privacy policy

1. who handles your information

Ali Mamedgasanov, an individual based in azerbaijan, operates total and is responsible for the personal information described here. contact support@total.wtf for privacy questions or requests. this policy covers the total app, watch companion, and total.wtf.

contact: support@total.wtf

2. what we collect and why

• account and profile: account identifiers, sign-in provider information such as email, username, avatar, birth year, division/sex, country, height, bodyweight, and profile details you provide. we use these to operate your account, check eligibility, group rankings, and display your profile.
• training: exercises, sets, repetitions, weights, dates, duration, goals, templates, notes, and calculated statistics. we use these to save and sync your training and provide progress and consistency features.
• verification: submitted lift and weigh-in recordings, audio, face and scale footage, supplementary pin recordings, device/recording metadata, integrity evidence, review notes, and decisions. we use these to assess submissions, detect manipulation, and maintain rankings. authorized reviewers can see the evidence needed for that work. recordings may contain other people or background audio; take care where you record.
• community and web profiles: posts, comments, polls, votes, reactions, media, links, reports, blocks, and web-profile settings. we use these to publish the content you share, run interactions, apply ranking-related features, and handle abuse.
• purchases and support: subscription status and transaction identifiers, messages and attachments you send us, and our responses. we use these to provide paid access, prioritize pro verification submissions, resolve issues, and maintain required transaction records. queue indicators show counts, not other users' identities or private recordings. apple processes apple-billed payment details; we do not receive your full payment-card number from apple.
• technical information: network requests, ip addresses, device/app information, access and error logs, and security tokens. we and our infrastructure providers use these to deliver, secure, and troubleshoot the service. local storage and similar technologies keep sessions, preferences, and cached content working.
• usage and crash reports: which screens and features you use (for example that a weigh-in reached a certain step, that a workout was logged, or that a post was published), the time and length of app sessions, your app and ios version and device model, a random install identifier, and, while you are signed in, your account identifier. if the app crashes or freezes, a crash report with the technical state of the app is sent to sentry (functional software gmbh, stored in the eu), where your account is only a hashed identifier. we use these to find bugs, see where people get stuck, and decide what to improve. we do not use them for advertising and do not sell them. usage events are kept for 90 days.

3. apple health and device permissions

connecting apple health is optional. with permission, total reads workout records, heart rate, active energy, and one-minute heart-rate recovery for workout features. the watch companion can save workouts to apple health. workout identifiers, peak heart rate, and active-energy summaries can sync to total's servers with your training records; this information is not exclusively on your phone.

we do not use health information for advertising, sell it, or use it for unrelated profiling. if you choose to publish a workout attachment, its included statistics may become visible to others. the same applies if you choose to make your training log visible to friends or everyone. review what you are sharing.

camera and microphone access support recording; photo access supports selected uploads and saving recordings; notifications support updates you enable. you can change permissions in device settings, and health access in apple health. revoking access stops future access through that permission but does not automatically delete information already saved to total. contact us or use account deletion to request removal of that information.

4. what is public

total is built around public strength profiles. usernames, avatars, country/division, verified results, scores, ranks, and selected bodyweight or training summaries can be visible in the app. your web profile can also show bodyweight history, training dates and highlights, total weight lifted, gym hours, and the biography, links, goals, and media you make available through its widgets. web pages may be accessible without an account and indexed by search engines.

your full private workout records and verification recordings are not automatically published as feed videos. your training log (workouts with sets, weights, reps, personal records, duration, and peak heart rate and calories when apple health is connected) is private by default. you can choose, from the workout history screen, to show it to friends (people you follow who follow you back) or to everyone; the choice covers all your workouts, past and future, until you change it, and it is shown in the app only to signed-in users the choice allows. private verification evidence is available to authorized reviewers and service providers, not general profile visitors. content and workout statistics you deliberately post are shared with the audience of that feature. web-profile visibility settings do not necessarily hide the same information inside the app.

do not include information in public content that you want kept private. other people may retain copies outside our control.

