your Apple ID settings or in Google Play. Workout data on your device is removed when you delete the app. If you signed in with Apple, you can also stop using Sign in with Apple for Firra in your Apple ID settings.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict how we use it, and to withdraw consent. People in the EEA, UK and Switzerland can also complain to their local data protection authority.

US residents, including residents of California, Virginia, Colorado and other states with privacy laws, can ask what personal information we hold about them and ask us to correct or delete it. We do not sell personal information or share it for targeted advertising, so there is nothing to opt out of. We will not treat you differently for using your privacy rights.

To make a request, email support@prept.pro. We may need to confirm that the account is yours, and we will reply within the time the law requires.

12. Children

Firra is not directed to children under 13, or under the minimum age for digital consent in your country (16 in some EEA countries). We do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

13. Security

We protect your information with encryption in transit, access controls and trusted infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your information and to keep what we store to a minimum.

14. Changes to this policy

We may update this policy from time to time. When we do, we change the "Last updated" date at the top. If a change is significant, we will also let you know in the app or on our website.

15. Contact

Questions or requests about privacy: support@prept.pro