Privacy Policy

1. Introduction

MESOSTRENGTH (“we”, “us”, or “our”) operates the MESOSTRENGTH web application. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

2. Information We Collect

We collect the following types of information:

• Account information: Your email address and display name. A random display name is generated when you sign up, which you can change at any time.
• Training data: Workout logs, mesocycles, templates, exercises, sets, reps, weights, and recovery feedback you enter into the application.
• Payment information: Payments are processed by Lemon Squeezy. We do not store your credit card details. We receive confirmation of your purchase status from Lemon Squeezy.
• Analytics data: We use PostHog to collect page views, product usage events (such as workouts completed), device and browser information, and IP addresses for analytics purposes. See Section 5 for details.

3. How We Use Your Information

• To provide and maintain the MESOSTRENGTH service
• To personalize your training experience and adjust volume recommendations
• To process payments through Lemon Squeezy
• To send transactional emails such as trial expiry notifications
• To analyze aggregated usage patterns and improve the product

4. Cookies and Local Storage

We use cookies and browser local storage as follows:

• Authentication cookies: Managed by Supabase Auth to maintain your login session.
• Local storage: Used to remember your preferences such as theme settings and cookie banner dismissal.
• Affiliate tracking cookies: If you visit MESOSTRENGTH via an affiliate link, Lemon Squeezy may set a cookie to attribute the referral. This is used solely for affiliate commission tracking. No additional personal data is collected for this purpose.

We do not use advertising cookies or cross-site tracking of any kind.

5. Analytics and Tracking

We use PostHog for website and product analytics. PostHog collects:

• Page views and navigation patterns
• Product usage events (e.g. workouts completed, mesocycles created)
• Device and browser information
• IP address

Session recording is not enabled. We do not sell your personal data. Analytics data is used solely to improve the website and product. Analytics data may be processed in the EU. You can request deletion of your analytics data by contacting us at support@mesostrength.com.

6. Third-Party Services

We use the following third-party services to operate MESOSTRENGTH:

• Supabase: Database, authentication, and infrastructure.
• Lemon Squeezy: Payment processing.
• Vercel: Hosting.
• PostHog: Product analytics (EU instance).
• Resend: Transactional email delivery.

7. Data Storage and Security

Your data is stored securely on Supabase infrastructure in regional datacenters located in Frankfurt, Germany (EU), with encryption at rest and in transit. We use row-level security to ensure that each user can only access their own data. While we take reasonable measures to protect your information, no method of transmission over the Internet is 100% secure.

8. Data Retention

We retain your account and training data for as long as your account is active. When you delete your account, all associated data is permanently deleted. We retain a record of email addresses that have claimed a free trial to prevent trial abuse; no other data is retained after account deletion.

9. Data Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties. We share data only with the third-party service providers listed above, solely for the purpose of operating the service.

10. Your Rights

We are committed to compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws. You have the right to access, correct, export, or delete your personal data at any time through your account settings. You may also request a complete data export or account deletion by contacting us at the email address below. If you believe your data protection rights have not been adequately addressed, you have the right to lodge a complaint with your local data protection supervisory authority.

11. Not Medical Advice

MESOSTRENGTH provides training tools and volume recommendations based on your input. This content is not medical advice. Consult a qualified healthcare professional before starting or modifying any exercise program.

12. Children's Privacy

MESOSTRENGTH is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of changes by updating the “Last updated” date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy, please contact us at support@mesostrength.com.