SD Solutions NC
Privacy Policy Terms of Service

Legal

Privacy Policy

Last updated: May 2026  ·  Effective for all versions of Worky

1. Who We Are

Worky is developed and operated by Akarsh Singh, SD Solutions NC, based in North Carolina, USA (the "Controller," "we," "us," or "our"). We are the data controller responsible for your personal information under applicable privacy law, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and Quebec Law 25.

Our designated Privacy Officer is Akarsh Singh. For all privacy-related inquiries, data subject requests, or concerns, contact us via akarshsingh.com/contact.

2. Data We Collect

We collect only what is necessary for the app to function. No advertising identifiers, no behavioral tracking, no analytics SDKs.

Account identifiers

If you sign in with Apple, we receive a unique anonymized user identifier and, only if you choose to share it, your name and email address. If you sign in with Google, we receive your Google display name and email address via Google's official Sign-In SDK. These are stored in your device's Keychain and synced privately to your iCloud account. If you continue as a Guest, only a "Guest" label is stored locally.

Personal information you enter

Name, email address, age, height, and body weight — entered voluntarily in Settings. BMI is computed locally from height and weight and never sent anywhere.

Health and fitness data

Workout days, exercise names, sets, reps, weights, completion dates, body weight log entries, and daily notes — all created by you. With your explicit permission, the app reads resting heart rate and date of birth from Apple Health, and writes body weight entries and workout summaries back to Apple Health.

Exercise search queries

When you use the exercise search feature, the text you type (e.g. "bench press") is sent to wger.de, a free open-source exercise database. No account details, device identifiers, or personal information are included.

What we do NOT collect

Advertising identifiers (IDFA), precise location, contacts, photos, camera, microphone, crash reports, usage analytics, or any device fingerprinting data.

3. Why We Process Your Data (Lawful Basis)

For EU/EEA users, we process personal data under the following lawful bases (GDPR Article 6):

Processing Activity Data Lawful Basis
Account creation & auth Name, email, user ID Art. 6(1)(b) — contract (ToS)
iCloud/CloudKit sync All app data Art. 6(1)(b) — contract
Health and fitness data Weight, workouts, BMI, HR Art. 9(2)(a) — explicit consent
Exercise search Search terms only (no PII) Art. 6(1)(b) — contract
Reading/writing Apple Health Body weight, workouts, HR, DOB Art. 6(1)(a) / 9(2)(a) — consent

For US and Canadian users, we process your data as necessary to provide the service you have requested and with your consent where required.

4. Health Data — Special Category Processing

Under GDPR Article 9, health data is a "special category" requiring heightened protection and explicit consent. Worky processes health-related data including body weight history, workout logs, BMI, and (with your permission) resting heart rate and date of birth from Apple Health.

Your explicit consent is the basis for this processing. You provide consent by: (a) granting HealthKit permissions when prompted by iOS, and (b) voluntarily entering personal health information in the app. You may withdraw consent at any time by revoking HealthKit access in iOS Settings or by deleting all data via Settings → Sign Out.

This data is stored solely on your device and in your private iCloud account. We have no access to it. It is never used for advertising, profiling, or any purpose other than powering Worky's features for you.

5. How Your Data Is Stored

On your device: All workout data, personal information, and notes are stored locally using Apple's SwiftData framework in an encrypted database. Account credentials are stored in your device's Keychain, encrypted and protected by your passcode and biometrics.

iCloud sync (optional): If you sign in with Apple or Google, your data syncs to your private iCloud account via Apple's CloudKit. Only you can access it. SD Solutions NC has no access to your iCloud data, no keys to decrypt it, and no servers storing copies of it.

Apple Health: With your permission, Worky reads and writes data to Apple Health on your device. This is governed by Apple's privacy policy and your iOS Health settings.

No SD Solutions NC servers: We operate no backend servers, databases, or cloud infrastructure that stores your personal data.

6. Third-Party Services

We do not sell your data to any third party. None receive your personal information for advertising purposes.

Apple (CloudKit, Sign in with Apple, HealthKit)

Processes iCloud sync and authentication. Your CloudKit data is not accessible to us. apple.com/legal/privacy

Google (Sign in with Google)

If you choose Google Sign-In, your name and email are obtained via OAuth. policies.google.com/privacy

wger.de (Exercise Database)

Exercise name searches are sent to wger.de, hosted in Germany. Only the search term is transmitted — no personal information or device identifiers. wger.de/en/user/privacy

Google Fonts (this website only)

This page loads fonts from Google Fonts, which may log your IP address. This applies to the website only, not the app.

7. International Data Transfers

SD Solutions NC is based in the United States (North Carolina). For EU/EEA users, transfers to third-party services are protected as follows:

  • Apple: relies on Standard Contractual Clauses (SCCs) and the EU–US Data Privacy Framework.
  • Google: relies on SCCs and the EU–US Data Privacy Framework.
  • wger.de: hosted in Germany — data does not leave the EEA.