5. who receives information

we use supabase for authentication, database services, and media storage, sentry for crash reports, and hosting/network providers to deliver the app's web services. authorized team members and reviewers access information needed for support, verification, safety, and operations.

we send uploaded avatars and submitted community text (including posts and replies), poll options, images, and video preview images to openai's moderation service to detect potentially unsafe content and enforce our community rules. this happens as part of submission, before an avatar or post is published, and can include faces, words, and other personal information present in that content. this is a content-safety check, not verification of your identity or lifting performance. it does not mean every frame or the audio of a feed video is sent for ai review. private lift, weigh-in, and pin verification recordings, apple health records, and private workout records are not sent to this moderation service merely because you use those features. automated checks may block content and can make mistakes; email support@total.wtf if you want us to review a moderation decision.

sign-in and purchase providers process information when you use their services. zoho mail processes support correspondence, including copyright, privacy, and moderation complaints sent to support@total.wtf. we use the information in a complaint to identify the material, assess the report, communicate a response, and take appropriate action. we may share relevant allegations with the affected uploader or rights holder when needed to resolve a complaint, and contact details when legally required. we do not routinely publish complaints or share unrelated private evidence. service providers must protect information consistently with this policy and applicable requirements and may use it only as permitted for their role. their own policies also explain processing they independently control.

we may disclose information to respond to binding legal requests, address fraud or serious safety threats, establish or defend claims, or transfer the service to a new operator with appropriate safeguards and required notice. we do not sell personal information or share it for cross-service targeted advertising.

as described in the terms, we may feature eligible public content and the public identity shown with it in total's own promotions, including through hosting and social platforms. this excludes private verification evidence and information whose marketing use is restricted, including apple health data. we do not rely on the terms alone for promoting identifiable users under 18 or where separate permission is required. contact support@total.wtf to withdraw promotional permission; the terms explain how we stop new use and remove ongoing promotions we control.

6. grounds for using information and where it is processed

our grounds for using information are providing the service under our agreement with you, meeting legal obligations, and legitimate interests such as security and preventing abuse, balanced against your rights. we use consent where required, including for relevant optional permissions and sensitive health information. accepting the terms does not replace that consent.

you can withdraw consent at any time. this does not make earlier processing based on valid consent improper, but optional features may stop working. information may be processed in azerbaijan and countries where our providers operate, where privacy protections can differ. international transfers use required safeguards, such as approved contractual protections where applicable. contact us for details or a copy of the safeguards that apply to your data.

7. retention and deletion

we retain account and training information while needed to provide your account and requested history. verification evidence is retained while needed to support the result, resolve review issues, and investigate manipulation. support and security records are kept only as long as needed for their purpose or a required retention period. we consider whether your account or result remains active, unresolved disputes or abuse investigations, and mandatory recordkeeping periods.

you can request account deletion in settings or contact support@total.wtf. we delete or de-identify associated personal information unless limited retention is needed for a mandatory recordkeeping period, security, or an unresolved claim. retained information is restricted to that purpose. backup copies may remain until their scheduled removal. account deletion does not remove copies others independently saved or cancel an apple subscription.

8. your choices and rights

you can edit available profile information, manage web-profile widgets, control device permissions, and use in-app reporting and blocking. depending on your location, you may also have rights to access, correct, delete, or receive a portable copy of your information, restrict or object to processing, and withdraw consent. contact support@total.wtf to exercise these rights. we may ask for reasonable proof that the account is yours and respond within the required deadlines. you may complain to your local data-protection authority.

9. younger users and updates

total is for users aged 13 and older, subject to higher local requirements and parental or guardian permission where required. we do not knowingly permit accounts below the applicable minimum age. if you believe a child is using total without the required age or permission, contact us so we can investigate and take appropriate action, including deletion where required.

we will update this policy as the service changes, show the effective date, and provide notice of significant changes where required. we will obtain fresh consent when required for a new use of your information.