Privacy Policy — WeightCraft Raw
Last updated: 22 September 2026
WeightCraft Raw is a fitness tracker. It records what you eat, what you train and what your body is doing, works out calorie and macro targets from that, and lets you share some of it with friends if you choose to.
This policy describes what the app actually does, feature by feature. Where something is shared with other people, it says exactly who can see it and what has to be true first.
This app is not a medical device. It does not diagnose, treat or manage any medical condition. Talk to a doctor before making significant changes to how you eat or train.
The short version
- Your logs are yours. Meals, workouts, weigh-ins and measurements are private by default. Nothing you log is shown to anyone else unless you turn on a specific sharing feature described below.
- We do not sell your data, and we do not share it with advertisers or data brokers. There is no advertising in the app and no cross-app tracking.
- You can export everything you have logged, as CSV files, at any time, for free — subscribed or not.
- You can delete your account from inside the app, and it deletes your data.
- Under-13s cannot use the app. Account creation is refused.
Who we are
WeightCraft Raw is published by the developer of WeightCraft. The two apps share one account system, so if you use both, one sign-in and one set of logs covers both. They are otherwise separate apps with separate features.
For any privacy question, or to ask about the data held about you, contact us at the support address on the app's App Store listing.
What the app collects, and why
Your account
- Email address and password. Used to sign you in. Passwords are handled by our authentication provider and are never stored in a readable form.
- Display name. Shown to your friends and, if you turn on discovery, to other members.
What you log
Everything in this section is private to you unless a sharing feature below says otherwise.
- Meals — foods, portions, calories and macronutrients.
- Workouts — exercises, sets, reps, weights, durations and distances.
- Body measurements — weight, body-fat percentage and circumference measurements, with the dates you recorded them.
- Notes you write on a workout. These are never shown to anyone else, including friends. They are written privately to yourself and stay that way.
What we need to calculate your targets
- Date of birth, biological sex, height and activity level. Calorie and macro targets cannot be calculated without these. Date of birth is also used to apply the protections described under Under-18s below.
- Whether you have a history of disordered eating, if you choose to tell us during setup. This is used only to apply those same protections. It is never shown to anyone, never used for any other purpose, and the app never states it back to you or explains itself in terms of it.
Health data from Apple Health
If you grant permission, the app reads four types of data from Apple Health:
| Type | Used for |
|---|---|
| Steps | Your daily step count and the friends step board |
| Sleep analysis | Nightly sleep totals in your own analytics |
| Workouts | Importing sessions you recorded elsewhere |
| Active energy | The calorie figure on an imported workout |
The app only ever reads from Apple Health. It never writes to it, and it requests no permission to do so.
Health data is used to provide the features above. It is never used for advertising, never sold, and never shared with third parties for their own purposes.
You can withdraw this permission at any time in the Health app, under Sources → WeightCraft Raw. The app keeps working without it; step counts and imported workouts simply stop updating.
Purchases
If you subscribe, Apple tells us that a valid subscription exists and when it expires. We store that record so the app knows what to unlock.
We never see your payment details. Card numbers, billing addresses and everything of that kind stay with Apple and never reach us.
Analytics
The app records which features are used — for example that a meal was logged, or a workout was completed — so we can tell which parts of the app people actually use.
These events carry no health values. They record that something happened, not what it was: no weights, no calorie figures, no measurements, no food names. Events are keyed to a random account identifier.
This is first-party analytics. Nothing is shared with advertising networks or data brokers, and we do not track you across other apps or websites. The app therefore never shows the App Tracking Transparency prompt, because there is nothing to ask about.
What other people can see
This is the part worth reading closely. Everything here is off until you turn it on, except where noted.
Friends
Friendship is mutual — someone has to send a request and the other person has to accept. There is no "follow": nobody can attach themselves to you without your agreement.
Accepted friends can see: your display name and level, your profile photo, your step count, posts you write, workouts you logged today, and your lifetime workout count.
Friends cannot see your weight, body-fat percentage, measurements, calorie targets, meals, workout notes, or the personal-record status of any lift.
The feed
Posts you write are visible to your accepted friends, along with replies and reactions. Posts are checked by a filter before they are published, and posts that reach people who are not your friends are checked more strictly.