For Canadian users, transfers to the United States are made pursuant to PIPEDA's cross-border transfer provisions, with reliance on contractual protections with our service providers.

8. How Long We Keep Your Data

  • Active use: Data is stored on your device and in your private iCloud account for as long as you use the app.
  • Sign out: All data is permanently deleted from your device and iCloud when you sign out via Settings → Sign Out. iCloud deletion typically propagates within minutes.
  • App deletion: Deleting the app removes all local data. iCloud data remains until you sign out first, or delete it via iOS Settings → Apple ID → iCloud → Manage Storage.
  • Keychain: Account credentials are deleted on sign out. Some iOS versions may retain Keychain items after app deletion; remove these via Settings → Password & Security if needed.

9. Your Privacy Rights

To exercise any right, contact us via akarshsingh.com/contact. We will respond within 30 days (EU: within 1 month per GDPR).

EU/EEA Residents (GDPR)

  • Right of access (Art. 15): Request a copy of personal data we hold about you.
  • Right to rectification (Art. 16): Request correction of inaccurate data. Most data can be corrected directly in Settings.
  • Right to erasure (Art. 17): Request deletion. Exercise immediately in-app via Settings → Sign Out.
  • Right to restriction (Art. 18): Request we restrict processing in certain circumstances.
  • Right to data portability (Art. 20): Request your data in a structured, machine-readable format.
  • Right to object (Art. 21): Object to processing based on legitimate interests.
  • Right to withdraw consent (Art. 7(3)): Withdraw consent for health data processing at any time by revoking HealthKit permissions in iOS Settings or signing out.
  • Right to lodge a complaint: You have the right to lodge a complaint with your local EU data protection supervisory authority.

California Residents (CCPA/CPRA)

  • Right to know: Request disclosure of categories and specific pieces of personal information collected.
  • Right to delete: Request deletion (exercisable in-app via sign out).
  • Right to correct: Request correction of inaccurate information.
  • Right to opt out of sale or sharing: We do not sell or share your personal information for behavioral advertising.
  • Right to limit use of sensitive PI: We use health data only to provide app functionality.
  • Right to non-discrimination: We will not discriminate against you for exercising CCPA rights.

Canadian Residents (PIPEDA / Quebec Law 25)

  • Right to access: Request access to personal information we hold.
  • Right to correct: Request correction of inaccurate or incomplete information.
  • Right to withdraw consent: Withdraw consent subject to legal or contractual restrictions.
  • Right to complain: File with the Office of the Privacy Commissioner of Canada (priv.gc.ca). Quebec residents may also file with the Commission d’accès à l’information (cai.gouv.qc.ca).

Pursuant to Quebec Law 25, our Privacy Officer is Akarsh Singh. Contact details are provided in Section 13.

10. Children's Privacy

Worky is not directed at children. Users must be at least 13 years old (or 16 years old in the EU, per GDPR Article 8). We do not knowingly collect personal information from children under these ages. If you believe a child has provided personal information through Worky, please contact us immediately via akarshsingh.com/contact so we can delete that information.

11. Data Breach Notification

In the event of a security incident affecting your personal data:

  • EU/EEA users (GDPR): We will notify the relevant supervisory authority within 72 hours, and notify affected users without undue delay where there is a high risk to their rights.
  • US users (FTC Health Breach Notification Rule): We will notify affected users and the Federal Trade Commission within 60 days of discovering a breach involving personal health records.
  • Canadian users (PIPEDA): We will notify the Office of the Privacy Commissioner and affected individuals where a breach creates a real risk of significant harm.

12. Changes to This Policy

We may update this policy from time to time. For material changes, we will update the "Last updated" date and, where practicable, provide notice within the app. For significant changes affecting health data processing or your fundamental rights, we will provide at least 30 days’ notice before changes take effect.

13. Contact and Data Requests

For any privacy questions, data subject access requests, or concerns:

Privacy Officer: Akarsh Singh

Organisation: SD Solutions NC, North Carolina, USA

Contact: akarshsingh.com/contact

Terms of Service: See below

We aim to respond to all requests within 30 days.

Legal

Terms of Service

Last updated: May 2026  ·  Effective for all versions of Worky

1. Acceptance of Terms

By downloading, installing, or using Worky (the "App"), you agree to be bound by these Terms of Service ("Terms") and our Privacy Policy, incorporated herein by reference. These Terms constitute a legally binding agreement between you and Akarsh Singh, SD Solutions NC, North Carolina, USA ("we," "us," or "our"). If you do not agree to these Terms, do not use the App.

2. Eligibility

You must meet the following age requirements to use Worky:

  • United States and Canada: At least 13 years of age.
  • European Union / EEA: At least 16 years of age, per GDPR Article 8.
  • All other regions: The minimum age required by the laws of your country for consent to digital services, and in no case younger than 13.

By using the App you represent and warrant that you meet the applicable age requirement. If we learn that a user is under the applicable minimum age, we will delete their data promptly.

