Effective 2026-09-23. Last updated 2026-09-23.
Privacy Policy
Working draft. This policy will be reviewed by counsel before we launch on public app stores. If you spot something that reads wrong for your situation, tell us at hello@outworkme.io and we will fix it.
Outwork Me is an app operated by Welcome Lane LLC ("Welcome Lane," "we," "us"). This policy explains what data we collect when you use the Outwork Me mobile app, watchOS companion, web app, and this marketing site, why we collect it, who we share it with, and what rights you have to change or remove it.
The short version: we collect the minimum needed to run the app, we do not sell your data, we do not share it with advertisers, and you can export or delete everything at any time from Settings.
1. Categories of personal information we collect
The table below covers each category of personal information (as defined by the CCPA/CPRA), what we do with it, whether we sell or share it, and how long we keep it. We do not sell or share any category listed here.
| Category | Purpose | Retention |
|---|---|---|
| Identifiers (email, chosen handle, device identifiers, push tokens) | Run your account, deliver notifications you asked for. | While your account is active + 30 days after deletion. |
| Commercial information (subscription status, purchase receipts) | Grant paid features, comply with tax and receipt-keeping obligations. | 7 years from purchase (tax law). |
| Internet activity (in-app screen views, feature usage, crash logs) | Fix bugs, measure whether new features are used. | 12 months, then aggregated or deleted. |
| Inferences (training level, program preferences derived from logs) | Personalize the app around your goals. | While your account is active + 30 days after deletion. |
| Sensitive personal information: health and fitness data (workouts, sets, reps, weights, PRs, HealthKit data if you grant it) | Run the training log. Show your session on the watch. Compute rank progress. | While your account is active + 30 days after deletion. Never used for advertising, never sold. |
| Visual information (progress photos, nutrition-label images) | Store the photo you attached. Extract macros from a scanned label via our AI subprocessor. | Progress photos: until you delete them. Label images: processed and discarded within 24 hours. |
Apple HealthKit specifics (iOS and watchOS). If you grant permission, we read your step count, workout sessions, and active energy from Apple Health so the watch app can display them alongside your Outwork Me session. We write your Outwork Me workout summary back to Health only if you explicitly opt in. We follow Apple's HealthKit rules to the letter: we do not use HealthKit data for advertising, we do not share or sell HealthKit data to third parties for marketing or data-mining purposes, and we do not store HealthKit data in iCloud or any other Apple-provided cloud storage. You can revoke access at any time in the Health app under Sources.
What we do not collect. Precise geolocation, contacts, calendar, microphone recordings, background camera, browsing history outside the app, or biometric identifiers such as face scans or fingerprints.
2. How we use it
To run the service (deliver your training log, rank progression, clan features, timers and notifications). To improve the app (fix bugs, measure whether new features are used). To communicate with you (transactional emails you asked for, service-critical announcements). To keep the service safe (rate-limiting, abuse investigation).
We do not use your data to train third-party AI models. We do not sell it. We do not share it with advertising networks.
4. Retention and deletion
Per-category retention periods are listed in the table in section 1. When you delete your account, we tombstone your account records immediately, wipe personal identifiers within 30 days, and remove the data from encrypted backups within 60 days after that. Aggregated, non-identifying analytics may be retained indefinitely for capacity planning.
5. Your rights
You can request access to, correction of, or deletion of your personal data at any time. Most of these actions are available directly in Settings. For anything not covered there, email privacy@outworkme.io.
California residents: under the CCPA/CPRA you have the right to know what we collect, request deletion, request correction, and opt out of "sale" or "sharing" of your personal information. We do not sell or share personal information as those terms are defined.
EEA/UK residents: the GDPR/UK-GDPR gives you rights of access, rectification, erasure, restriction, portability, and objection. The lawful basis for processing training data is performance of the contract you formed by using the app. The lawful basis for diagnostic data is our legitimate interest in operating and improving the app.
6. Children
Outwork Me is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided data to us, contact privacy@outworkme.io and we will delete it.
7. International transfers
Our subprocessors may store data in data centers located in the United States or the European Union. Where personal data of EEA/UK residents is transferred outside the EEA/UK, we rely on Standard Contractual Clauses and equivalent safeguards.
8. Security
Data is encrypted in transit (TLS 1.2+) and at rest. Access to production systems is limited to Welcome Lane staff with a need to access it, protected by MFA. We aim to notify affected users of a personal-data breach within 72 hours of confirming its scope.
9. Changes to this policy
If we materially change how we handle personal data, we will email account holders and post the updated policy here at least 14 days before the change takes effect.
10. Contact
Welcome Lane LLC · attn: Privacy · United States
privacy@outworkme.io