Awood · Legal
Awood is a personal training and nutrition tracker. It records what you lift, what you weigh and what you eat, and it does nothing else with that information.
Your training data belongs to you. It is stored in your own account, readable only by you, and never sold, used for advertising, or given to a third party. There is no analytics SDK and no tracking. You can delete everything from inside the app at any time, permanently.
If you add a friend, they see your name, your daily step count, the step goal that count is measured against, and your streak, and nothing else. Not what you lift, weigh or eat. That only happens if you send someone a link, and you can undo it.
On iPhone, Awood asks once for Motion & Fitness access so it can count your steps from the phone's own motion sensor. It reads your step count and nothing else, writes nothing, and you can say no. Everything that is not steps then works exactly the same, and Apple Health can supply your steps instead.
Awood runs while it is closed only if you ask it to. If you connect Apple Health and turn on a step, check-in or friend notification, iOS wakes Awood when new steps are recorded, at most once an hour, and for a few seconds it reads your steps, checks your friends' step counts if Friends is on, saves today's count to your account and shows any notification that is due. Without both, it does nothing while closed. No notification comes from a server. The detail is below.
If you also choose to connect Apple Health or Health Connect, Awood reads three figures from it (steps, walking distance and exercise minutes) and writes nothing back. That is optional and off until you turn it on.
The rest of this page sets out the detail.
Awood operates this app and is responsible for the information described below.
Contact: hello@awood.app
Only what the app needs in order to work. There is no hidden collection. Nothing is gathered while you are not using the app, except in the one case you can switch on and off yourself, set out under While Awood is closed. Even then it is the same step figures, never anything new.
| Data | Why it exists | Provided by |
|---|---|---|
| Email address | Signing in, and recovering your account | You, at sign-up |
| Password | Signing in. Stored only as a salted hash, never in readable form, and never visible to us | You, at sign-up |
| Training logs | Weight, reps or seconds for every set, the core function of the app | You, as you train |
| Bodyweight readings | The weekly trend chart | You, once a week |
| Body measurements | Waist, arm, shoulder and thigh trends | You, weekly or monthly |
| Daily habit ticks | The non-negotiables you choose to track, and which you ticked each day | You, daily |
| Steps | The daily activity ring, the weekly chart, your streak, and what a friend sees if you add one | Your iPhone's motion sensor, if you allow it, or Apple Health or Health Connect, if you connect one. Steps cannot be typed in |
| Walking distance | The distance tile | Apple Health or Health Connect, if you connect one. Without one, the tile shows an estimate worked out on screen from your steps and height, which is not stored |
| Exercise minutes | The active-minutes tile | Apple Health or Health Connect, if you connect one; or you, by hand |
| Water intake | The daily hydration target | You, as you drink |
| Session check-ins | How your back and shoulder felt after training, so load can be adjusted sensibly | You, after a session |
| Progress photos | Visual comparison over time. Optional; the app works fully without them | You, if you choose to add them |
| Display name | What friends see instead of your email address. Only exists once you use Friends | You, or seeded from your email and editable |
| Profile photo | Shown beside your name to you and to friends you have added. Optional; without one, the first letter of your name stands in | You, if you choose to add one |
| Your plan | The sessions, exercises and meals you add or import, the order and supersets you set for a session, and which meals you ticked as eaten each day | You, as you build and follow it |
| Goal and settings | Your goal, experience level and equipment, which decide what the home screen leads with; your step, water and active-minutes targets; your plan's start date and your empty bar weight; and your height if you give it, which is used only to estimate walking distance from steps | You, on the goal screen and in Settings |
Every iPhone counts steps in a small, low-power motion chip whether or not any app is open. Awood reads that count directly, which is what lets the ring on the home screen move as you walk rather than minutes later. This is the same approach a dedicated pedometer app takes, and it needs no health store at all.
The two are not added together. Apple Health already contains the steps your iPhone counted, so combining them would count every step twice. When both are on, Awood uses the higher of the two figures for each day, which is the phone's own count when it is ahead of Apple Health, and Apple Health's when it includes steps from an Apple Watch or another device the phone never saw.
Awood can read three figures from your phone's health store, Apple Health on iPhone or Health Connect on Android, so you do not have to type them in:
This is entirely optional and off until you turn it on. Unlike the step counter above, Awood never asks for a health store on its own. Until you connect one in Settings, the app never contacts it. If you never connect one, exercise minutes are simply typed in by hand, and steps come from the phone's own counter: they cannot be typed in.
Whether a day's steps came from the phone's counter or from a health store, the figures are saved to your own account in the same database as the rest of your training data, so your streak and charts keep working when you are offline or when a source has nothing for a day. They are only saved while you are signed in. A guest browsing the app has a live count on screen and nothing stored. They are covered by exactly the same protections as everything else on this page, and are removed with everything else when you delete your account.
Exercise minutes you type in by hand are marked as typed, and a later reading never overwrites them. Steps are only ever read, never typed.
