OpenSet - Privacy Policy

Effective date: 28 August 2026

OpenSet ("OpenSet," "we," "us") is operated by M3E Brands. This policy explains what information we collect through the OpenSet app, how we use it, and the choices you have. It applies to everyone who creates an OpenSet account.

1. Information We Collect

Account information. When you sign up, we collect the email address and password you provide (password is handled by our authentication provider and never stored by us in plain text), and a display name you choose, which other members can see.

Profile information you choose to provide. All optional, collected either at signup or afterward in Settings:

Gender — used only to select which default avatar image represents you if you haven't uploaded a photo. It is never displayed as a label anywhere in the app and is used for nothing else. It is, however, sent to other members' devices for that purpose, and because it decides which default image they see, someone could infer it from your avatar. If you'd rather not, upload a photo or choose "Prefer not to say."
Birthday — used to personalize your experience and, in the future, to help match you with age-relevant community groups. Not shown to other users.
Primary fitness goal and experience level — used to personalize what you see in the app. Not shown to other users.
How you heard about OpenSet — used only for our own understanding of how people find the app. Not shown to other users, not shared with any advertiser or third party.
Profile photo — if you upload one, it's stored in a cloud storage bucket that is publicly readable by anyone with the image's address, and shown to other users on your profile and posts. Uploaded photos go through manual, human review after publication, not automated screening before it goes live — meaning a photo is visible to other users before anyone at OpenSet has looked at it, and can be removed if it violates our content standards.
Home gym — the physical gym location you select as your own. Used to show you a feed specific to that gym and to calculate aggregate, anonymous activity stats for it (see below).

Location information. When you start a workout, we record a single, one-time GPS snapshot of your location at that moment — not continuous or ongoing tracking, and not recorded at any other time. This is used solely to calculate an anonymous count of how many members are "active now" at your home gym. Your individual location is never shown to any other user, ever — only an aggregate number (e.g., "6 active now") is ever displayed. This snapshot is automatically deleted within 24 hours of your workout starting.

Health and fitness data. Your workout history: exercises, sets, weights, reps, perceived effort, and — for cardio activity — duration, distance, pace, incline/resistance, heart rate (if you enter it), and training purpose. This is the core data the app exists to track, and it drives your personal records, progress charts, and (if you choose to share them) your posts to other members.

Content you create. Posts, photos, comments, reactions, questions, and shared workouts you choose to publish, along with who you choose to share them with (just you, specific groups, or your followers).

Gym suggestions. If you suggest a gym that isn't in our directory, we store the name, city, state, and any notes you provide, tied to your account. This is reviewed manually by us and is never shown to other users.

2. Automated Community Content (Disclosure)

Some content you may see in group feeds — posts and comments from accounts labeled "Community Starter" — is posted automatically by a small number of disclosed accounts we operate, on a schedule, to help start real training conversations in a new or quiet community. This is not hidden: every such account is visibly labeled, and its profile discloses that it is a seed/starter account. The volume of this automated activity is calibrated using aggregate counts of real members' weekly activity in that group (how many posts/comments/shares happened, not their content or identity) — as real member activity increases, automated activity fades out. We do not operate undisclosed accounts that present as real members.

3. Analytics, Crash Reports, and Notifications

Product analytics. We use PostHog to understand how the app is used — for example, that a workout was completed, that onboarding finished, or that a post was shared. These events record that something happened and a few non-identifying details about it (such as how many sets were in a workout). They do not contain the content of your posts, comments, or messages. Events are associated with your account so we can understand things like whether people who set a home gym stay longer. There is no advertising SDK anywhere in OpenSet, we do not build advertising profiles, and we do not track you across other companies' apps or websites.

Crash reports. We use Sentry to record errors and crashes so we can fix them. A crash report contains the technical details of the failure — what code failed, your device model and OS version, and what the app was doing. Performance tracing is switched off.

Push notifications. If you allow them, we store a device token so we can send you notifications about activity involving you (someone reacted to your workout, commented, followed you, or sent kudos). You can turn these off in your device settings at any time; the token is removed when you delete your account.

Purchases. If you buy an OpenSet subscription, the payment itself is handled by Apple or Google — we never see or store your card details. We use RevenueCat to tell us whether your subscription is active. Subscriptions are managed and cancelled through your device's own account settings, not by us.

4. How We Use Your Information

We use the information above to: operate and personalize the app for you; show you relevant content, groups, and gyms; calculate the aggregate/anonymous stats described above; maintain the safety and integrity of the community (including manual review of reported or flagged content); and understand how people find and use OpenSet so we can improve it.

We do not sell your personal information.

5. How We Share Your Information

With other users, according to your own sharing choices: your display name, avatar, and any content you post publicly, to a group, or to your followers is visible to the audience you selected.
We do not share your email, gender, birthday, precise location, or private account data with other users or with third parties for their own marketing purposes.
Service providers who host our infrastructure (database, authentication, file storage) process data on our behalf under their own security commitments, solely to provide the service to you.
If required by law, we may disclose information in response to valid legal process.

6. Data Retention

We retain your account data for as long as your account is active. Your one-time location snapshot from each workout is automatically deleted within 24 hours. If you delete your account, your data is deleted immediately (see below) — this is a real, permanent deletion, not a delayed or reversible one.

7. Your Rights and Choices

You can review and update most of your profile information (display name, gender, birthday, goal, experience level, home gym, photo) at any time in Settings.
You can control who sees content you post at the time you post it.
You can permanently delete your account at any time from Settings → Delete Account. This immediately and permanently removes your account, workout history, posts, comments, and uploaded photos. This cannot be undone.
Depending on where you live, you may have additional rights over your personal data under local law (for example, the right to access or export a copy of your data). You can request a copy of your data at any time, free of charge, by emailing [email protected] — we will provide it regardless of whether you have a subscription. (OpenSet Premium also includes a one-tap CSV export in Settings; that is a convenience, not the only way to get your data.) For any other request, contact us using the information below.

8. Children's Privacy

OpenSet is not directed to, and we do not knowingly collect information from, children under 13 (or the relevant minimum age in your jurisdiction). If we learn we've collected such information, we will delete it.

9. Security

We use industry-standard measures to protect your information, but no system is completely secure. Please use a strong, unique password for your account.

10. Governing Law

This policy is governed by the laws of the State of Arizona, without regard to conflict-of-law principles.

11. Changes to This Policy

If we make material changes to this policy, we'll notify you in the app before the changes take effect.

12. Contact Us

Questions about this policy or your data: [email protected].

For support: [email protected]. To report content or conduct: [email protected].

Appendix: Terms of Use

Not drafted yet — a separate document covering acceptable use, account termination, content ownership/license, disclaimers, and liability limits. Natural next step after this one is settled.