Privacy Policy

Summary

Standalone Watch apps

Crown Stack, Dial Lock and Rep Run are made by EBSM. The following applies to these three apps. Hourfolio and GAINZ are covered in their own sections below.

• No app analytics or ads. The apps contain no analytics, advertising or tracking code, and no third-party SDKs. They send no app data to EBSM or advertisers. Apple services described below, such as Game Center, may communicate with Apple.
• Stored on your Apple Watch. Scores, progress and settings are saved only on your Apple Watch, so the app and its watch face complications can show them. They are removed when you delete the app.
• Purchases. Each app is bought once through the App Store. Apple processes the payment, and we never see your payment details.
• Apple services. Features that use Apple services, such as Game Center, Apple Health or Apple’s Workout app, are provided by Apple under the Apple Privacy Policy. They’re described per app below.

Crown Stack

What stays on your watch

Your high scores, game statistics and settings (such as haptics, crown speed and theme) are saved only on your Apple Watch. They are removed when you delete the app.

Game Center

If you’re signed in to Game Center, your scores and achievements are sent to Apple’s Game Center service so they can appear on leaderboards. Apple handles this under its own privacy policy. You can play without Game Center.

Dial Lock

What stays on your watch

Your level progress, stars, best scores, Daily Safe results and settings (such as dial style and visual hints) are saved only on your Apple Watch. They are removed when you delete the app.

Game Center

If you’re signed in to Game Center, your scores and achievements are sent to Apple’s Game Center service so they can appear on leaderboards. Apple handles this under its own privacy policy. You can play without Game Center.

Rep Run

Rep Run is an app for structured interval running. It uses Apple Health and your location on your Apple Watch, only with your permission, and none of it is sent to us.

Apple Health

• What Rep Run reads: heart rate, distance, pace, running metrics and energy during a run, to show live stats and check your interval targets; and your date of birth, to estimate your maximum heart rate.
• What Rep Run writes: each run you choose to save, including its duration, distance, heart rate, calories, steps, running metrics, route and intervals.

Health data is never used for advertising or marketing, never shared with third parties by Rep Run, and never stored in iCloud by Rep Run. You can review or revoke access at any time in the Health privacy settings on your Apple Watch, or in the Health app on your iPhone.

Other apps you allow to read Apple Health, such as HealthFit or Strava, may read workouts that Rep Run saved there. You control that sharing in Apple Health, and those apps’ own policies apply.

Location

During outdoor runs, Rep Run uses your location to measure distance and pace and to save your route with the workout in Apple Health. Location is used only while a run is in progress and is never sent anywhere.

Apple’s Workout app

If you choose Open in Workout App, Rep Run hands the workout plan (its steps and targets) to Apple’s Workout app on your watch. Apple’s app then records the run under Apple’s privacy policy.

What stays on your watch

Your settings (such as your 5K time and maximum heart rate), your custom workouts and a summary of each run (the interval breakdown) are stored on your Apple Watch. They are removed when you delete the app.

Hourfolio

Hourfolio is a work-hours and estimated-pay tracker for iPhone and Android. On iPhone it has widgets, Live Activities and a paired Apple Watch companion; on Android it has a widget, a shift notification, a Quick Settings tile and a Wear OS companion. It does not require an app account and contains no ads.

Your work records

Jobs, rates, shifts, breaks, notes, templates, worksite coordinates and preferences are stored on your iPhone. The app and its widgets share local storage, and shift status and weekly summaries are sent to your paired Apple Watch through Apple’s WatchConnectivity service. Hourfolio does not send these work records to EBSM, Adapty or PostHog, and EBSM does not run a server that stores them.

On Android, the same records are stored on your phone, and the widget, shift notification and Quick Settings tile read them there. If you use the Wear OS app, the job names and rates, current shift status and weekly summary it shows are sent to your watch through Google’s Wearable Data Layer. No EBSM server is involved, and these records are not sent to EBSM, Adapty or PostHog.

On iPhone, if you turn on iCloud Sync, your work records are stored in your private iCloud database through Apple’s CloudKit. Only you can access them; we can’t. iCloud Sync is part of Premium and is off until you turn it on in Settings › iCloud Sync. It keeps your jobs (including their worksite coordinates), shifts, breaks, notes, templates, invoices and paychecks the same on your devices signed in to your Apple Account. Preferences such as PDF style and reminders stay on each device. iCloud Sync is not available on Android. Apple stores this copy under the Apple Privacy Policy.

