jackedsoon

privacy policy

jacked soon ("we", "us", "our") is a fitness tracking app operated by jelmer de boer, based in the netherlands. this policy explains what personal data we collect, why we collect it, and your rights regarding that data.

1. what data we collect

we collect the following data when you use jacked soon:

• account data: your email address, display name, experience level, and profile photo (optional).
• body data: body weight, measurements (chest, waist, hips, bicep, thigh, neck), and progress photos you choose to upload.
• workout data: exercises, sets, reps, weight lifted, rpe (rate of perceived exertion), and workout notes.
• preferences: workout schedule settings, muscle priorities, and plan defaults.
• technical data: session tokens stored in a secure cookie, and server-side logs (ip address, user agent) retained for up to 30 days for security purposes.

2. how we use your data

• to provide and personalise the jacked soon workout suggestion service.
• to send you magic-link login emails (no password required).
• to calculate your strength progress and body composition trends.
• to improve the app based on aggregated, anonymised usage patterns.

we do not sell your data. we do not use your data for advertising.

3. third-party services

we use the following third-party services to operate jacked soon:

• postmark – transactional email delivery (login links). your email address is shared with postmark solely to deliver emails. postmark privacy policy
• stripe – payment processing. your payment details are handled entirely by stripe and are never stored on our servers. stripe privacy policy
• google oauth – optional sign-in with google. if you use this, google shares your email address and name with us. google privacy policy
• google recaptcha – bot protection on sign-up forms. subject to google's privacy policy.
• simple analytics – privacy-first, cookieless analytics. no personal data is collected by simple analytics and no cookie is set. simple analytics privacy policy

4. cookies

we use a single first-party session cookie to keep you logged in. this cookie is strictly necessary for the service to function and contains only a random session token — no personal data. no third-party tracking cookies are used.

simple analytics does not use cookies. no cookie consent banner is required for our analytics.

5. data retention

your data is stored for as long as your account is active. if you delete your account, all your data — including workout history, body progress entries, and uploaded photos — is permanently deleted immediately.

6. your rights (gdpr)

if you are located in the european economic area, you have the following rights:

• access: request a copy of all data we hold about you.
• portability: export your workout data as csv from your account settings.
• erasure: permanently delete your account and all data from your account settings.
• rectification: update your profile data at any time from account settings.
• objection / restriction: contact us if you wish to object to or restrict any processing.

to exercise any right, or if you have a privacy concern, email us at hello@jackedsoon.com.

7. data security

your data is stored in an encrypted database on servers within the european union. all traffic is transmitted over https. session tokens are stored as secure, httponly cookies. we do not store passwords.

8. children

jacked soon is not intended for users under 16 years of age. we do not knowingly collect data from children.

9. changes to this policy

we may update this policy from time to time. we will notify registered users of material changes by email. continued use of jacked soon after changes constitutes acceptance of the updated policy.

10. contact

for any privacy-related questions, contact us at hello@jackedsoon.com.

← back to jackedsoon