Privacy policy

Big Biceps is a training app. You are the account holder via Google; we process data so workouts, crew and notifications can work.

Google sign-in stores your email, name and optional avatar. In the app we keep nickname, coach, body metrics (sex, birth year, height, weight, goal), plans, set history, pets, character cosmetics and preferences (language, rest, reminders).

If you enable push, we store a browser push subscription. Workout reminders, weigh-in reminders and the crew horn use that permission.

External calendar uses a secret .ics URL. Anyone with the link can see training days from your active plan. A new link invalidates the old one.

Crew: nickname, level and streak are visible to friends unless you hide your profile. Chats and invites stay between you. Workouts in the friends feed follow session visibility (friends / private / public).

Data is hosted with Vercel and Supabase. We do not sell it. You can access, correct or delete it — download a copy or delete the account in Settings → Account, or write via Settings → Contact.

Deleting the account removes your profile and related training data. Your Google login outside this app stays with Google.

Export (GDPR art. 15 and 20): in Settings → Account you can download a JSON copy of your account data. Exercise and body weights in the file are kilograms. The .ics calendar token and push subscriptions are not included.

Public profile (/u/username) and share links (/s/token) are opt-in. A public profile shows character, level, streak and workouts marked public — without set details. A share link shows one workout card; private sessions have no working link.