Privacy policy

RepFun by Young Milton Pty Ltd · updated 2 November 2026

The short version. The camera never records or uploads video. Your workouts, meals and recipes stay on your phone. Our server only sees what a feature needs to work: duels, recipe imports, barcode lookups, optional sign-in and Pro. You can delete it all.

Who we are

RepFun is made by Young Milton Pty Ltd, an Australian company. We handle personal information under the Australian Privacy Act 1988 and the Australian Privacy Principles. Contact: repfun@youngmilton.com.

The camera

RepFun uses your camera to count reps. Each frame is turned into body points (the positions of your joints) on your phone and then thrown away. Video is never saved or sent anywhere.

What stays on your phone

Your workouts, sets, bests, calendar, meal log, recipes, shopping list, pantry, nutrition targets, birth year and settings are stored only on your phone. If you choose "Export", the file goes wherever you send it.

Health Connect

If you turn it on, RepFun writes your workouts and estimated calories burned to Health Connect on your phone (and to Apple Health when the iPhone version arrives). RepFun doesn't read your health data, and nothing it writes there reaches our server. You can turn it off, and remove what RepFun wrote, in those apps' settings.

What reaches our server, and for how long

A random player id and a sign-in token for this phone, made when you first use an online feature. It is not your advertising id and contains nothing about you. Kept until you delete your account.
Duels: the exercise, your rep timings and your score. Kept until the duel expires (a week), then deleted 30 days later. No name, email, location, photo or video.
Recipe imports: the link, text or photo you send to "Save a recipe". We read it to build a recipe draft for you. Photos are deleted from our storage as soon as they have been read (and within 7 days at the latest). The import record, including the draft, is deleted after 30 days. When a recipe comes from a public web page, we keep a copy of that page's recipe so the next person who saves it gets it instantly; that copy has nothing about you in it.
Barcode lookups: the barcode number you scan, so we can find the product. We keep the product, not who asked for it.
Popular recipes: from the import records above, we count how many different players saved each public recipe link in the last 30 days, to show "Popular with RepFun cooks". Only totals of 5 or more are shown, as ranges such as "10+", with the recipe's title, its creator's credit and a link. No one's saves, player id or captions are ever shown.
Usage limits: a record of each AI recipe import (when, and what it cost us) under your player id, kept for up to about a year to enforce fair-use limits and track our costs.
Optional sign-in with Google or Apple: the account id that Google or Apple gives us (a number, not your email or name), so you can restore on a new phone. For Apple, we also keep an encrypted token so we can revoke the link when you delete your account.
RepFun Pro: whether your subscription is active and when it renews or ends, as reported by the store through RevenueCat. We never see your card details.

Who processes data for us

Cloudflare runs our server, database and file storage.
Anthropic (the Claude AI) arranges the text or photo you send into a recipe. It does not use it to train its models.
TypeSafe, a small AI service, checks whether text you paste looks like a recipe before we spend an AI import on it.
RevenueCat manages Pro subscriptions with Google Play and the App Store, using your random player id.
Google Play and the App Store handle payments under their own privacy policies.
Open Food Facts provides product data; we look products up on our server, so your phone doesn't contact them for you.
YouTube and TikTok: when you save one of their links, our server asks their public services about that link (the title, the creator and, for YouTube, the video description) so the recipe keeps its credit. Only the link is sent, never anything about you.
Recipe websites: when you save a link, our server fetches that public page, as a browser would, with no information about you.

Some of these companies store data outside Australia (for example in the United States). We only send them what the feature needs. We don't sell personal information, show ads, or use advertising or analytics trackers.

Children

RepFun is for people aged 13 and over. Players under 18 never see calorie or nutrient targets.

Your choices

Delete everything: in the app, open Settings › Privacy and your data › Delete my data. This deletes your player id, duels, imports, sign-in links and Pro record on our server, and everything on your phone. Without the app, see Delete your account.
Access or correct: most of your data is on your phone, where you can see and change it. To ask what our server holds about you, email us.
Complaints: email us first. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Deleting your account doesn't cancel RepFun Pro. Cancel it in Google Play or the App Store subscription settings.

Changes

If this policy changes in a way that matters, we'll say so in the app before it applies.