If you export a report or backup, you choose where to save or share it. The recipient or storage service then handles that copy under its own policy. Apple may include local app data in device backups according to your Apple backup settings. On Android, Hourfolio’s records and settings can be included in your Android device backup and when you move to a new phone, according to your Google backup settings.

Optional location and notifications

With your permission, Hourfolio can use your current location to help set a worksite and monitor arrival or departure near saved worksites for reminders. Background worksite reminders require Always location access. Reminder settings stay on your device. Worksite coordinates are saved with the job, so with iCloud Sync on they are also in your private iCloud; they are not sent to EBSM or Adapty. Hourfolio does not record a travel history or automatically clock you in or out based on location.

Worksite maps are provided by Apple Maps, which handles map requests under the Apple Privacy Policy.

Notification permission is used for reminders you enable. You can turn reminders off in Hourfolio and revoke location or notification access in iPhone Settings. Manual tracking works without these permissions. Sample previews do not request permissions or create real work records.

Hourfolio for Android does not request location access and has no worksite reminders. It uses notification permission for the reminders you enable and, with Premium, the notification that shows your running shift. Reminders are scheduled on your phone and set again after it restarts. You can turn reminders off in Hourfolio and revoke notification access in Android Settings.

Purchases and paywall analytics

On iPhone, Apple processes purchases through the App Store. On Android, Google processes them through Google Play. We do not receive your card details. Hourfolio uses Adapty to load offers, process and restore purchase access, and measure which paywalls are shown and which purchases complete.

Adapty processes app-generated profile and installation identifiers, Apple’s vendor identifier, product and transaction information, purchase status, app-open and paywall events and technical information such as device model, app and operating-system versions, language, time zone and App Store region. These identifiers are not an Hourfolio login; Hourfolio does not supply your name or email address to Adapty. This purchase and paywall information is available to EBSM through Adapty.

On Android, Adapty processes the Android equivalents: app-generated profile and installation identifiers, the Android ID and app set ID, Google Play install-referrer details, Google Play product and purchase information (including purchase tokens), purchase status, paywall events and technical information such as device model, app and Android versions, language, time zone and Google Play country. Hourfolio checks Premium access with Google Play, which tells the app which Hourfolio purchases your Google account owns; Adapty’s record is used when Google Play can’t be reached.

Hourfolio disables Adapty’s advertising identifier (IDFA on iPhone, Google’s advertising ID on Android) and IP-address collection settings. On Android, Hourfolio also removes the advertising ID permission, so the app cannot read that identifier. There is no advertising SDK or cross-app advertising integration. Work records, pay rates, notes and worksite locations are not included in purchase or paywall analytics. Read the Adapty Privacy Policy, the Apple Privacy Policy and the Google Privacy Policy for those providers’ practices.

Usage analytics

Hourfolio uses PostHog Cloud EU to understand how the app is used: for example, how many people install and open it, which screens they open, how far they get through setup, and how often they clock in, export a timesheet or view Premium. Only versions installed from the App Store or Google Play send these events; TestFlight and development builds do not.

Each event has a name and simple details, such as the screen, whether a shift was new, the currency chosen for a job, or the Premium plan and its price. It also includes a random installation identifier created by PostHog, the app and operating-system versions, device model, language and time zone. Events never include job names, rates or pay amounts, shift times, notes, worksite locations or exported files. Hourfolio does not send your name or email address, does not use PostHog for advertising, turns off location lookup from your IP address, and its PostHog project discards IP addresses. On Android, PostHog’s library also adds technical details such as the device manufacturer, screen size, network type and mobile carrier name.

You can turn usage analytics off at any time with Share Usage Data in Hourfolio’s Settings. Read the PostHog Privacy Policy for its practices.

