LastRep Privacy Policy
Effective date: 29 October 2026
Last updated: 29 October 2026
1. Who we are
1.1. This Privacy Policy explains what personal data is processed when you use LastRep, the iPhone app for strength training, and the related websites and services (together, the "Service"). It explains why the data is used, who receives it, how long it is kept and what your rights are.
1.2. The controller of your personal data is Individual Entrepreneur Renat Shakirov, an individual entrepreneur registered in Georgia under identification number 305811501, with the registered address Ferdinand Tavadze Street 3, Building 5, Vake District, Tbilisi, Georgia ("we", "us", "our"). You can contact us about anything in this Privacy Policy at shelbulab@gmail.com.
1.3. Please read this Privacy Policy together with our Terms of Use.
1.4. LastRep is for adults. You must be 18 or older to use it (see section 11).
2. The short version
- No account. LastRep has no sign-in, and we do not give you a user ID.
- Your training stays on your iPhone. Your plan, workouts, sets, ledger, food and water logs, body weight, progress photos and settings are stored on your iPhone. We do not receive them.
- Health data stays between your iPhone and Apple Health. If you connect Apple Health, the exchange happens on your iPhone. We never receive your Health data, and it is never used for advertising or marketing.
- No ads and no tracking. The app contains no advertising software and does not use the advertising identifier. We do not sell your data.
- What does leave your iPhone: a request for the latest exercise catalog to our server, the food searches and barcodes you look up (sent directly to Open Food Facts), and, if you subscribe, your App Store transactions (handled by Apple and our subscription service). Section 6 explains each one.
3. Data that stays on your iPhone
3.1. The app stores the following on your iPhone, in the app's own storage:
| Category | What it includes |
|---|---|
| Setup answers | Your goal, training experience, training days, where you train, the lifts you entered, what tends to knock you off a plan, your units, and the body details used to estimate your calorie and protein targets: sex (for the calorie formula only), birth year, height, current weight and goal weight. |
| Training | Your block, planned and logged sessions, sets, loads and reps, rest times, and your ledger of settled and owed days. |
| Food and water | Foods you log, portions, saved foods and meals, and water. |
| Body | Body weight entries and progress photos you take or choose. |
| Settings | Your preferences, targets and reminder times. |
3.2. We have no access to this data. It is not sent to our servers or to anyone else, except for the specific lookups and services described in section 6.
3.3. If you back up your iPhone to iCloud or to a computer, the app's data is included in that backup, as for other apps. Those backups are governed by Apple's terms and privacy policy and by your own settings.
3.4. You can delete this data at any time by deleting the app. Where the app offers it, Settings also lets you export your data or delete it without removing the app.
4. Apple Health
4.1. Connecting Apple Health is optional. If you allow it, LastRep writes your strength workouts to Apple Health, and reads and writes your body weight, so that a reading from a connected scale appears in the app.
4.2. This exchange takes place on your iPhone through Apple's HealthKit. We never receive your Health data. It is not used for advertising, marketing or any other purpose than the features you use in the app, and it is not shared with anyone.
4.3. You can change or withdraw access at any time in the Health app or in iOS Settings, under Privacy & Security, Health.
5. Camera, photos and notifications
5.1. Camera. If you allow camera access, the app reads barcodes and nutrition labels on your iPhone. The image is processed on the device and is not stored or sent anywhere. Only a barcode's number is sent to Open Food Facts to look the product up (section 6.2).
5.2. Progress photos you take or choose are stored in the app on your iPhone and are not uploaded.
5.3. Notifications and Live Activities, such as rest timers and session reminders, are scheduled on your iPhone. We do not send you push notifications and do not receive a notification token.
6. Data that leaves your iPhone
6.1. Exercise catalog. The app asks our server at api.lastrep.shelbu.digital for the latest version of the exercise catalog. The request contains no personal data, but, like any connection on the internet, it reaches our server with your IP address. Our server records the IP address, the time, the address requested and the result in a technical log, which is used only to operate and secure the Service and is overwritten automatically (see section 9).
6.2. Food lookups. When you search for a food or scan a barcode, the app sends the search text or the barcode number directly from your iPhone to Open Food Facts, an independent non-profit database based in France, to find matching products. Open Food Facts receives that request with your IP address, and its own privacy policy applies to it. We do not receive your searches, and no other data about you is sent with them. Product data from Open Food Facts is available under the Open Database License.
6.3. Purchases. Subscriptions are sold through the Apple App Store. Apple processes your payment and provides the app with information about your transactions, such as the product, the date and the subscription status. We never receive your payment card or bank details.
6.4. Subscription service. The app uses Adapty, a third-party subscription service, to show subscription offers, check your subscription status and measure how purchases and subscriptions perform. It receives an identifier generated for the app on your iPhone (the identifier for vendor) and an installation identifier, your device model, operating system and app version, your locale, time zone and App Store storefront, and your App Store transactions. We have disabled the collection of advertising identifiers and IP addresses by this service. It is not used for advertising or to track you across other apps or websites, and it receives none of your training, food, body or Health data.
6.5. Websites. The websites on which this Privacy Policy, the Terms of Use and our support pages are published do not use cookies, analytics or tracking technologies, and our web server does not log visits.
6.6. No analytics in the app. Apart from the subscription service in section 6.4, the app contains no analytics or crash-reporting software. If we add privacy-preserving analytics or crash reporting, we will update this Privacy Policy before that version of the app is released.
