What we collect
When you register, we store your email address, a securely hashed version of your password (we never store your password itself), and an optional display name. As you use Brolick, we store the training data you enter: workouts, sets, reps, weights, RIR/RPE, routines, custom exercises, programmes, and any questions you ask Brolick Coach.
What we don't collect
We do not collect your location, contacts, photos, or device identifiers beyond what's needed to keep you signed in. We do not use tracking or advertising cookies — only a functional session cookie required to keep you logged in.
How we use it
Your training data is used exclusively to provide the app's own features back to you: workout tracking, personal records, history, weekly/monthly/yearly training insights, Brolick Coach's recommendations, and Adaptive Training. Nothing you enter is used to train any shared or public model, and your data is never shown to other users.
Who we share it with
We do not sell or share your personal data with third parties for marketing purposes. Brolick currently has no third-party analytics, advertising, or payment integrations. If Brolick Coach's optional AI explanation layer is ever enabled with an external AI provider, only the minimum structured training facts needed to phrase a recommendation would be sent — never your email, name, or account details — and this policy will be updated before that happens.
Other users and your data
Your custom exercises, routines, programmes you author (unless explicitly published), workout history, personal records, and Adaptive Training recommendations are private to your account. Ownership is enforced on every request — other users cannot view or modify your data through the application.
How long we keep it
We retain your data for as long as your account exists. You can permanently delete your account and all associated data at any time from Account settings. Deletion is immediate and cannot be undone.
Your rights
You can review your own data at any time within the app (History, PRs, Insights). Account deletion is available today. A bulk data-export feature is planned but not yet built — contact us directly if you need a copy of your data before then.
Security
Passwords are hashed with bcrypt and never stored in plain text. All data access is scoped to your account on the server, not just hidden in the interface. See Terms of Service for the limits of what we can guarantee.
© 2026 Spinworth Limited. All rights reserved.
An app development by James Downie