You can delete any post you have written.
Discover — off by default
If you turn on Discoverable in settings, two things become true:
- Your profile — name, level, bio, tags and training rhythm — appears in a directory other members can browse.
- Posts you write become visible to people who are not your friends, in a Discover feed.
This applies to posts you have already written, not only new ones. The app tells you this before you turn it on, and the setting can be turned off again at any time, which removes you from both.
The directory never shows your weight, body-fat percentage, measurements, calorie targets, goals, personal records, or your location.
Profile photos — friends only, always
Your profile photo is visible only to accepted friends. Everyone else — the directory, the step board, people viewing your profile who are not friends — sees your initials instead. This is enforced on our servers, not just in the app.
Photos are re-encoded on your device before upload, which removes embedded metadata including GPS location. A photo you took at home does not carry where you took it.
Today's macros — off by default, and gated four ways
You can choose to show today's macro progress on your profile. If you do, it is visible only when all four of these are true:
- The viewer is an accepted friend, and neither of you has blocked the other.
- You turned the setting on.
- You are over 18 and not flagged for disordered eating.
- The viewer is over 18 and not flagged for disordered eating.
The fourth exists because your consent cannot protect somebody else. You can choose to show percentages, amounts, or both — the app explains what each reveals before you pick.
Sharing items
You can send a saved food, meal, exercise or routine to a friend. They receive a copy. Once they accept it, it is theirs — later edits you make do not reach them, and it does not disappear if you delete yours.
Blocking and reporting
You can block or report any member from their profile. Blocking is symmetric: neither of you sees the other's posts, profile photo, or profile details, and neither can send the other anything. Reports are reviewed and acted on.
Under-18s
- Under-13s cannot create an account. Account creation is refused at the date-of-birth step.
- If you are under 18, your calorie target is set to maintenance and cannot be set lower. This is not a setting you can override.
- Under-18s are excluded from Discover in both directions — they do not appear in the directory and cannot browse it, and their posts are not shown to strangers.
- Monthly reports are not available to under-18s.
These protections are applied on our servers using your date of birth, not by the app asking nicely.
Where your data is held, and who processes it
| Who | What they handle |
|---|---|
| Supabase | Hosts the database, authentication and file storage where your account and logs live |
| Apple | Payment processing, subscription status, and Apple Health on your device |
| PostHog | First-party product analytics — feature events only, no health values |
| Open Food Facts | Food search. A search term you type is sent to look up a product; nothing about you is sent with it |
These providers process data on our behalf, under contract, and are not permitted to use it for their own purposes.
Data is stored on servers in the United States. If you use the app from outside the US, your information is transferred there.
How long we keep it
We keep your data while your account exists, because it is what the app shows you — a weigh-in from two years ago is the point of a weight chart.
When you delete your account, it is deleted. Your logs, targets, posts, replies, reactions, profile, discovery listing, shared items, saved routines, programmes, subscription record, and your profile photo are all removed.
Two honest exceptions:
- Copies of items you shared with a friend who accepted them are theirs and stay in their library. They contain no information about you.
- Backups may retain data for a short period before being cycled out.
Your choices and rights
- Export your data. Settings → Your Data → Export My Data writes everything you have logged to CSV files. Always free, never limited.
- Delete your account. Settings → Delete Account. It cannot be undone.
- Correct your information. Settings → Profile.
- Turn off discovery, macro sharing, or Apple Health access at any time.
- Access, correction, deletion, portability and objection. Depending on where you live you may have these rights by law. The export and delete controls above satisfy most of them immediately; for anything else, contact us.
You do not need a subscription for any of this. Export and deletion are free and always will be.
Security
Connections are encrypted in transit. Access to your data is enforced on the database itself, per row — the app cannot request another person's information even if it asked. Session credentials are stored in the iOS Keychain.
No system is perfectly secure, and we will not claim otherwise. If we become aware of a breach affecting your data, we will tell you.
Changes to this policy
If this policy changes in a way that affects what is shared or who can see it, we will say so in the app rather than only updating this page.
Contact
Questions about this policy, or about the data held about you: use the support address on the app's App Store listing.