1. Local-first security model
Gym Set Tracker does not use accounts or operate an application server. Workout information is processed and stored in private Android app storage. Removing the app’s ability to connect to the Internet reduces the paths through which the app itself could transmit workout data.
No software can promise absolute security. Device security, operating-system updates, physical access and the security of any Android backup provider remain important.
2. Data map
| Information | Location | Sent by app? |
|---|---|---|
| Exercises, templates, sessions and sets | Private app storage | No |
| Weights, repetitions, durations and notes | Private app storage | No |
| Unit, theme and timer preferences | Private app preferences | No |
| Optional Android backup copy | Controlled by Android and the selected backup provider | Not by the app |
3. Permissions and absent components
The app requests vibration for the rest timer. It does not request Internet, advertising ID, location, camera, microphone, contacts, shared storage or Health Connect permissions. It contains no account system, ads or analytics.
4. Backup and deletion
Android may include explicitly scoped app data in encrypted system backup or device transfer when enabled. PETANKA LTD does not operate that backup. In the app, Settings → Reset all data deletes workouts, templates and custom exercises from the local app database. Uninstalling the app normally removes its local data.
5. Reporting a security concern
Email hi@petanka.site with “Security report” in the subject. Include the app version, Android version, steps to reproduce and potential impact. Do not include exploit code in a public channel or send another person’s workout information.