You can disconnect at any time in Awood's Settings, which stops the app reading anything further. You can also revoke access outside the app: on iPhone in Settings → Health → Data Access & Devices → Awood, and on Android in the Health Connect app. Figures already saved to your account stay there until you change or delete them, the same as anything else you have logged.
Awood uses Supabase for its database,
authentication and file storage. Data is held in Supabase's Sydney region
(ap-southeast-2), on infrastructure operated by Amazon Web Services, and so
remains in Australia.
Every record is protected by row-level security, which means the database itself refuses to return one account's rows to another account. That is enforced at the data layer rather than by the app, so it holds even if the app is modified.
There is exactly one deliberate exception, and it only exists if you create it: adding a friend. Even then the friend does not gain access to your rows. A single function returns your display name, your profile photo if you set one, your daily step count and the daily step goal it is measured against, and nothing else. Everything described in Friends below.
Progress photos are the most personal thing Awood holds, and they are treated accordingly.
You can skip photos entirely. Nothing else in the app depends on them.
A profile photo exists to be seen by your friends, so it is kept apart from progress photos, in its own private bucket with its own rules: you can read it, and so can the accounts you have added as friends, through the same short-lived signed links, and nobody else. It is resized to a small square on your phone before it is uploaded, you can replace or remove it at any time from your profile, and removing a friend closes their access to it. It is deleted with your account.
Awood lets you share a link so you and a friend can see each other's step counts and streaks. It is off unless you use it: until you send a link or open someone else's, no other account can see anything of yours, and the app does not ask you to.
@ and lets you change it, so your address
is never shown to anyone.Everything else, without exception: your training log, the weight you lift, your bodyweight and measurements, your progress photos, your meals, your water, your habit ticks, your walking distance, your active minutes, and your email address.
This is not a promise the app keeps by remembering to. Adding a friend grants no access to any of your tables. A single database function returns a name, the location of your profile photo and a step count per day, and nothing else can be reached through a friendship at all.
Your invite link is personal and stays valid until you reset it, which means anyone you send it to, or anyone they forward it to, can add you. That is how a share link works, and it is why the exposure is kept to a name, a photo you chose to share, and a step count.
The preview a messaging app draws for your link carries the first word of your display name ("Join Awil on Awood"), so the person you sent it to knows who it is from. Nothing else about you is in the preview.
You can reset your link at any time from the Friends screen, which makes the old one stop working immediately. You can also remove a friend at any time; removal is mutual and immediate, and they are not notified.
Deleting your account removes your profile, your link and every friendship along with everything else. Friends stop seeing you immediately.
Every notification Awood shows is made on your phone. There is no push service, no device token, and nothing is sent to a server to create one. Each kind is off until you switch it on in Awood's Settings, and iOS's own Settings can turn all of them off at any time.
By default Awood does nothing while it is closed. It runs in the background in one case only, and only when both of these are true:
Then Awood asks Apple Health for background delivery of your step count. When new steps are recorded, iOS wakes Awood in the background. Apple allows this at most once an hour for step count, and iOS chooses the moment. Each time, for a few seconds, Awood:
Nothing else is read or sent: no location, no other health data, nothing to anyone other than our database host. It stops as soon as you switch those notifications off or disconnect Apple Health in Awood's Settings, and you can also withdraw Awood's access in the Health app (Sharing → Apps → Awood). There is no background running on Android.
No third party. Awood does not sell, rent, trade or disclose personal information to third parties for their own purposes, and there is no advertising business behind the app that would give it a reason to.
The one case where information reaches another person is one you start yourself: if you send someone your invite link, they see your name, your daily step count, your daily step goal and your streak. That is described in full under Friends.
The only party that processes data on our behalf is Supabase, as the hosting provider described above. We may disclose information where we are legally required to, for example under a court order or a lawful request from a regulator, and will tell you if that happens, unless we are prohibited from doing so.
Your data is kept for as long as your account exists. There is no automatic expiry, because a training log is only useful when it goes back years.
When you delete your account, everything goes at once: the account itself, every logged set, every weight and measurement, every habit tick, every step and distance figure, and every progress photo. Deletion is immediate and permanent. There is no recovery window and no archived copy. Encrypted infrastructure backups may retain data for up to 30 days before rotating out.
Deleting your Awood account removes Awood's copy of those figures. It does not touch Apple Health or Health Connect. That data is your phone's, not ours, and only you can remove it from there.
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you may:
Traffic between the app and the server is encrypted in transit with TLS, and data is encrypted at rest by the hosting provider. Passwords are stored only as salted hashes. Access to your records is enforced at the database level.
No system is perfectly secure, and we will not pretend otherwise. If a breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
Awood is a strength-training tool intended for adults and is not directed at children under 16. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will delete it.
If this policy changes in a way that materially affects how your information is handled, we will update the date at the top of this page and notify you in the app before the change takes effect. Continuing to use Awood after that point means you accept the revised policy.
Questions about this policy, or about your data: hello@awood.app.