Privacy policy
Comeback has no account, no server and no third-party SDKs. There is very little to protect here, by design — and this page explains exactly what that means.
Effective
The short version
Comeback does not collect your personal data. There is no sign-up, no login and no user identifier of any kind. Everything you create stays on your iPhone, and — if you are signed into iCloud — in your own private iCloud database, which we cannot read. Nothing is transmitted to us, sold, shared or used for advertising.
Who we are
Comeback (“we”, “us”) is the developer of the Comeback iPhone app and the data controller for the purposes of UK data protection law. We operate from the United Kingdom.
For any question about this policy, or to make a data protection request, write to privacy@comebackfitness.app.
What we do not collect
None of the following is collected, requested or stored by us:
- Your name, email address, phone number, date of birth or postal address
- Any account credentials — there is no account to create
- Health or fitness data from HealthKit, which the app does not integrate with
- Body composition, bodyweight, measurements or progress photos
- Your location, at any level of precision
- Your contacts, photos, camera, microphone or motion data
- Any advertising identifier. The app does not link AdSupport or App Tracking Transparency, so you will never see a tracking prompt from it
- Any device identifier, analytics identifier or fingerprint
The app’s Info.plist contains no usage-description keys, because Comeback requests no protected resources other than notifications. It links no third-party SDKs at all — no analytics, no attribution, no crash reporter that transmits off the device, no advertising library.
What the app stores, and where
Everything below is created by you, and is written to your device’s local database:
- Your 5 onboarding answers — goal, days per week, minutes per session, available equipment, and experience
- The training programme generated from those answers, and your session plans
- Logged sets: the exercise, the weight, the repetitions and the time
- Swap events: which exercise was swapped, for what, for which of the four reasons, and when
- Records of time away: how many days, the load reduction applied, and whether the shorter session was completed
- Your preferences: units and notification settings
If you are signed into iCloud and sync is enabled, this same data is mirrored into your own private CloudKit database. A private CloudKit database is scoped to your Apple Account and encrypted; its contents are not accessible to us, and Apple does not make them available to developers. We hold no copy of your training anywhere.
There is no Comeback server and no Comeback API. The app works fully without iCloud — with no account or no connection, it saves to the iPhone and carries on.
Analytics
Comeback records product events — such as a session being completed or a swap being used — to your device’s system log and a small in-memory buffer. None of it is transmitted anywhere. There is no analytics provider, and we receive nothing.
Every value recorded is a bucketed category or a small count. No event parameter contains free text, a weight, a date, an exercise you chose, or any identifier. The app’s automated test suite asserts this mechanically on every build.
If this ever changes — if any event were to be sent off the device — it would require a new version of this policy, an updated App Store privacy label, and, where the law requires it, your consent first.
Permissions
The only permission Comeback ever asks for is notifications, and only if you turn reminders on yourself in Settings. It is used for at most about two messages a week: a week preview, a session reminder, a nudge after time away, and a reminder before a free trial converts.
If you decline, everything in the app keeps working and you will not be asked again. Declining is a fully supported state, not a degraded one.
Subscriptions
Premium subscriptions are processed entirely by Apple through the App Store. Comeback never sees or stores your payment details, and we do not receive a record of who has subscribed. The app checks your entitlement with Apple’s StoreKit framework on your device.
Children
Comeback is not directed at children, and because it collects no personal data it does not knowingly hold any information about a child. If you believe a child has provided us with personal data — which the app has no mechanism to do — please contact us.
Your rights under UK GDPR
Where we process personal data, UK GDPR gives you the rights to access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent.
In practice, we hold no personal data about you, so in nearly every case there is nothing for us to retrieve, correct or delete. You exercise these rights directly and immediately on your own device:
- Access and portability. Export everything as a CSV file from the app’s settings. This is free on every plan and includes your full history, not just the 30 days shown in the app on the free tier.
- Rectification. Edit or delete any logged set in the app.
- Erasure. Delete the app from your iPhone. If sync was enabled, also remove its iCloud data in Settings → your name → iCloud → Manage Storage. Once you have done that, no copy remains anywhere.
If you believe we have handled your data improperly, you can complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk. We would ask that you contact us first so we can try to resolve it.
Data retention
We retain nothing, because we receive nothing. Your data persists on your device and in your iCloud for exactly as long as you keep it there.
Changes to this policy
If this policy changes we will update the effective date at the top of this page and publish the new version here. A change that materially affects how your data is handled — for example, anything leaving your device for the first time — will be described in the app’s release notes as well, and where the law requires consent we will ask for it before the change takes effect.
Contact
Data protection questions and requests: privacy@comebackfitness.app. Anything else: support@comebackfitness.app. We aim to reply within 3 working days.