Managing your data

You can export a backup or delete work records in Hourfolio’s Settings. With iCloud Sync on, Delete All Records also removes them from your iCloud and your other devices. Turning iCloud Sync off keeps the iCloud copy; remove it in iPhone Settings › your name › iCloud. Deleting the app removes its local data; iCloud, backup or exported copies remain until you remove them there. Deleting the app does not automatically erase Apple purchase history or Adapty purchase-profile records needed for restoration. On Android, deleting the app removes its local data; copies in your Android device backup or in files you exported remain until you remove them there. Deleting the app does not erase Google Play purchase history. Contact support@ebsm.app about access to or deletion of purchase-profile information associated with Hourfolio. Apple controls Apple Account and App Store purchase records, and Google controls Google Account and Google Play purchase records.

GAINZ

GAINZ is EBSM’s workout tracker and lifter community for iPhone. It stores data on your phone and on our server to provide accounts, workout saving, strength standings and social features. It contains no advertising or third-party analytics SDK.

Accounts and fitness data

GAINZ creates a guest account with a generated identifier. If you save it using email, we store your email address, a password hash and whether ownership of that address has been verified. Verification status is private to your account. Sign in with Apple supplies an Apple account identifier and the name and email Apple shares with us, which may be a private relay address. Sign-in and refresh credentials support account access and Apple account deletion.

We store the first name, home gym and onboarding answers you provide: training goal, experience, leaderboard selection, birth year, height, bodyweight, weight unit and self-reported lifts. Finished workouts sent to the server include exercise names, sets, weights, repetitions, durations, effort ratings, notes, workout dates and sharing audience. These records provide your profile, workout history, strength calculations and class board.

Workout history, plans and custom exercise definitions are stored on your phone and synced to your account on our server. Plans, custom exercises and dated weigh-in history stay private from other lifters. Your latest bodyweight can appear on your public lifter profile and affects your weight class and strength calculations. Exercise names and sets used in saved workouts are also sent with those workouts. Rest reminders and Lock Screen workout controls use Apple’s local notification and Live Activity features. Your private activity inbox records REPS, comments on your posts and new followers, including the acting lifter, related content IDs, dates and read state. With your permission and activity-alert preferences enabled, we register this installation’s Apple push token and environment with your account. Apple receives the device token, a generic activity type and recipient/notification IDs; alert payloads do not include names, comment text, weights or bodyweight. This version does not read or write Apple Health data or automatically track your location.

Apple Watch companion

The optional paired Watch receives the current workout, exercise/set, weight unit, reps or hold duration and rest timer through Apple Watch Connectivity. Logging and rest actions require confirmation from the iPhone; disconnected actions are not queued. The companion does not receive passwords, sign-in tokens or full workout history, and does not request Apple Health or sensor access. Start and finish workouts on the phone.

Finding gyms and checking in

Finding nearby gyms is optional. After you choose Find nearby gyms and grant location permission, GAINZ requests one location fix. The coordinates are used to search the GAINZ gym directory and Apple Maps; GAINZ does not save that search location in your account or start ongoing location tracking. You can instead search by gym name. Adding a gym makes its name, address and coordinates, when supplied, part of the public gym directory. Add a public gym rather than a private home address.

A check-in records the gym you choose and a time, rather than tracking whether you are physically there. Your name and check-in can appear to other signed-in lifters viewing that gym, subject to blocking and moderation. Presence ends after two hours or when you check out or check in elsewhere. Posting the check-in to the feed is a separate choice with a followers or gym audience.

What other lifters can see

Other signed-in lifters can see your first name, home gym, current bodyweight and weight class when provided, strength standings, follower and following lists, and workout counts. A profile photo you choose is public and may be shown on your profile, posts, comments and the board. We downscale and re-encode uploads to remove location and other embedded image metadata; the original selection is not stored remotely. Shared workouts, their notes, comments and REPS are visible to the audience selected for the post. A workout saved as Only me stays private from other lifters; it can still be saved on our server. Do not include private information in public profile fields or shared notes.

We store follows, blocks, community-rule acceptance and content reports to operate and protect the community. Reports include your account identifier, the reported account/content, reason, details and a snapshot of the reported content. Authorized moderators can review this information and record removal, suspension or dismissal decisions. A report snapshot may remain after the original post or comment is removed.

You can choose to share a completed personal record, a week streak based on synced workouts, or a gym check-in. Those posts, notes, comments and REPS follow the selected post audience. Changing a posted workout to Only me also makes its existing post private. Choosing to share it again explicitly changes the workout’s audience.

