Last updated 8 October 2026.
sweatsheet (the app, the website and the coach dashboard) is run by Matti De Grauwe, who is the data controller for the optional cloud account described below. Questions or requests about your data: [email protected].
Meals and macros, steps, workouts, routines and training programs, goals and any tested 1RMs you enter, saved and custom foods, and (if you log them) body weight and daily check-ins: hours and quality of sleep, energy, stress and the supplements you took, with your supplement list. In a browser or the installed web app this is the browser's local storage for this site. In the Android and iPhone apps it is the app's own storage. Uninstalling the app or clearing site data erases it. So does You → Goals & data → Erase all data.
The Android app is excluded from Android/Google cloud backup and from device-to-device transfer, so your log is not copied to Google Drive. To move data to another phone, use Export backup and Import backup. A backup file is stored wherever you save or send it.
If you connect Health Connect, sweatsheet reads your step count and nothing else. It never writes to Health Connect. Daily step totals are stored with the rest of your log: they are uploaded only if you turn on cloud backup, and shared only if you connect to a coach. You can revoke access at any time in Health Connect settings. Steps already copied stay in sweatsheet until you erase them.
The camera is used only while the scanner is open. Barcodes are read on the device, and no images are uploaded. Recording a technique video or taking a progress photo (see below) opens your phone's own camera app; a video is only uploaded if you send it to your coach, a photo once you add it to a check-in.
Searching the plain foods built into the app happens on your device. Food searches and scanned barcode numbers are also sent to Open Food Facts to fetch nutrition data, and product photos are loaded from its servers. Open Food Facts receives the search text or barcode and, as with any web request, your IP address. No account or health data is sent. Open Food Facts is an independent organisation with its own privacy policy.
You can create a cloud account (email address, password and name, or by signing in with Google or Facebook). Creating it uploads nothing from your log. Your data is only copied to the cloud after you tick Back up my food log, weight, steps, workouts and check-ins to my sweatsheet account, which is never ticked for you. You are asked when you create the account and the first time you sign in on each device, and every device keeps its own answer. With backup on, sweatsheet copies your data to a database hosted by Supabase in the EU (Ireland) and keeps it in sync while the app is open. Signing in to the same account on another device brings it back there. You → Goals & data → Turn off backup stops the uploads from that device.
A sign-in or password-reset link opened on a device that already holds data first shows which account it signs you in to, and uploads nothing unless you continue and agree to the backup.
To work with a coach you enter that coach's invite code in your cloud account. You are then asked for explicit consent to share your data with that coach. Your coach sees what is backed up, so connecting also turns on the backup if it was off.
What your coach can see: your name and email address, your full food log (every entry with its calories and macros), workouts (exercises, sets, weights and reps, and how hard you rated a session), steps, body weight if you log it, your daily check-ins if you fill them in (hours and quality of sleep, energy, stress and the supplements you took), your progress photos if you add any, and your settings: goals (including any tested 1RMs you enter), supplement list, routines, training program and saved foods. Your coach can also send you programs, targets (which can include a supplement list) and comments, and add their logo, which are stored in the same database. While you're connected, the app keeps a copy of your coach's name and logo on your phone to show them offline. Your coach cannot see other clients, and other coaches cannot see you.
Stopping: You → Coach → Disconnect ends your coach's access immediately. Your synced data stays in your cloud account until you delete it, and the backup carries on until you turn it off. Delete cloud account permanently erases your account and everything synced to it. Data on your phone is not affected by either.
With a coach, you can send them a video of an exercise from a workout, recorded in the app or picked from your gallery, so they can check your technique. Before it is uploaded, the video is converted on your phone to a smaller copy (720p) without sound. It is stored in Supabase Storage in the EU (Ireland), privately: only you and the coach you sent it to can watch it, through links that expire after an hour. Along with it we store which workout and exercise it belongs to, its length and size. You can share up to 10 videos (100 MB) at a time.
A video is kept only as long as it's needed for that review: until you or your coach delete it (You → Coach → Videos, or in the workout), and in any case all your videos are deleted when you disconnect from that coach or delete your cloud account. Deleting a workout or discarding the one in progress deletes its videos too. The original on your phone is not touched.
With a cloud account you can add progress photos: check-ins of up to three photos (front, side and back), taken in the app or picked from your gallery. The first time, you are asked to agree to keeping them in your account. Before a photo is uploaded, it is converted on your phone to a smaller copy (1440 pixels on the long side) without its metadata, such as location, time or camera model. It is stored in Supabase Storage in the EU (Ireland), privately, with a small preview of it and the date and pose you chose. Only you and the coach you are connected to can see them; a coach you connect to later sees the photos you added before too. You can keep up to 150 photos (50 MB).
Your photos are kept until you delete them (History → Progress photos), and in any case until you delete your cloud account, which deletes them all. Disconnecting from a coach ends that coach's access to them straight away. The originals on your phone are not touched.
Food logs, steps, workouts, body weight and check-ins (sleep, energy, stress, supplements) are health data under the GDPR. sweatsheet processes them in the cloud only with your explicit consent (GDPR Art. 6(1)(a) and Art. 9(2)(a)), which you give when you turn on cloud backup and, for sharing with a coach, when you connect to them. A technique video is shared with your consent too, given each time you choose to send one (Art. 6(1)(a)). Progress photos are kept with your consent too, given before your first one is uploaded. You can withdraw consent at any time by turning off backup, disconnecting or deleting your cloud account. Withdrawal does not affect processing that happened before.
You can access and take a copy of your data at any time with Export backup (technique videos and progress photos aren't part of it: watch videos under You → Coach → Videos and save photos from History → Progress photos; the originals stay on your phone), correct it in the app, and erase it with Erase all data (device) and Delete cloud account (cloud). You also have the right to object, to restrict processing and to data portability. For anything the app doesn't cover, contact us at the address above. You can also complain to your data protection authority (in Belgium: the Data Protection Authority).