Failure Privacy Policy

Effective October 1, 2026

Failure is a workout tracker for iPhone, iPad, Mac, Apple Vision Pro and Apple Watch, made by Webb Sledge. It has no accounts and no servers of its own, and it never sends what you log to us. Your programs and workouts stay on your devices and, if you choose, in your own iCloud account. This policy describes what the app stores, where it goes and who can read it.

What the app stores

Everything the app keeps is what you enter or what it works out from that: your programs (cycles, training days and the exercises on them), the exercises you define and their names, every set you log (reps, weight, reps in reserve and any comment you add), your one-rep-max estimates and their history, the parameters the model learns from your training, and your settings.

The app does not ask for your name, email address, location, contacts, photos or health records. Apple Health is described in its own section below.

Where it lives

On your device, in storage that belongs to the app and that other apps cannot read. Deleting a program deletes the workouts logged under it; deleting the app deletes everything it stored on that device.

iCloud sync

iCloud sync is part of Failure Pro and is off until you turn on "Sync with iCloud" in Settings. When it is on, the app copies the data described above to the private iCloud database of the Apple Account signed in on the device, so that your other devices signed in to the same account show the same programs and workouts.

Sync uses Apple's CloudKit. The copy lives in your iCloud account, Apple encrypts it in transit and at rest, and only devices signed in to your account can reach it through the app. We cannot read it: a private CloudKit database is not accessible to the developer. Apple's iCloud terms and Apple's privacy policy govern that storage.

Turning the switch off keeps everything on the device and stops sharing changes. The copy already in iCloud stays until you delete it, which you can do from your device's iCloud storage settings under Failure. Signing out of iCloud, or turning iCloud off for Failure, removes the synced copy from that device until iCloud is back on.

Two small pieces of bookkeeping support this and never leave the device: your sync preference, and an anonymous identifier Apple assigns to your iCloud account for this app, which the app compares the next time sync is turned on so it can warn you before attaching a device's data to a different account. When data changes in iCloud, Apple sends the app a silent notification to wake it; the notification carries none of your data and we never see it.

Failure Pro

Failure Pro is an auto-renewing subscription sold through Apple's In-App Purchase. Apple handles payment, so we never receive your name, address or payment details. The App Store gives the app a signed record of your subscription (the plan, when it started, when it renews or ended, and Apple's transaction identifiers) so the app can decide what to unlock. The app keeps that decision on the device, remembers it for a short while so the app opens unlocked before the App Store has answered, and sends it nowhere.

Apple's sales reports to us are aggregated and do not identify you. Your purchase is governed by the Apple Media Services Terms and Conditions and by Apple's privacy policy, and the app's Terms of Use are Apple's standard Licensed Application End User License Agreement.

Notifications

If you enable rest-timer notifications, the app schedules a notification on your device for the moment a rest period ends. It is created and delivered on the device and never leaves it. You can withdraw the permission at any time in your device's notification settings.

Siri and Shortcuts

You can start a workout, log a set, ask what is next and finish with Siri or from the Shortcuts app. Each request is handled by the app on the device it reaches, the same as a tap, and the app receives only what the request carries, such as the reps and weight of a set. Nothing about the request is sent to us. What you say to Siri is handled by Apple under Apple's privacy policy and your Siri settings.

Apple Watch

The Apple Watch app is part of Failure Pro. Your iPhone sends the watch the workout you are on (its exercises and their target and logged sets) and the watch sends back the sets you log there. That exchange travels over Apple's Watch Connectivity link between your paired iPhone and watch, never through a server, and we never see it.

Each device keeps the latest exchange in its own app storage: the iPhone so it does not resend an unchanged workout, the watch so it can show the workout and hold the sets you log while the iPhone is out of reach until they are delivered. Deleting the app from a device deletes that copy. The rest-timer cue on the watch is a tap on the wrist and a notification scheduled on the watch itself, under the same permission as on the iPhone; it never leaves the watch.

Apple Health

Apple Health is part of Failure Pro, and the app reads and writes it through Apple's HealthKit framework, on the device, only after you allow it. When a session is finished, the app saves it to Apple Health as a strength-training workout: on the watch, with the heart rate and active energy the watch measured while it recorded; otherwise from the iPhone, iPad or Apple Vision Pro that finished it, with its start and end times only. Every workout the app writes is labeled with a random identifier for the session and, from an iPhone, iPad or Apple Vision Pro, one for the device that wrote it, so the app can recognize its own workouts on any of your devices; no exercise names, weights or reps go to Apple Health.

The app reads back the workouts it wrote, to show heart rate and calories with your sessions in Analytics, and, when "Adjust readiness from Health" is on, your heart-rate variability, resting heart rate and sleep, to adjust the day's targets by at most two percent. Everything read is used on the device that shows it and reduced there. None of it is stored in the app's own store or synced by the app: the targets the app stores and syncs are adjusted by at most two percent, and the readings never enter the app's store. Apple Health has its own iCloud setting, which is yours to control.

Nothing from Apple Health goes to us or to anyone else. Permission is asked on each device separately, and the switches in Settings are per device; you can change what Failure may read or write at any time in Health › Sharing › Apps, or on Apple Vision Pro under Settings › Apps › Health. Deleting a program in the app does not delete the workouts already saved to Apple Health; they are yours to keep or delete there.

Feedback

Send Feedback in Settings opens your mail app with a draft addressed to us. If you leave "Include app and device details" on, the draft ends with the app's version, your device's model and the version of its operating system, so we can reproduce what you describe; the sheet shows those lines before you write. You see and can edit everything before you send it, and nothing is sent unless you do. We use what you send only to answer you and to fix what it describes, and your email address reaches us the way it does in any email you send.

Diagnostics

The app writes messages about its own behavior, such as a sync attempt that failed, to your device's system log. That log stays on the device unless you choose to share it, for example in a report to Apple.

If you have chosen in your device's settings to share app analytics with developers, Apple may send us crash reports and aggregate usage statistics for Failure. Apple strips identifying information before it does so, and we use them only to fix problems.

What we do not do

Failure has no accounts to sign up for and no server of its own. It contains no analytics, advertising or tracking code and no third-party libraries: it is built only on Apple's frameworks. We do not track you across other apps or websites, and we do not sell, rent or share personal information, because we never hold any.

Children

Failure is not directed at children under 13, and it does not knowingly collect personal information from anyone.

Your choices

You control your data directly. You can read and change everything the app knows in the app itself, delete programs and exercises there, and delete the app to remove all of its data from a device. Data you synced to iCloud is deleted from your device's iCloud storage settings, under Failure.

Depending on where you live, privacy law may give you rights to access, correct, export or erase personal data that an organization holds about you. We hold none, so there is nothing for us to act on; the controls above are yours. If you have a question about any of this, write to us at the address below.

Changes to this policy

When the app changes in a way that affects this policy, we will update the text, move the effective date at the top, and ship the new version inside the app. The current policy is always available in the app's Settings and on the web.

Contact

Failure Fitness Team, feedback@failurefitness.com