Crew challenges are invite-only. Creating or joining records membership and shares your name and aggregate progress with other members. Progress is calculated from synced workouts within the challenge dates, excluding Only me workouts; source workout details are not exposed through the standings. Someone with the invite code can preview the goal and creator before joining. The creator can replace the code to stop new joins with the old code. Leaving removes you from standings and member access; it does not delete workouts.

Hosting, sign-in and email

Apple processes optional GAINZ Pro purchases and subscription billing. GAINZ reads Apple’s verified transaction and subscription state on the device to unlock strength trends and advanced insights; this implementation does not send purchase records to the GAINZ API or add a purchase analytics provider. Insights are calculated on your device from this account’s logged and restored workout history. Restoring paid access uses your Apple Account, separately from restoring your GAINZ data.

Render hosts the API and database. Cloudflare R2 stores processed profile images in private object storage; the app’s server serves active profile images publicly. Hosting services process records and technical information needed to deliver and secure the service. Apple handles Sign in with Apple, notifications and Live Activities under its policy. Resend processes the recipient email address, transactional message and delivery information when we send a requested password-reset or email-verification code. These emails support account access and ownership, not marketing; workout records are not included.

We use account and fitness data to provide GAINZ, handle support and review abuse. We do not sell it or use it for advertising or cross-app tracking.

Keeping and deleting data

Account, workout, plan, custom exercise, weigh-in and community records are kept while the associated account exists. Profile-photo removal, replacement or account deletion queues removal from private image storage, with retries if the storage provider is unavailable. An image attached to an open report may remain available privately to moderators until the report is reviewed; account deletion also removes its linked reports. Choose Settings → Account → Delete account to remove the account and its linked records from the active database and clear this phone’s GAINZ data. Deleting only the app does not delete the server account. Provider backups, operational logs and email delivery records may remain under the providers’ retention processes; account deletion does not erase copies another person already saved.

Reset and email-verification codes expire after 15 minutes and can be used once. Expired or used codes cannot change a password or verify an address. Verification requests belong to the signed-in account; the newest code replaces earlier requests. Reset requests store a keyed email identifier and security timestamps to limit abuse, including requests that do not match an account. The server periodically removes reset and verification request records more than 24 hours after expiry; account deletion also removes reset records linked to that account or email. Resend’s separate delivery records follow its retention settings.

To limit account and community abuse, the server processes the requesting IP address, account identifier or normalized email address and keeps domain-separated keyed hashes, attempt counts and a window timestamp. Request limiters do not store or log raw IP addresses. The server periodically removes these hashes more than 24 hours after the window starts, including when email delivery is disabled. Daily email-attempt totals contain no account or address identifiers and are removed once more than seven UTC dates old. Server outages can delay this cleanup.

Activity inbox records are kept for up to 90 days. Pending push delivery attempts expire after 24 hours, and device registrations after 90 days without refresh. Your account deletion removes its associated activity, preferences and registrations. Cleanup runs while the service is available; outages can delay maintenance. We cannot recall alerts already accepted by Apple, so activity payloads remain generic.

Check-in records are kept for up to 90 days, with cleanup while the service is available. A check-in post remains in its chosen audience until you delete the post or account, or moderation removes it; the two-hour presence expiry does not delete the post. Public gym listings can remain after the account that added them is deleted.

Challenge records are kept while their creator’s account exists. Deleting a challenge closes its visibility and invitations; its stored goal can remain until account deletion. Deleting an account removes its created challenges and memberships. Report snapshots follow the community-report rules above.

For access, correction, deletion or other privacy requests, contact support@ebsm.app. We may ask for information needed to verify that the account belongs to you. Never send your password, reset code or verification code.

Cutsuite

Cutsuite is a video editor for iPhone and iPad. It does not require an app account and contains no ads, analytics or tracking SDKs. EBSM does not receive your videos, projects or edits.

Your media and projects

Clips, photos and sound you import are copied into Cutsuite’s storage on your device, together with your projects, automatic saves and recovery data. You choose what to import with the system Photos picker or Files; Cutsuite sees only the items you pick. Deleting a project deletes its copies; the originals in Photos or Files stay. Apple may include app data in device backups according to your backup settings.

When you export, the video is written on your device. If you choose Save to Photos, Cutsuite asks for permission to add to your photo library and only adds; it does not read your library. Files you share go wherever you send them and are handled under that service’s policy.

