Sprout Privacy Policy

Last updated: 2026-10-29

Sprout is a workout log made by Weitude Technology Co., Ltd. (緯途科技有限公司, Taiwan), which is responsible for the personal data described here. This policy says what Sprout collects, why, where it is kept, for how long, and what you can ask of us.

Without an account

You can use Sprout without signing in. Your workout log (exercises, weights, reps, how hard each set felt, the length of timed holds, and the time and time zone of each entry) is then stored only on your phone. We do not receive it.

Signing in is optional and only backs up your workout log. When you sign in, we receive and store:

an identifier Apple gives us for your Apple account, and the email address Apple shares, which may be a private relay address if you chose “Hide My Email”, together with the sign-in token Apple issues, which repeats them;
your workout log, uploaded from your phone with a random identifier for that phone;
for each sign-in session, the IP address and the device description your phone sends.

We use these only to keep your log backed up and to let you sign in again. Our servers run on Google Cloud in Taiwan (region asia-east1). Like every request to our servers, sign-ins and uploads are written to Google Cloud’s server logs, which include the IP address and are kept for 30 days.

Usage statistics

Whether or not you sign in, the app sends a few anonymous usage events to PostHog, an analytics service whose servers are in the United States: that the app was opened, that a set was logged, that a workout was finished (with how many sets and exercises it had), and which body region’s stage the character reached. Each event carries a random identifier created when the app is first opened, the app version and build, the phone’s maker and model, the operating system and its version, the phone’s language and time zone, and its screen size. PostHog uses your IP address to estimate a rough location. These events are never linked to your account and never include the exercises, weights or anything you type. We use them to learn how often people come back and which parts of the app work.

Sprout does not show ads, does not use your phone’s advertising identifier and does not share or sell your data to anyone else. Google Cloud and PostHog process this data only on our behalf, under contracts that require them to protect it at least as well as this policy does.

How long we keep it

Your backed-up log and account are kept until you delete your account. Deleting it (Companion tab, Delete Account) erases your account and its log from our servers at once and from your phone. Our database backups are kept for 30 days, so a deleted log disappears from them within 30 days. Usage statistics are kept while Sprout is operated, since they identify no account.

Your rights

Under Taiwan’s Personal Data Protection Act you can ask us to let you see or copy your data, to correct it, to stop collecting, processing or using it, or to delete it. Email support@weitude.com from any address and tell us which; for the account data, deleting the account in the app does it at once. If you do not sign in, we hold no account, email address or workout log of yours, and the app works the same.

Changes

If this policy changes, the new version is posted here with a new date.

Contact

Weitude Technology Co., Ltd. (緯途科技有限公司) support@weitude.com