This policy explains what Overload collects, why we collect it, how we use it, and the choices you have. Plain language, no dark patterns.
Overload Labs (“Overload,” “we,” “us”) builds an adaptive strength-training app. This Privacy Policy covers the mobile app, the website at overload.app, and any related services.
We designed Overload with a simple data principle: collect only what improves your training, keep it secure, and give you full control over deletion and export.
When you create an account we store your email address, a hashed password (or an Apple / Google Sign-In identifier), and an account creation timestamp.
During the compile funnel we collect information you provide: age range, gender, training experience, goals, obstacles, available equipment, schedule, and sleep patterns. This is used to generate your initial protocol.
Sets, reps, weights, rest durations, RPE, session timestamps, exercise selections, and any notes you attach. This is the core of the product and what powers adaptive progression.
If you upload progress photos, they are encrypted at rest and visible only to your account. We never use them to train public models.
App version, device model, OS version, locale, crash reports, and aggregated usage events (e.g., “session completed,” “set logged”). We do not collect precise location.
Subscription billing is handled by Apple (App Store) or Stripe. We receive a transaction identifier and status — we never see your full card number.
We do not sell your personal data. We do not use your photos or training data to train public AI models.
If you are in the European Economic Area or the United Kingdom, we process personal data under the following bases:
We share data only with the vendors required to operate the product. These include:
Each vendor is bound by a Data Processing Agreement limiting use to the service they provide. We may also disclose data when compelled by valid legal process, or to protect the rights, property, or safety of Overload, our users, or the public.
We keep account and training data for as long as your account is active. When you delete your account:
Regardless of where you live, you can always:
Residents of the EEA, UK, California, and similar jurisdictions have additional rights to object to processing, restrict processing, port data, and file a complaint with a supervisory authority. Reach us at privacy@overload.app.
Overload is operated from the United States. If you use the app outside the US, your data will be transferred to the US (or other regions where our vendors operate). We use Standard Contractual Clauses or equivalent safeguards where required.
Overload is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact privacy@overload.app and we will delete it.
The website uses a single essential cookie to remember your theme preference and session. We do not run third-party advertising trackers. The mobile app does not use web cookies. Product analytics events are IP-anonymized and never sold.
We will post material changes at this URL and notify active users in-app at least 14 days before they take effect. The “Last updated” date at the top of this page indicates the most recent revision.
Questions, requests, or concerns? Reach us at privacy@overload.app.
For EU residents, you may also contact our EU representative at eu-rep@overload.app.