3. The Service

Worky is a personal workout tracking application that allows you to:

  • Create and manage custom workout days, exercises, and sets
  • Log workout completions and track personal records
  • Sync your data privately to your iCloud account via CloudKit
  • Search an open-source exercise database (wger.de)
  • Optionally read and write health data to Apple Health

Worky is provided free of charge with no in-app purchases, subscriptions, or advertising. We reserve the right to introduce paid features in the future; any such change will be communicated with reasonable notice and will not affect existing free features without separate agreement.

We may modify, suspend, or discontinue the App or any of its features at any time, with or without notice. We will not be liable to you for any such modification, suspension, or discontinuation.

4. Your Account

Worky supports sign-in via Apple ID, Google account, or Guest mode. Where an account is used:

  • You are responsible for maintaining the security of your Apple ID or Google account credentials. We are not responsible for loss or damage from unauthorized access to your account.
  • You may not share your account or use another person's account without their express permission.
  • You can delete all your data and terminate your use at any time via Settings → Sign Out, which permanently deletes all data from your device and iCloud account.

5. Health and Safety Disclaimer

IMPORTANT — READ BEFORE USE

Worky is a personal fitness tracking tool, not a medical device, and does not provide medical advice, diagnosis, or treatment.

You acknowledge and agree that:

  • Worky is for informational and personal tracking purposes only. Nothing in the App constitutes medical advice.
  • You should consult a qualified physician or healthcare professional before beginning any new exercise program, particularly if you have a pre-existing medical condition, injury, or health concern.
  • SD Solutions NC is not responsible for any injury, health complication, adverse physical event, or other harm that may occur as a result of exercise undertaken while using the App.
  • Heart rate zone calculations and BMI estimates are approximations based on general population formulas and are not a substitute for individualized medical assessment.
  • If you experience pain, dizziness, shortness of breath, or any unusual symptom during exercise, stop immediately and seek medical attention.

6. Acceptable Use

You agree not to use Worky to:

  • Violate any applicable law, regulation, or third-party right
  • Attempt to reverse engineer, decompile, or disassemble the App
  • Interfere with or disrupt the App or any third-party services
  • Transmit viruses, malware, or harmful code
  • Attempt to gain unauthorized access to any system or data
  • Use the App for commercial purposes without our written consent

7. Third-Party Services

Worky integrates with the following third-party services, each governed by their own terms:

We are not responsible for the content, policies, or practices of any third-party service.

8. Intellectual Property

The App, including its design, code, graphics, and content (excluding your personal data), is owned by Akarsh Singh, SD Solutions NC and protected by intellectual property laws. We grant you a personal, non-exclusive, non-transferable, revocable license to use the App on devices you own or control, solely for your personal, non-commercial use.

Your workout data, notes, and personal information remain entirely yours. We claim no ownership over content you create in the App.

9. Disclaimers

The App is provided on an "as is" and "as available" basis without warranties of any kind, either express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, accuracy, or non-infringement.

We do not warrant that the App will be error-free, uninterrupted, or free of harmful components. We do not warrant the accuracy of any information displayed, including exercise data sourced from wger.de or health estimates derived from user-entered data.

Some jurisdictions do not allow exclusion of implied warranties. In those jurisdictions, the above exclusions apply to the maximum extent permitted by law.

10. Limitation of Liability

To the maximum extent permitted by applicable law, SD Solutions NC and Akarsh Singh shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of data, loss of profits, personal injury, or property damage, arising out of or related to your use of or inability to use the App.

Because Worky is provided free of charge, our total cumulative liability for any claims arising from your use of the App shall not exceed USD $0 (zero dollars) or the minimum amount permitted by applicable law, whichever is greater.

Nothing in these Terms limits liability for death or personal injury caused by our negligence, fraud, or any liability that cannot be excluded by law. EU and UK consumers retain statutory rights that cannot be waived by these Terms.

11. Governing Law and Dispute Resolution

These Terms are governed by the laws of the State of North Carolina, USA, without regard to conflict-of-law provisions.

Before escalating any dispute, please contact us via akarshsingh.com/contact to seek an informal resolution.

Any legal action shall be brought exclusively in the state or federal courts of Wake County, North Carolina, USA, and you consent to personal jurisdiction therein.

EU/EEA consumers: Nothing in these Terms affects your right to bring proceedings in your country of residence or rely on mandatory consumer protection provisions of your local law. You may also use the EU Online Dispute Resolution platform at ec.europa.eu/consumers/odr.

Canadian consumers: Nothing in these Terms limits your rights under applicable Canadian provincial consumer protection legislation.

12. Changes to These Terms

We may update these Terms from time to time. For material changes, we will update the "Last updated" date and, where practicable, provide notice within the App at least 30 days before changes take effect. Continued use after the effective date constitutes acceptance. If you do not agree to updated Terms, stop using the App.

13. Contact

SD Solutions NC

North Carolina, USA

Contact: akarshsingh.com/contact

Privacy Policy: See above