Captions from speech

Transcription runs on your device using Apple’s speech recognition. Your audio is not sent to EBSM. The first time you transcribe in a language, iOS may download that language’s speech model from Apple, which Apple handles under the Apple Privacy Policy.

Purchases

Apple processes Cutsuite Pro subscriptions and the lifetime purchase. We do not receive your card details or a purchase profile: Cutsuite checks your purchase status with Apple on the device, and does not use a third-party purchase or analytics service.

Network use

Editing works offline. Cutsuite connects only to Apple: for purchases and restoring them, and for speech models when you transcribe. Links in the app open in your browser.

Daystamp

Daystamp is a residency day counter for iPhone, with widgets and a Live Activity. It counts the days you spend in each country and state for tax and immigration rules. It does not require an app account and contains no ads, analytics or tracking SDKs. There is no Daystamp server: EBSM does not receive your location, days, trips or documents.

Location

With your permission, Daystamp uses your location to record which country or state you’re in each day. With Always access, iOS wakes Daystamp when you arrive somewhere or move a significant distance, so days are recorded while the app is closed. Each location is reduced on your iPhone to the place (country, state or province, and New York City or Yonkers for New York’s city taxes), the time, its accuracy and how it was captured. Coordinates and routes are not saved.

Places are looked up on your iPhone from built-in boundary maps. Within about 3 km of a border, or where the built-in maps have no answer (at sea or on a small island), Daystamp asks Apple’s geocoding service which place you’re in, when a connection is available. Apple handles those requests under the Apple Privacy Policy. You can count by hand instead (Settings › Days are counted › By hand), and then location isn’t used. Location access can be changed in iPhone Settings at any time.

Photos, camera and imported files

If you choose Fill missed days from Photos, Daystamp reads the date and location of your photos on your iPhone and fills only days that have no record. Photos are not copied, uploaded or changed.

Proof Locker lets you scan a boarding pass, hotel bill or receipt with the camera, or pick a photo or PDF. Dates and places are read on your iPhone: boarding pass barcodes are decoded, and other documents are read with Apple Intelligence’s on-device model where available, or with built-in text rules. Documents you attach are stored in Daystamp with a SHA-256 fingerprint.

History you import from Google Maps Timeline or a CSV file is read on your iPhone and never uploaded.

Where your record is kept

Your days, trips, rules, edit history and documents are stored on your iPhone. Widgets and the Live Activity read a summary of your counts from storage the app shares with them on your iPhone. With Sync with iCloud on (Settings › Data), Daystamp keeps a copy in your private iCloud database through Apple’s CloudKit, so other devices signed in to your Apple Account see the same record. That copy is in your iCloud account, and EBSM cannot access it. Apple may include Daystamp’s data in device backups according to your backup settings.

PDF and CSV reports are created on your iPhone. If you share one, the person or service you send it to handles that copy under its own policy.

Notifications

Limit alerts, the evening “Where were you today?” check and border-crossing notices are scheduled on your iPhone. EBSM does not send push notifications.

Purchases

Apple processes the 30-day trial, Lifetime purchases and the Proof Locker add-on. Daystamp checks your purchases with Apple on your iPhone. We do not receive your card details or a purchase profile, and Daystamp uses no third-party purchase or analytics service.

Deleting your data

Choose Settings › Delete all data in Daystamp to remove your days, trips, rules and documents. You can also remove Daystamp’s data from iCloud in iPhone Settings › your name › iCloud. Deleting the app removes its data from your iPhone; exported reports, iCloud data and backups stay until you delete them there. Your purchases stay with your Apple Account.

If Daystamp can’t open its storage, it offers to make a copy of your data. Nothing is sent unless you choose to email it to support@ebsm.app; we use it only to help recover your record, and you can ask us to delete it at any time.

Poolsight

Poolsight is a pool and hot tub water-care app for iPhone and Apple Watch, with widgets, Live Activities and Siri. It does not require an app account and contains no ads or advertising SDKs. There is no Poolsight server: EBSM does not receive your water tests, pools, photos or location.

