Your training data is yours. RepCanvas keeps it isolated to your account, lets you export it any time as a single download, and lets you delete it permanently in two taps. This page covers what is stored, how to extract it, and how to remove it.
What RepCanvas stores
The data we hold falls into three categories. Identity and authentication: your email, password, and the consents you gave at signup. Training data: your programs, microcycles, exercises, prescribed sets, and every set you have logged. Account events: an audit log of significant actions on your account, including signup, deletion, and consent changes.
We do not store fitness-tracker imports, do not integrate with social platforms, and do not share data with advertising networks. The application surface is narrow on purpose.
Data isolation
Every query in the app filters by your account. You cannot see anyone else’s programs, sets, or history; no one can see yours. The shared exercise library is the one global surface, and it carries no user data - it’s a catalogue of lifts, not a record of who has done them.
Exporting your data
From the Profile tab, the Download my data action returns a single JSON file containing your profile, all programs (with nested microcycles, exercises, and sets), and your audit log entries. The download is generated on demand and arrives in seconds. Most accounts produce a file well under 10 MB.
The export is plain JSON, not a proprietary format. You can open it in any text editor, parse it programmatically, or hand it to a coach who wants to see what you have been training.
Deleting your account
From the Profile tab, Delete my account is a two-tap destructive action - one tap arms it, a confirmation modal completes it. Deletion removes your profile, all your programs, all your microcycles, exercises, sets, and the authentication record. The action is irreversible; there is no hidden archive and no recovery window.
The deletion event is recorded in the audit log immediately before removal, so the trail of “this account was deleted on this date” is preserved for compliance purposes - without retaining your training data.
Health data consent
The signup flow includes a Health Disclaimer covering RepCanvas’s processing of health-related data - body weight, training intensity, and similar fitness metrics qualify as health data under several jurisdictions. You can withdraw consent at any time from Profile → Withdraw health consent. Withdrawal is recorded in the audit log.
Sub-processors
RepCanvas relies on a small number of sub-processors. Each is named in the public privacy policy along with a link to its own privacy terms.
- Authentication provider - handles your login session and password reset flows.
- Application hosting and database - runs the application servers and stores your training data in a managed database.
- Transactional email - sends the waitlist confirmation, signup confirmation, password reset, and similar one-off emails.
- CDN, edge security, and DNS - fronts the marketing site and the application, plus the CAPTCHA challenge on signup.
- Error monitoring - captures application errors with personally-identifying fields scrubbed before transmission.
Data region
The current hosting regions for each sub-processor are documented in the public privacy policy linked from the application’s profile footer. The region list is the authoritative source; this page won’t claim specifics that could fall out of sync if a sub-processor is changed.
Where to read next
- Profile and settings covers the rest of the account surface - units, training preferences, identity.
- Sign up for RepCanvas explains the invite-only signup flow.