SweatGate
← Back home

Privacy Policy

Draft — last updated September 2026
This policy reflects SweatGate's actual data-handling design as currently built. It is being finalized with legal counsel ahead of public launch, but the commitments below — especially that your raw health data never leaves your device — are accurate to how the app works today.

1. Who we are

SweatGate ("we," "us," "the app") is developed by SweatGate LLC. This policy explains what information SweatGate collects, why, and how it's handled.

2. The short version

SweatGate blocks a small set of apps you choose until you log a workout that day. To do that, we need to check whether you worked out — we do that using Apple HealthKit or Google Health Connect, the same health-data systems already on your phone. We built this specifically to collect as little as possible: we do not store your raw health data. We only store the outcome of the check — whether today counts as a workout day — never the underlying heart-rate readings, GPS routes, or detailed workout data itself.

3. Information we collect

Health & fitness data (via HealthKit / Health Connect). With your permission, SweatGate reads your workout and heart-rate data on your device to determine whether you've completed a qualifying workout today. This check happens on your device. What we store on our servers is only the result: a yes/no "workout completed" flag for that date, and which method qualified it. We do not store your raw heart-rate readings, workout routes, GPS data, or any other detailed HealthKit/Health Connect data.

Account information. Your email address and a unique account ID, handled through our authentication provider, Supabase.

Bypass purchase records. If you use a paid bypass, the purchase itself is processed by Apple's or Google's in-app payment system via RevenueCat — we do not receive or store your card number or other payment details. We store only the record that a bypass was used and its date.

Usage analytics. We use Mixpanel to understand how the app is used in aggregate. This does not include your health data.

Crash and error data. We use Sentry to catch and fix bugs. Crash reports are not linked to your health data.

Device/app-selection data. Which apps you've chosen to gate is stored so the app can apply and lift the block correctly.

4. What we don't do

5. Third-party services we use

ServicePurposeWhat it sees
SupabaseBackend database & authenticationAccount email, workout-verification outcomes, bypass records
RevenueCatIn-app purchase processingPurchase/subscription status (not raw payment details)
Apple / GooglePayment processingYour payment method, per their own privacy policies
MixpanelProduct analyticsAnonymized usage events
SentryCrash/error monitoringTechnical crash reports
Apple HealthKit / Google Health ConnectSource of workout & heart-rate dataData stays on-device; only pass/fail outcome leaves the device

6. Your choices and rights

7. Children's privacy

SweatGate is not directed at children under 13 (or the relevant minimum age in your country), and we do not knowingly collect data from children under that age.

8. Data retention

Workout-verification outcomes and bypass records are retained for as long as your account is active. If you delete your account, this data is deleted within 30 days.

9. Security

We use industry-standard practices to protect your data, including encryption in transit and Row Level Security at the database level, meaning your data is only ever accessible to your own authenticated account.

10. Changes to this policy

We'll update the "last updated" date above if this policy changes, and notify you in-app of material changes.

11. Contact

Questions about this policy: hello@trysweatgate.com.