Muscler processes only the information needed for workout logging and social features. We do not use advertising trackers, facial recognition, HealthKit, or medical data. Precise location is used only during nearby place search and is not retained in workout records.
BONG YEAWON (the “Controller”) provides the Muscler app and muscler.net. This policy is version 1.2, announced and effective on 2026-07-29. We process data to create and authenticate accounts; provide profiles, workout logs, feeds, follows, groups and notifications; respond to reports; and protect the service. Data necessary to perform the service contract is processed on that basis, and consent is obtained where applicable law requires it.
| Category | Data | When | Purpose | Retention |
|---|---|---|---|---|
| Email account | Email, password hash, verification record, nickname, Muscler ID | Signup/login | Account management | Until deletion |
| Social login | Provider and user ID; email, name and profile image if provided | Kakao, Apple or Google login | Authentication | Until unlinking/deletion |
| Profile | Nickname, ID, bio, photo, privacy and avatar settings | User input | Profile/social features | Until deletion |
| Workout/fitness | Activity, time, duration, memo, selected place, visibility, photo | Creating a log | Workout log/feed | Until user deletes it/account |
| Community | Posts, comments, likes, follows, group membership/check-ins, reports | Feature use | Community/support | Until deletion or completion |
| Notifications | FCM installation ID/token, platform, settings and messages | Permission/login | Push delivery | Until token removal/deletion |
| Subscription | Store, product ID, verified transaction identifier, status and expiration | Plus purchase, restore, or status check | Purchase verification, entitlement, fraud prevention | Until subscription, dispute, and legal retention purposes end |
| Security logs | IP, request path, time, status, error type | Automatically | Security/reliability | Up to 30 days |
We access the camera or photo picker only when you choose to capture or select an image. We do not collect videos, contacts, advertising IDs, diagnoses, diseases, body measurements, biometric templates, HealthKit, or Health Connect data. Apple or Google processes Plus payment methods and full payment details; Muscler does not collect card or bank details. A purchase token or signed transaction is processed transiently for store verification but is not stored in raw form. We retain only the verified transaction identifier, subscription status, and expiration.
We delete data without undue delay when its purpose ends or you delete it. Account deletion permanently removes the account, profiles, social links, workout logs, uploaded files, comments, reactions, group activity and push tokens and cannot be undone. Verified subscription transaction identifiers and status may be isolated and retained only as long as needed for payment disputes, fraud prevention, or legal obligations, then deleted. We do not operate a separate backup archive.
We do not sell personal data or disclose it without consent or another lawful basis. AWS hosts the service in South Korea. Google LLC provides Firebase Cloud Messaging, Google Places, Google login, and Google Play billing; Apple Inc. provides Apple login and App Store billing. These providers may process installation identifiers, tokens, search queries, search-time location, selected login details, payment details, and product, transaction, or subscription information on global infrastructure including the United States. Kakao Corp. processes login and place-search data in South Korea. Gmail processes verification and support email. Transfers occur electronically when you use the relevant feature and are retained under the provider's terms or applicable legal periods. You may avoid optional features, though the feature will then be unavailable.
Posts are shown according to PUBLIC, FRIENDS or PRIVATE visibility. Upload only images you have the right to share. We do not perform facial recognition. Precise location is used transiently only when you request nearby place search and is sent to Kakao or Google for that search; it is not retained in workout records or request logs. A selected public place name and its public coordinates may be displayed. We do not collect background location.
Minimum access logs may be generated for up to 30 days. These public policy pages use no cookies or analytics and collect no new personal data. Muscler uses no personalized advertising, ad SDK, cross-app tracking, or ATT tracking.
You may update profile and privacy settings in My → Settings and permanently delete your account through Account → Delete Account. You may request access, correction, deletion, restriction, or withdrawal by app or email, subject to identity verification. See Account and Data Deletion.
Muscler is intended for users aged 14 or older and asks users to confirm this at signup. We do not knowingly allow children under 14 to create accounts and will delete an account if we learn it was created in error.
We use HTTPS, one-way password hashing, hashed authentication tokens, access controls, minimized logs, upload path restrictions, and dependency and error reviews.
Controller and privacy lead: BONG YEAWON
Contact: Muscler Privacy
Email: muscler.support@gmail.com
We generally provide 7 days' prior notice, or 30 days for material changes to user rights. Version history