🔒 The short version: The RepLock app processes your camera feed entirely on your Mac — frames never leave your device. The app runs offline with no account, no analytics, and no tracking. Our website uses a single cookie for affiliate referral attribution only (no personal data collected). If we ever add optional online features (e.g., a leaderboard), they'll be opt-in and disclosed here before they ship.
What data RepLock collects
None. RepLock does not collect, transmit, or store any personal data on external servers. There is no account system, no analytics, no telemetry, and no crash reporting. If we ever change this, we will update this page and ship a new version of the app that surfaces the change before it takes effect.
Camera data
RepLock accesses your Mac's camera during exercise sets to count reps using on-device pose detection (MediaPipe, running via WebAssembly). The camera feed is processed entirely in your computer's memory. No frames, images, or video are saved to disk, uploaded, or transmitted anywhere. When the set ends, the camera stream is released.
Data stored on your device
RepLock stores your settings, exercise configuration, streak data, and set history locally on your Mac using Electron's local storage. By default this data stays on your device and is not transmitted anywhere. You can delete it at any time by uninstalling the app or clearing its application data.
License validation
When you purchase RepLock and enter a license key, the app makes a single API call to LemonSqueezy (our payment processor) to validate your key. This request contains only the license key string — no device identifiers, no personal information. After validation, the result is cached locally. The app re-validates once per week in the background. If the network is unavailable, a 7-day grace period applies.
Note that LemonSqueezy can correlate your license key to the customer record from your purchase, which includes the email and payment information you provided to them at checkout. That correlation happens on their side, not ours.
Payment processing
Payments are handled entirely by LemonSqueezy, who acts as our Merchant of Record. We do not see, process, or store your payment information. LemonSqueezy's privacy policy governs their handling of your payment data.
Affiliate referral tracking (website only)
The replock.app website loads a small script from LemonSqueezy that sets a cookie when you arrive via an affiliate referral link (URLs containing ?aff=). This cookie contains only the affiliate identifier and expires after 30 days. It is read by the LemonSqueezy checkout page to attribute the referral — no personal data is collected or transmitted by the script. The cookie is set on the replock.app domain and is not used for analytics, retargeting, or any other purpose.
The RepLock desktop application does not set or read any cookies.
Third-party services
RepLock makes network requests only for the following purposes:
License validation — When you activate a license key, the app contacts our payment processor (LemonSqueezy) to verify it. Re-validation occurs weekly in the background. Only the license key string is sent.
Update checks — On launch and periodically, the app checks our update server for new versions. Like any HTTPS request, this transmits your IP address and User-Agent. No personal data is included.
Feedback — If you choose to send feedback from within the app, your message (and optionally your email) is transmitted to our server. This only happens when you explicitly submit the form.
Affiliate tracking (website only) — The replock.app website loads a script from LemonSqueezy that sets a cookie when you visit via an affiliate link. The cookie stores only the affiliate identifier and is used solely for purchase attribution. No personal data is collected. This does not apply to the desktop application.
No other network requests are made. RepLock does not currently include analytics, telemetry, or crash reporting.
When you contact us
If you email us (e.g., [email protected], [email protected], or [email protected]), we receive your email address and the contents of your message. We use this only to respond to you. If you'd like us to delete the email correspondence we have with you, send a request to [email protected] and we will do so.
Your rights
Privacy laws like the GDPR (EU/UK) and CCPA (California) give you rights to access, correct, delete, or port your personal data. Because RepLock does not collect or store your personal data on our servers, there is nothing for us to access, modify, or delete on request. The data on your Mac belongs to you and you can remove it at any time by uninstalling the app or clearing its application data. For data held by our payment processor (LemonSqueezy), please contact them directly to exercise your rights.
Children's privacy
RepLock does not knowingly collect data from anyone, including children under 13. Since no data is collected or transmitted, there is no data to protect in this context.
Changes to this policy
If we ever change how RepLock handles data, we will update this page and note the date of the change above. Since RepLock does not collect email addresses, we cannot notify users directly — check this page if you have concerns.
Contact
Questions about this policy? Email [email protected].