Updated September 22, 2026. Workout Pal is developed by Static Dev. Contact: staticdevmail@gmail.com.
Your routines, workouts, notes and body-weight entries are saved on your iPhone. The native journal is excluded from iCloud/device backups. Export a copy or enable optional encrypted cloud backup to protect against device loss.
Cloud backup is off by default. When enabled, your journal is encrypted on your device using AES-GCM before being sent over HTTPS to Cloudflare Workers and D1. The recovery key remains in your device Keychain; the service stores only encrypted data, a hash of the authentication credential, a revision and a timestamp. Anyone holding your recovery key can access or delete the backup. We cannot recover a lost key.
Cloudflare processes network information such as your IP address to deliver and protect the service, including rate limiting. The application does not store IP addresses in its database or enable request logging. No advertising or analytics SDKs are included.
You control notification permission. Reminder content may appear on your lock screen. Widgets display session counts and routine names; Live Activities display the active workout and set count.
Backups remain until you delete them in the app. Disabling automatic backup does not delete a previously stored copy. Exports contain readable training data; share them only with people you choose. Restoring preserves a local copy of the previous journal.
This development build does not read Apple Health data. The separately preserved openGym frontend has its own optional server/AI integrations; consult its notices before enabling them. Third-party exercise animations are not included in the native build.