Timber Privacy Policy
Montgomery Software Foundry Inc. develops Timber, a workout logging app. Questions about your information? Email [email protected].
What we collect and why
- Account details: your account ID, username/profile name, email or phone number, and sign-in information, to manage your account.
- Training and injury information: workouts, exercises, sets, weights, reps, timing, splits, push-up challenge progress, and injury details and notes you enter. We use these to save your history and provide training insights.
- Social information: buddy relationships, requests, activity indicators, and Chops, to run Timber Buddies. Your username is searchable when social features are on; buddies can see training activity indicators, not your private injury notes.
- Device and service information: push notification tokens, installation identifiers, app/device details, crash reports, and network/security information such as IP addresses, to deliver notifications, fix problems, and prevent abuse.
- Information you submit: exercise names for catalog review and messages you email us, to maintain the catalog and respond to you. Approved exercise names may appear in the shared catalog.
Where information goes
Your phone keeps local workout data and an active-workout draft. Saved account data syncs to Google Firebase. Firebase also handles sign-in, app integrity checks, and Crashlytics diagnostics. Cloudflare runs Timber’s API. Expo and Apple/Google notification services deliver push notifications.
AI is optional and off by default. When you enable it, Timber sends training summaries, workout/split context, and active injury details, including notes, through its API to OpenAI for suggestions and insights. Turn it off in About → App to stop new AI requests. Turning it off does not erase earlier requests.
These providers process information to provide their services and may process it outside your country. We do not sell your personal data or use workout and injury information for advertising. Information may also be disclosed when required by law.
GitHub hosts these public policy pages and may log visitors’ IP addresses for security. Emails you send us are handled by our email service and used to respond to your request.
Security and retention
Timber uses encrypted network connections, account authentication, and access rules for private cloud records. No system can guarantee complete security. Workouts may also be visible in widgets or workout notifications on your device.
We keep account records while your account exists, unless you remove them or request deletion. Signing out or uninstalling the app does not delete your cloud account. Providers keep some diagnostic/security logs and backups under their own retention rules; deletion is not instant everywhere. See Firebase’s retention information and OpenAI’s data controls.
Firebase describes removal of deleted sign-in information from live and backup systems within 180 days, and keeps Crashlytics reports and identifiers for 90 days before starting removal. OpenAI normally retains abuse-monitoring logs for up to 30 days; some API features also retain request state, and legal or safety exceptions can extend retention. We keep support-request correspondence until resolved, unless a legal obligation requires otherwise.
Your choices and deletion
You can edit or remove training and injury records, export training history in About → App, turn off AI or social features, and manage notification permission in your device settings. Turning off social features hides your participation but retains buddy relationships. Blocks you make are removed when you delete your account. Reports you file about other users, including your account identifier, the reason and any note, are kept for moderation even after you delete your account. See the Community Terms.
Delete your account in About → Account → Delete Account, or request deletion by email without installing the app. We complete verified email requests within 30 days, removing your account and associated records we control. Shared exercise names may remain without account attribution. Provider logs and backups follow their retention rules. Contact us if deletion fails or you need help accessing or correcting your information.
Health information
Timber is not a medical device and does not provide medical advice, diagnosis, or treatment. Consult a healthcare professional for medical advice, diagnosis, or treatment.
Policy changes
We update this page when our practices change and revise the date above. Material changes to data use will be explained in the app, with consent where required.