Privacy

What stays on your phone

Everything you enter in MuscleCat is kept in storage on your iPhone: your machines and working weights, areas and plans, your workouts with their sets, your rating after each exercise and your mood for a workout. Also your profile – first name, last name, e-mail address and weekly goal – and your settings such as appearance and rest between sets.

None of this is sent to us or to anyone else. We cannot see it. MuscleCat also asks your phone for no permission: no access to Health, location, contacts or photos. What the app reports when you let it count is described further down – nothing you enter is part of it.

If you delete the app, the storage goes with it. If you back up your iPhone through iCloud or your computer, MuscleCat is part of that backup – that is between you and Apple, we get nothing from it.

Your backup file

Under Einstellungen → Daten (Settings → Data) you can save all your data to a file. The file contains everything from the app, including the name and e-mail address from your profile. You decide where it goes – to your files, into an e-mail, into a cloud storage of your choice. It does not reach us. Keep it somewhere only you can get to.

If you let MuscleCat count

From version 1.0 MuscleCat asks you once whether the app may count – on first launch or, if you already use it, after the update. This is voluntary, and the app works the same with Yes and with No. As long as you have not answered “Ja, mitzählen” (Yes, count me in), nothing is sent and nothing is kept for sending later.

We want to know three things: whether the first launch works through to the end, whether workouts are started and finished, and whether statistics, exercises, plans and backup are used. For that, the app reports these ten events to a server of ours:

• Consent: you answered “Ja, mitzählen” (Yes, count me in).
• First launch: the basic settings were shown, the first workout was shown, the first launch is finished.
• Workout: a workout was started, a workout was finished.
• Features: the statistics, the exercises or the list of plans was opened, a backup was made.

Each event consists only of its name, the version of the app and a random identifier. The app creates the identifier on your phone after your Yes, so that we can count people and not requests. It is drawn at random, not derived from your device or your Apple ID, serves only this counting and is not in your backup file.

For each identifier and event, the server remembers only the first time, with the day. How often and at what time of day you train is not stored there. Also not included are your name, your e-mail address and anything you enter in the app. The counting is not linked to anything else you send us.

As with any connection, the server sees your IP address. We do not store it with the events and do not analyse it.

The server is in Frankfurt am Main. Vercel receives the reports; they are stored in a database at Neon that exists only for this. Each entry is deleted no later than 13 months after its day.

Switching off: Under Mehr → Einstellungen (More → Settings) you can switch “Nutzung mitzählen” (Count my usage) off at any time. The app then stops counting immediately, deletes the identifier on your phone and sends one last request to the server: delete everything counted under this identifier. If your phone cannot reach the server at that moment, the app keeps trying for as long as you have it open. If you switch to another app or close MuscleCat before the request has arrived, it can be lost. The entries then stay until they are deleted automatically after 13 months at the latest; nobody can delete them specifically any more, because the identifier no longer exists. The same applies if you delete the app without switching off first. If you switch on again, the app gets a new identifier.

If you write to us from the app

Under Mehr → Über (More → About) you can send us feedback or a question. For that, MuscleCat opens your own mail program with a prepared e-mail to feedback@neckarshore.ai. It is only sent when you tap Send.

For feedback, something is already in the text at the bottom so that we can reproduce an error: the version of MuscleCat, its build, the model of your iPhone and the version of iOS. You see it before sending and can delete it.

What reaches us is what is in the e-mail, plus your sender address. We use it to reply to you and delete the e-mail no later than six months after we receive it.

If you write to us through the support page

The support page shows our e-mail address. If you write to us there, it runs through your own mail program – this website does not see it. What reaches us is what is in your e-mail, plus your sender address. We use it to reply to you and delete the e-mail no later than six months after the last message about the matter.

This website

This site sets no cookies and loads no counting or analytics script. The font is on our own server, your browser asks no one else for it. Nothing is loaded from any other provider.

Like any web server, its operator processes technically necessary connection data such as your IP address in order to deliver the page at all.

Trial and unlock

You get MuscleCat through Apple: in the App Store, before release through TestFlight. In the app you can start a trial and unlock MuscleCat. Both run as an in-app purchase through your Apple ID: Apple handles it, and for the unlock the payment as well, as a controller in its own right under Apple's privacy policy.

Whether your trial is running and whether MuscleCat is unlocked, the app reads at every launch from what Apple keeps for it on your iPhone – including the time at which you started the trial. The app stores none of this itself and passes none of it on, not even to us.

We do not learn who tried or unlocked MuscleCat – we only see added-up numbers. If you have allowed your iPhone to share analytics data with app developers, Apple additionally shows us summarised numbers such as installations and crashes, without our being able to identify individual people.

Who helps us with this

These service providers work on our behalf and on our instructions. They may do nothing of their own with the data:

• Vercel (Vercel Inc., USA) delivers this website and receives the reports from the counting.
• Hostinger (HOSTINGER, UAB, Lithuania) provides the mailboxes info@neckarshore.ai and feedback@neckarshore.ai, in which your e-mails to us land.
• Neon (a service of Databricks, Inc., USA, provided through the Vercel Marketplace) stores the entries of the counting in a database in Frankfurt am Main.

Some of these service providers are based in the USA. For these transfers, the safeguards provided for by the EU are in place: Vercel is certified under the EU-US Data Privacy Framework, Neon bases the transfer on the EU Standard Contractual Clauses or, where the EU-US Data Privacy Framework takes their place, on that. You can get a copy of the safeguards through info@neckarshore.ai.

How long we keep data

• Feedback from the app: no later than six months after we receive it.
• E-mails to support: no later than six months after the last message about the matter.
• Entries of the counting: no later than 13 months after their day. Sooner, as soon as you switch counting off and your phone reaches the server.
• Connection data of this website and of the counting: It arises with every connection and is not analysed by us. The operator of the servers keeps it only as long as it needs it for secure operation and then deletes it automatically.

Why we are allowed to

The law requires a reason for every processing. Ours are:

• We answer e-mails and messages to us because you ask us to (Art. 6(1)(b) GDPR).
• We do the counting only because you have agreed (Art. 6(1)(a) GDPR, for the identifier on your phone Section 25(1) TDDDG). You can withdraw your consent at any time, with the switch in the app. What was counted until then was permitted.
• We need the technically necessary connection data of this website and of the counting so that it is functional and secure – also our legitimate interest (Art. 6(1)(f) GDPR).

Your rights

You can find out at any time whether and which data we hold about you (access, Art. 15 GDPR), have it corrected (Art. 16), deleted (Art. 17) or its processing restricted (Art. 18), and receive it in a portable format (Art. 20). To do so, write to info@neckarshore.ai. We reply within one month.

Objection: You can object at any time, on grounds relating to your particular situation, to processing that is based on our legitimate interest (Art. 21 GDPR).

Withdrawal: You can withdraw your consent to the counting at any time (Art. 7(3) GDPR), with the switch under Mehr → Einstellungen (More → Settings). We do not know whom an identifier belongs to, and the app does not show it. We therefore cannot give you access to individual entries (Art. 11 GDPR). You can delete them yourself: with the switch.

What lies only on your phone, we do not have. We can neither give you access to it nor delete it – only you can, in the app or by deleting it.

If you think we are handling your data wrongly, you can complain to a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg).

Who is responsible

The controller is German Rauhut, Rotebühlstraße 176, 70197 Stuttgart, Germany – all details in the Imprint (in German).

Changes

If something changes in what is written here, this page changes with it. It describes a state, not a plan. As of: 12 October 2026