Camera and photos

Poolsight uses the camera to read test strips and your bottle’s colour chart, to read a pool shop printout and, if you choose, to measure your pool’s outline with augmented reality to work out its volume. You can also pick a photo of a strip, chart or printout with the system photo picker; Poolsight sees only the photo you pick. Images are processed on your iPhone and are not saved or uploaded. Only the results are kept: the readings, the colours read from your chart and the measured volume.

Location and weather

With your permission, Poolsight uses your approximate location, while the app is in use, to get your local weather for the chlorine forecast. The location is rounded to about 10 km on your iPhone and kept there with the latest forecast, so widgets and background updates can use it. It is not added to your pool records or iCloud, and it is not sent to EBSM or Adapty. The rounded location is sent to Apple’s WeatherKit service to get the forecast, which Apple handles under the Apple Privacy Policy. Without location access, the forecast uses an estimate and everything else works.

Where your records are kept

Your pools and spas, water tests, chemical additions, treatments, the products on your shelf and your settings are stored on your iPhone and in your private iCloud database through Apple’s CloudKit, so your devices signed in to your Apple Account see the same records. EBSM cannot access that copy. Widgets and the Live Activity read a summary from storage the app shares with them on your iPhone, and your paired Apple Watch exchanges swim status, readings and what you log on it with your iPhone through Apple’s WatchConnectivity service. Apple may include Poolsight’s data in device backups according to your backup settings.

If you share a pool or spa, the people you invite through iCloud can see and add to that pool’s records, and they see the name on your Apple Account as iCloud shows it. You can stop sharing, or leave a pool shared with you, in that pool’s settings.

Notifications and Siri

Wait-to-swim timers, retest and test-due reminders, heat warnings and the evening forecast reminder are scheduled on your iPhone. EBSM does not send push notifications; iCloud uses silent notifications to keep your devices in sync. Siri requests such as “When can we swim?” are answered on your iPhone from your records; Apple handles Siri under the Apple Privacy Policy.

Purchases and paywall analytics

Apple processes Poolsight Pro (the yearly subscription and the lifetime purchase). We do not receive your card details. Poolsight uses Adapty to load offers, process and restore purchases, and measure which paywalls are shown and which purchases complete. Adapty processes an app-generated profile identifier, Apple’s vendor identifier, product and transaction information, purchase status, paywall events and technical information such as device model, app and operating-system versions, language, time zone and App Store region. Poolsight turns off Adapty’s advertising-identifier and IP-address collection. Water tests, pool details, photos and location are never sent to Adapty. This purchase and paywall information is available to EBSM through Adapty. Read the Adapty Privacy Policy for its practices.

Safety information

Poolsight gives general guidance, not professional advice. Emergency numbers in the app open your phone’s dialer; Poolsight doesn’t place or record calls.

Deleting your data

Choose Settings › Delete All Data in Poolsight to remove your pools and spas, tests, treatments, shelf and settings from your iPhone, your iCloud and your other devices. Pools you share stop being shared; pools someone else shared with you are left, because their records belong to that pool’s owner. Poolsight keeps a count of the free strip scans you’ve used, so deleting data doesn’t reset it. Deleting the app removes its data from your iPhone; to remove the iCloud copy too, use Delete All Data first, or go to iPhone Settings › your name › iCloud › Manage Account Storage. Your purchases stay with your Apple Account. Contact support@ebsm.app about access to or deletion of purchase-profile information associated with Poolsight.

This website

ebsm.app uses no cookies, no analytics, no advertising and no third-party scripts or fonts. It’s a static website hosted by Render. Like any web host, Render processes technical information such as your IP address, browser type and the pages requested, in order to deliver the site and protect it from abuse. We don’t use this information to identify or track you.

When you email us

If you contact us at support@ebsm.app, we receive your email address and whatever you choose to include in your message. We use it only to reply to you and to fix the problem you report. We don’t add you to any mailing list, and we don’t share your message with anyone. You can ask us to delete our correspondence with you at any time.

Children

Crown Stack, Dial Lock, Rep Run and Daystamp collect no personal information from anyone, including children. Hourfolio’s and Poolsight’s purchase processing and GAINZ’s account, fitness and community data are described in their sections above. If you have a question about a child’s information, contact support@ebsm.app.

Changes and contact

If this policy changes, we’ll post the updated version on this page with a new effective date.

Questions about privacy? Email support@ebsm.app.