Privacy policy

OTO is a lifting log made by Luis Graterol Palumbo. This policy says what OTO collects, why, who can see it and how to remove it.

Without an account

Your log (every lift, note, workout and setting) is stored only on your phone and is never sent to us. Export and import move it as a file you choose where to keep.

Usage analytics

To learn what makes OTO easier to use, the app sends us short usage events, with or without an account: for example that the app was opened, that onboarding was finished and how long the first lift took, that a lift was logged on a given day, that a workout was started, shared or sent, or that you followed someone. Each event carries a random ID made for this copy of the app, the app’s version, your phone’s system (iOS or Android), the language and unit you use, and whether you are signed in. Events never contain your lifts, notes, name, email, username or anyone else’s ID.

While you are signed in, our server also records which app IDs belong to your account, so we can study usage together with the account data described below. That link is deleted with your account. You can turn usage analytics off at any time in Settings → Share anonymous usage.

With an account

An account puts your best lifts on the rankings, keeps your log the same on every phone you sign in on, and lets you follow other lifters and share your training. To do that, our server stores:

• your email address, and your password through Amazon Cognito (we never see the password itself). If you continue with Apple or with Google instead, they send us your email address (with Apple, the one you choose, which can be a private relay address) and, the first time, your name; we receive no password and nothing else from those accounts;
• your profile: first and last name, username, profile photo if you add one, gender (men or women), date of birth, body weight, height, gym and preferred units;
• for each ranked movement, your best set (weight, reps, date) and the scores computed from it, plus a history of your new bests with your body weight at the time;
• your whole log: every lift (with its notes, RPE and how it felt), workout, own movement and manual 1RM, so it comes back on any phone you sign in on;
• the people you follow, your posts, and the likes and comments you leave;
• gym requests you send (gym name, city, country, link), reports you send, and the people you block.

Who sees what

Other OTO users see your first and last name, your username and your profile photo, your best set for each ranked movement and its scores, on the boards of your gym and of all OTO. Being on your gym’s board shows which gym you train at.

Everyone on OTO can see who you follow and who follows you. Once you turn sharing on, your training days are posts that everyone on OTO can see: each day’s lifts, with their notes, RPE and how they felt, and the likes and comments on them. You can keep a day from being posted, delete a post, or turn sharing off in Settings. Your comments are seen by anyone who can see the post.

Your email, date of birth, height and body weight are never shown. Your body weight is used to compute the bodyweight-adjusted score (DOTS), which is shown.

We read reports and gym requests to act on them. We do not sell your data, show ads, or track you across other apps or websites.

Why we use it

To run your account and the rankings, to place your lifts among lifters of your category, age and body weight, to review reports, and to study the lifts in aggregate to improve the levels and percentiles. In the EU, the legal basis is your consent when you create the account, and the agreement to provide the service.

Services that process it

Amazon Web Services stores and serves the account data and the usage events, in the United States (Ohio). PostHog, in the United States, receives a copy of the usage events to chart them; it gets the random app ID only, never your account or your IP address, because our server sends the events, not your phone. Expo delivers app updates; when the app checks for one, Expo sees your IP address and the app’s version, not your data. Notifications go through Expo and then Apple (on iPhone) or Google (on Android), who see each notification’s text and a code for your phone.

How long we keep it

As long as your account exists. When you delete your account (Profile → Account → Delete account), your profile, bests, history, blocks, log, posts, follows, likes and comments are deleted at once, along with your sign-in. Backups hold copies for up to 35 days, and server error logs are kept for 14 days. Reports and gym requests you sent are kept for up to 12 months for review. Usage events are kept for 25 months; once your account is deleted they can no longer be tied to you.

Your rights

You can see and correct your profile in the app, and delete your account there at any time. You can also ask us for a copy of the data the server holds about you, or to correct or delete it. In the EU you may complain to your data protection authority (in Spain, the AEPD).

Children

You must be at least 13 to create an account, or older where your country requires it to consent to the use of your data. If you learn that a child has given us their data, tell us and we will delete it.

Changes and contact

If this policy changes, the date below changes. Questions, requests about your data, or problems: write to luisgraterol97@gmail.com.

Last updated: November 1, 2026