7. Purposes and legal bases
| Processing | Purpose | Legal basis (EEA, United Kingdom, Georgia) |
|---|---|---|
| Technical server logs (section 6.1) | Delivering the exercise catalog, and keeping the Service secure and working | Our legitimate interest in operating and securing the Service |
| Food lookups (section 6.2) | Finding the foods you search for or scan | Performance of our contract with you (the Terms of Use) |
| Purchases and the subscription service (sections 6.3 and 6.4) | Selling, providing and managing your subscription; measuring how subscriptions perform | Performance of our contract with you; our legitimate interest in understanding how our subscriptions perform |
| Correspondence | Answering your messages and support requests | Our legitimate interest in responding to you; performance of our contract with you |
| Legal requests | Complying with the law and establishing, exercising or defending legal claims | Legal obligation; our legitimate interests |
8. Who receives personal data
8.1. Personal data is disclosed only to:
(a) our hosting provider, Hetzner Online GmbH, which operates our servers in Germany on our behalf;
(b) Adapty, our subscription service, which receives the data described in section 6.4 and the notifications Apple sends about purchases and subscriptions;
(c) Apple, in connection with App Store purchases and Apple Health, whose processing is governed by its own privacy policy;
(d) Open Food Facts, which receives your food searches and barcodes directly from your iPhone (section 6.2) and is not our processor;
(e) public authorities, courts and other parties, where disclosure is required by law or is necessary to establish, exercise or defend legal claims, or to protect the rights, property or safety of our users, the public or ourselves; and
(f) a successor to our business in the event of a merger, acquisition or transfer of assets, on terms consistent with this Privacy Policy.
8.2. Our processors act only on our documented instructions and are bound by obligations of confidentiality and security.
9. Retention
| Data | Retention period |
|---|---|
| Data on your iPhone (section 3) | Until you delete it or delete the app; we never hold a copy |
| Server logs, including IP addresses | Overwritten automatically as the log rotates, usually within a few weeks |
| Subscription service data | Held by the provider for as long as we use the service; on request, we will have the data linked to your device deleted |
| Purchase and transaction records | Held by Apple, and by us where we receive them, for the period required by tax, accounting and consumer protection law |
| Correspondence | For as long as needed to answer you, and then for up to two years in case of follow-up questions |
10. Your rights
10.1. Data on your iPhone is under your control: you can view, change, export or delete it in the app, or delete it by deleting the app. Because we never receive it, we cannot access, correct or delete it for you.
10.2. Individuals in the EEA, the United Kingdom and Georgia. Subject to the conditions and exceptions provided by applicable law, you have the right to: (a) access the personal data we process about you; (b) have inaccurate data rectified; (c) have your data erased; (d) restrict its processing; (e) object to processing based on our legitimate interests; (f) receive the data you provided to us in a portable format; and (g) withdraw consent at any time, where processing is based on consent.
10.3. To exercise these rights, please write to shelbulab@gmail.com. Because LastRep has no accounts, we may need information that lets us find the data concerned, such as the date and approximate time of a request, or an App Store transaction identifier. We will respond within one month, which we may extend by up to two further months for complex requests, in which case we will tell you.
10.4. You may lodge a complaint with a supervisory authority, in particular in the country where you live or work or where the alleged infringement took place. In the United Kingdom, this is the Information Commissioner's Office. In Georgia, where we are established, it is the Personal Data Protection Service of Georgia, and our processing is also subject to the Law of Georgia on Personal Data Protection.
10.5. Residents of the United States. If you live in California or another US state with a comprehensive consumer privacy law, you have, subject to applicable exceptions, the right to know the personal information we collect, use and disclose and to obtain a copy of it, to request its deletion and correction, and not to be discriminated against for exercising these rights. In the preceding 12 months we have collected: identifiers (IP address and device identifiers); commercial information (App Store transactions); and internet or other electronic network activity information (server logs and device information). We do not sell personal information or share it for cross-context behavioral advertising, and we do not use sensitive personal information in a way that would give rise to a right to limit its use. You can make a request, or appeal a decision by writing with "Privacy appeal" in the subject line, at shelbulab@gmail.com.
11. Age
LastRep is intended for adults aged 18 or over, and the app asks for your birth year during setup. We do not knowingly collect personal data from anyone under 18. If you believe that someone under 18 is using LastRep, please let us know at shelbulab@gmail.com.
12. Security
12.1. Data stored by the app on your iPhone is protected by iOS data protection and your device passcode. All communication between the app and our server is encrypted in transit, and our server stores no personal data other than its technical logs.
12.2. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We will notify you and the competent authorities of a personal data breach where the law requires us to do so.
13. International transfers
13.1. Our servers are located in Germany. We operate from Georgia. Adapty and Apple may process data in the United States and in other countries whose laws may provide a different level of protection, and Open Food Facts is based in France.
13.2. Where we transfer personal data from the EEA or the United Kingdom to a country that is not recognized as providing an adequate level of protection, we rely on appropriate safeguards, such as the Standard Contractual Clauses adopted by the European Commission (with the UK International Data Transfer Addendum, where applicable) or, for recipients certified under it, the EU-US Data Privacy Framework. You can ask us for more information at shelbulab@gmail.com.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will show the date of the latest revision at the top and tell you about material changes in the app before they take effect.
15. Contact
Individual Entrepreneur Renat Shakirov
Ferdinand Tavadze Street 3, Building 5, Vake District, Tbilisi, Georgia
shelbulab@gmail.com