Privacy policy
Effective 2 September 2026 · Hoist, package app.hoist.muscle, by Clearpoint Studios
Hoist is a strength training tracker. Your training lives on your phone. Two anonymous identifiers reach our side, one for the purchase check and one for anonymous product statistics, and this page says exactly what they are.
What stays on your device
The app writes these to its own storage on your phone and sends none of it anywhere:
- Every workout you log: exercises, sets, weights, reps, RPE and notes
- Your routines, templates and the session in progress
- Bodyweight, height, sex and units, which the score needs to be calculated
- Your Hoist Score, tiers, personal records and estimated one-rep maxes
- Settings such as rest defaults, language and the app lock
All of it is computed on the device. Uninstalling Hoist removes it.
What reaches our servers
| Purchase identifier | The app uses RevenueCat to check whether Hoist Pro is active. RevenueCat issues an anonymous app user ID on first launch and holds the subscription status behind it. The payment itself runs through Google Play, and we never see your card, address or Google account. |
|---|---|
| Install identifier and product events | A random ID generated on the device, sent with anonymous events about the onboarding steps, paywall views and purchase outcomes, plus the app version, the interface language, the platform and whether Pro is active. It tells us where people get stuck in the app. It carries no name, no contact detail and none of your training data. |
Both travel over HTTPS. Neither is used for advertising, neither is sold, and neither is combined with data from other apps. Hoist requests no advertising ID.
The optional training buddy
Hoist has an opt-in buddy feature. It stays switched off until you turn it on, and the app contacts no backend for it before you do. If you turn it on, a small profile is stored on our Supabase backend: a display name you choose, an anonymous account ID, an invite code, and the Hoist Score and tier you share with the people you invite. Your sets, routines and history stay on the phone. Turning the feature off and deleting the profile removes it from the backend, and the instructions are on the deletion page.
App lock
The PIN and the fingerprint or face unlock are handled by your device and its secure storage. We never receive either.
No advertising, no profiling
Hoist contains no ad network, no advertising ID, no cross-app tracking and no crash reporting SDK. Nothing you log is used to build a profile of you.
Children
Hoist is made for adults who train with weights and is not directed at children under 18.
Data retention
How long each thing is kept, and by whom:
| On your device | Kept as long as Hoist is installed. It goes when you uninstall the app or use "Delete all data" in the settings. We never receive a copy, so there is nothing on our side to keep. |
|---|---|
| Install ID and product events | Deleted automatically 400 days after they arrive. A scheduled job on the analytics service runs every day and removes everything past that date, including the install record itself once nothing newer has come from it. |
| Purchase identifier | Held by RevenueCat while the purchase is valid, because restoring Hoist Pro on a new phone is what the identifier is for. It goes when you ask us to delete it, and a lifetime purchase you delete cannot be restored afterwards. |
| Buddy profile | Held only while the profile exists. Disconnecting in the app removes it from the backend the same moment. |
When you ask for deletion, the data is removed and not kept afterwards, apart from short lived operational backups our hosting providers rotate out within 30 days. Requests are handled within 30 days, and the deletion page says how to make one.
Your rights
Under the GDPR you can ask what is stored about you, ask for it to be corrected or deleted, and object to its processing. The legal basis for the purchase identifier is performing the contract you entered when buying Pro, and for the anonymous product events it is our legitimate interest in seeing where the app fails people. Write to clearpointstudios@proton.me and you will hear back.
Processors
Google Play handles payments and distribution. RevenueCat holds the purchase status. Cloudflare hosts this website and the service that receives the anonymous events. Supabase stores the buddy profile if you switch that feature on. Each acts on our instructions and none of them receives your training data.
Changes
If this policy changes, the date at the top changes with it, and a change that affects what leaves your phone will be announced in the app before it takes effect.
Contact
Clearpoint Studios, clearpointstudios@proton.me