Tockly Privacy Policy

Tockly ("we", "our", "us") is a free workout timer app for EMOM, AMRAP, HIIT and For time training, published by LW Data Labs Ltd, a company registered in England and Wales (company number 17048417, ICO registration C1934754). This policy explains what data Tockly handles when you use the app.

Our processing of any personal data is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where users are located in the European Economic Area (EEA), EU GDPR also applies.

1. What Tockly stores on your device

The app keeps the following locally, in Android's private app storage:

• Workout plans: names, formats, timings, exercises and target reps or weights.
• Session history: when you trained, for how long, rounds completed and the sets you logged.
• Settings: timer cues, countdown length, and your last quick-timer and shuffle choices.
• Sign-in session: if you create an account, the tokens that keep you signed in. These stay in app storage and are never passed to the web content inside the app.

You can save a copy to a file with Save backup in Your space. The file goes wherever you choose to save it. Uninstalling the app, or clearing its storage in Android's app settings, deletes everything stored on the device.

2. The optional free account

A free account lets you see your full workout history instead of the last seven days, and unlocks article import and the daily coach's pick. You can sign in with Google or with a six-digit code sent to your email. There are no passwords.

2.1 What the account stores

• Your email address, and if you use Google, the basic profile Google shares for sign-in (name, email and account identifier).
• Sign-in records kept by our authentication service, such as when you last signed in.
• Usage counts for article import and the coach's pick: the time of each request, whether it worked and its size, used to apply daily limits. The article text, links and notes you send are not stored.

Your workouts are not stored with your account. They remain on your phone.

2.2 Where it is held

Accounts run on Supabase, hosted in the European Union (Ireland). Sign-in codes are emailed through Resend.

2.3 Deleting your account

Use Delete account in Your space. This permanently deletes your account and the usage records linked to it. Workouts saved on your phone are not affected.

The lawful basis for account data is performance of a contract: we need it to provide the account you asked for.

3. Article import and coach's pick (AI)

If you share a workout article to Tockly, your phone downloads the page and sends its readable text to our server. If you ask for a coach's pick, the app sends your chosen focus, length, equipment, format and any optional note. In both cases the text is passed to Anthropic's Claude to turn it into a workout, and the result comes back to your phone for you to review before anything is saved.

We do not keep the article text, the link or your note after the request. Anthropic processes the request as our service provider under its commercial terms, which do not allow it to train its models on this data. These features only run when you use them, and only for signed-in accounts.

4. Advertising (Google AdMob)

Tockly is free and shows banner ads through Google AdMob on the Start, Plans and Progress screens. The timer screen has no ads. AdMob collects device and advertising identifiers in order to serve and measure ads. Google processes that data as an independent controller, and we never see your individual ad-interaction data. No workout data is shared with advertisers.

If you are in the UK, the EEA or Switzerland, Tockly asks for your consent before any personalised advertising is used, through Google's User Messaging Platform. You can accept, refuse, or choose which purposes and vendors you allow. Refusing does not stop the app working; the ads you see are non-personalised.

You can change your choice at any time with Ad privacy choices in Your space. You can also reset your advertising ID and control ad personalisation in your device's Google ad settings.

5. Ratings

After you have used the app for a while, Tockly may ask Google Play to show its rating card. Any rating or review you give goes to Google Play, not to us, and appears on the store under Google's terms.

6. Third-party services at a glance

7. What we don't collect

• No workout history, reps or weights on our servers.
• No location, contacts, camera or microphone access.
• No analytics or crash-reporting SDK.
• No health records. Tockly is a training timer, not a medical device, and does not give medical advice.

8. Your rights

You can ask us for a copy of the account data we hold, ask us to correct it, or ask us to delete it. Deleting your account in the app does this immediately. Data stored only on your phone is under your control and is removed when you uninstall the app. For data that Google processes as an independent controller, exercise your rights with Google directly. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. International data transfers

Account data is hosted in the EU. Google, Resend and Anthropic may process data outside the UK and EEA. We rely on their safeguards, including Standard Contractual Clauses or the UK International Data Transfer Addendum where applicable.

10. Children's privacy

Tockly is not directed at children under 16, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

11. Changes to this policy, and contact

We will update this policy if what Tockly does changes, for example if a future version backs up workouts to your account. The "Last updated" date at the top always reflects the latest revision.

• Email: [email protected]
• Website: lwdatalabs.co.uk
• Supervisory authority: Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, SK9 5AF: ico.org.uk