Privacy
Last updated 27 August 2026
Sweatcard turns one workout into an image you can share. The workout
is read on your phone, the card is drawn on your phone, and neither ever leaves it.
There is no server behind Sweatcard, no back end, and no database. This covers the
Android app — there is no account or sign-in of any kind.
What Sweatcard reads
From Health Connect
Only after Health Connect's own permission sheet is answered, and only for the month
you are looking at:
- Exercise sessions — the sport, when it started and ended, and how
long it lasted. This is the list you pick a workout from, and the heading and the time
printed on its card.
- Distance — printed on the card, and divided by the duration to give
the pace or the speed shown beside it.
- Calories — total calories where the recording app wrote them, active
calories where it did not. One figure on the card; the day's active total is the second
number on a steps card.
- Heart rate — the average printed on the card, and the readings from
the workout drawn as the pulse trace on cards that have no route. Read only for a
workout you open.
- Steps — the step count printed on a workout's card, and a day's
total, which is a card of its own.
- Exercise routes — the GPS track of a workout you open, drawn as the
shape on the card. Sweatcard never reads where you are now, and asks for no location
permission from your device.
That is the whole list. Sweatcard asks Health Connect for nothing else — no weight, no
body measurements, no sleep, no cadence — and it never writes anything back.
None of it goes anywhere. The store is on the device, the card is drawn on the
device, and the app makes no network requests at all — not to us, not
to anyone, not for a typeface. There is no account, no sign-in, and no token.
From a file you choose
You can also open a .gpx or .tcx file from your watch or
phone, with no permissions at all. The file is read on your phone and is never
uploaded.
From a photograph you choose
If you put a picture behind a card, it is decoded and drawn onto the card on your
phone. It is never uploaded and never kept — choosing a different card forgets it.
What is kept, and where
That is the whole list. There is no account, no copy of any workout, no copy of any
card, no analytics, no advertising identifiers, and no cookies of any kind.
Who else sees anything
Nobody. The app makes no network requests, so there is nothing for
anyone to see.
- Whoever you send a card to. Sharing hands the image to the app you
pick from your device's share sheet. What happens to it then is between you and that
app; Sweatcard does not see it.
- Nobody else. Nothing is sold, rented, or handed to advertisers, data
brokers, or analytics companies — and no Google API of any kind is called by any part
of the app.
Removing your data
- Settings and saved colours — delete the app.
- Permission — withdraw it in the Health Connect app. Deleting
Sweatcard removes its settings with it, and there is nothing else of yours in it to
remove.
There is nothing else to ask for — no account was ever created to hold anything else
in.
This website
This page and the one it links back from are a static site with no account, no
analytics, and no cookies. Its host, Firebase Hosting, keeps ordinary web-server request
logs — IP address, browser, and time, the same as any site — and its typeface is served
by Google Fonts, which sees that request as it would for any site that loads a font from
there. Neither ever sees a workout: this site has no way to read one.
Children
Sweatcard is not directed at children under 13, and is not knowingly used by them.
Changes
The current version of this policy is always the one at this address, and the date at
the top says when it last changed. If it ever changes in a way that affects what is read
or kept, that will be said in the app before it takes effect.
Contact
Questions, deletion requests, or anything on this page that reads as untrue:
iamthangman22@gmail.com.