Physio Exercise Tracker

Privacy Policy

Plain-English summary: this app stores everything on your phone. Nothing you enter – exercise names, schedules, logs, videos – is sent to any server controlled by us. Two things do leave the phone, and neither contains anything you have entered: anonymous crash reports, and a check for app updates. Both are described below.

Who controls your data

The “data controller” under UK GDPR is Paul Hollowday, the developer of this app. You can contact him at hollowday.paul@gmail.com.

What data the app processes

The app stores, on your device only:

• Exercise names, optional notes, default sets and reps.
• Programmes (groupings of exercises) and their colours.
• Schedules (days and times you want reminders).
• Log entries when you mark an exercise complete, or record it as an excused miss: sets done, reps done, pain score, difficulty score, duration, free-text notes, and the calendar date. The app does not record the time of day.
• Optional video clips you record or pick to demonstrate an exercise.
• The date of your next appointment, if you choose to enter one, so the app can count down to it.
• A few app settings: snooze duration, sound on/off, light or dark theme, which words the app uses for your clinician, and how far you have got through the tips and jokes.

Where it lives

All of the above sits in your phone’s app sandbox (a private SQLite database file plus a folder of video files). It is not synced to the cloud automatically. If you uninstall the app, that data is deleted by the operating system.

When data leaves the device

Your own records leave only when you actively choose to share them, using your phone’s standard share sheet:

• Backup zip: when you tap “Create backup”, the app builds a .zip of the database and videos and hands it to your share sheet. You decide where it goes (iCloud Drive, Google Drive, email, etc.). Once shared, it is governed by the policy of whichever service you chose.
• PDF / CSV report: when you share a report, the app generates a file on your device and hands it to the share sheet. Same rule – once you send it, it leaves our control.

App updates

When you open the app, it asks Expo’s update service whether a newer version of the app’s code is available, and downloads it if so. This lets fixes reach you without waiting for an App Store or Play Store release. Like any request to a server, it reveals your device’s IP address and a random installation identifier. It sends none of your exercises, logs, notes or videos, and it is not used to track you or to build a profile. Expo’s privacy policy is at expo.dev/privacy.

Crash reports (Sentry)

To find and fix bugs, the app may send anonymous crash reports to Sentry (sentry.io). These contain technical details about the crash: the error message, stack trace, the operating system version, and a random installation identifier. They do not contain any of your exercises, logs, names, or videos. Sentry is processed under their own privacy policy at sentry.io/privacy.

If crash reporting is not configured for a given build, no crash data is sent at all.

Permissions the app asks for

• Notifications: to remind you at the time you scheduled an exercise. Reminders are scheduled and fired by the operating system locally; nothing is sent to a server.
• Camera and microphone: only when you choose to record a video demonstration of an exercise.
• Photo library / files: only when you choose to pick an existing video from your library, or to import a backup file.

Your rights under UK GDPR

• Access: the app shows you everything it stores. You can also export the raw data via “Backup” or as a CSV from the Report tab.
• Erasure: you can delete an individual log from its detail screen, archive an exercise or programme from its edit screen, or uninstall the app to wipe all of your exercises, logs and videos.
• Portability: the backup zip is a standard SQLite file plus video files; the CSV is plain text. Both are open, documented formats you can read with other tools.
• Complaint: if you are unhappy with how your data is handled, you can complain to the UK Information Commissioner’s Office (ico.org.uk).

Children

The app is not directed at children under 13. If you are a parent or guardian managing this app on a child’s device on behalf of their physiotherapy programme, the data above sits on that device, not with us.

Changes to this policy

If this policy materially changes, the in-app version will be updated and the “Last updated” date below will change. Continuing to use the app after that constitutes acceptance.

Last updated: 16 August 2026