This policy explains what information Fatboy Fitness uses, where it is kept, who else sees any of it, and the rights you have. We've written it in plain language. Please read it together with our Terms of Service.
1. Who we are
Fatboy Fitness ("we", "us", "our") is a free workout timer web app, operated from South Africa. For the purposes of the Protection of Personal Information Act 4 of 2013 ("POPIA"), we are the responsible party for the personal information described in this policy.
Contact: send us a message on our contact page.
2. The short version
- We don't have accounts, and we don't ask for your age, weight or any other details. The only time we receive your name and email address is when you choose to send us a message on our contact page.
- The app saves a few settings and the workout you're doing in your own browser (local storage). It is never sent to us.
- We don't use cookies, tracking pixels or advertising, and we never sell or share information for marketing.
- We use Umami, a privacy-friendly analytics service, to see who is using the website in anonymous, overall numbers, and how the app is used (for example, which workouts are started). It uses no cookies, anonymises what it collects, doesn't follow you to other websites and can't identify you. See section 5.
- Three outside services see your visit because the app can't be delivered or displayed without them: Netlify (hosting), Google Fonts (the font) and the Tailwind CSS CDN (the styles). They receive your IP address and basic browser details, as described in section 5.
3. What the app saves on your device
The app uses your browser's local storage, a small storage area that belongs to this website on your device. Nothing in it is sent to us or to anyone else. It holds:
- Colour theme (
wod-theme): whether you chose Light, Twilight or Dark, so the app opens the same way next time. Kept until you change it or clear your browser data.
- Favourite workouts (
wod-favourites): the IDs of the workouts you starred. Kept until you remove them or clear your browser data.
- Workout in progress (
wod-active-workout): the workout you're doing, its timer, round tally, round times, round counter, ticked-off exercises and any changes you made, plus which page it was open on. This lets the workout carry on if your phone reloads the page while the screen is off. It is removed when you reset or cancel the workout, dropped after 6 hours if left unfinished, and after 30 minutes once the workout is finished.
- Storage notice answer (
wod-storage-consent): the date and time you accepted the storage notice, so we don't ask again for 10 days. If you choose "No", nothing is saved.
Your health and safety acknowledgement is not saved. You are asked to accept it every time the app loads.
4. Other things kept on your device
- Memory while the page is open. Motivation audio clips and timer sounds are downloaded and held in your browser's memory while you use them, then released. Changes you make to a workout that you haven't started are also only held in memory, and are lost when the page closes.
- Browser cache. Like any website, your browser may keep copies of the app's files (pages, images, sounds, the font and styles) so it loads faster next time. Your browser manages this, and you can clear it in its settings.
- Screen wake lock. During a workout the app asks your browser to keep the screen on, so the timer and sounds keep working. This stores nothing and ends when the workout does.
- Sound. The app plays sounds only. It never uses your microphone, camera, location, contacts or motion sensors.
5. Services that see your visit
When you open the app, your browser connects to the following services to fetch parts of it. Like any web request, each one receives your IP address (which can show your approximate location), your browser and device type (the "user agent"), the date and time, the file requested and, usually, the page that requested it. We don't receive or control what they log, and they handle it under their own privacy policies.
Netlify (hosting)
The app is hosted by Netlify, Inc., based in the United States. Netlify serves every page, image, sound and data file of the app, and keeps server logs of these requests, which it uses to deliver the site, keep it secure and prevent abuse. See Netlify's privacy policy.
Messages you send us (only if you use the contact page)
If you send us a message on our contact page, the form sends your name, email address, chosen topic and message to us through Netlify Forms, a service of Netlify, Inc. (United States). Netlify stores the message, filters it for spam, and emails a copy to us. We use these details only to read and reply to your message, and never add you to a mailing list. Please don't include health details or other sensitive information you'd rather keep private.
Google Fonts (the Inter font)
The app's font is loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com), a service of Google LLC, based in the United States. Google receives the request details above when your browser downloads the font. See Google's privacy policy.
Tailwind CSS CDN (the styles)
The app's styling code is loaded from the Tailwind CSS CDN (cdn.tailwindcss.com), provided by Tailwind Labs Inc., based in the United States. The provider receives the request details above when your browser downloads it.
Netflix (only if you choose "No")
If you decline the storage notice, the app sends you to netflix.com. We don't pass any information to Netflix. Your browser simply opens its website, where Netflix's own privacy policy applies.
Our community (only if you follow a link to it)
The site may show a "Support us" link, an announcement bar or a box at the end of blog posts that leads to our online community, which is run on a separate platform (for example Skool). Following one of these links opens that platform's website in a new tab. We don't pass any information to it, and if you join or sign in there, that platform's own terms and privacy policy apply.
The Monthly Fatboy Challenge leaderboard (only if you take part)
Taking part in the monthly challenge is optional. If you decide to compete and post your score in our community, we may add it to the leaderboard on this website ourselves. It shows your first name or nickname, your score, whether you did the workout Standard or Adjusted, and, if you make the Hall of Fame, a short note such as "Most improved" or the equipment you used. These pages are public, and Hall of Fame entries stay up as a record of past months. The website has no form for this and collects nothing new from you. You can ask for your entry to be changed or removed at any time, through our contact page or in the Skool community.
The blog
Blog posts (at /blog/) are ordinary pages on this site, hosted by Netlify. They load the same font and styling services described above, read your saved colour theme so they match the app, and don't save anything. The blog's editor at /admin is only for the site owner, who signs in with their own GitHub account; visitors never use it. Posts and their images are stored in the site's code repository with GitHub, Inc. (United States). The blog also offers an RSS feed (/blog/feed.xml), which feed readers can fetch like any other page.
Umami (visitor statistics)
We use Umami Cloud, an analytics service of Umami Software, Inc. (United States), to see who is using the website in overall, anonymous numbers: how many people visit, which pages and blog posts they read, which websites send them here, which countries and kinds of devices they use, and how the app is used. We use this only to understand our audience and improve the app and blog. Our statistics are stored in Umami's European Union region (Germany).
When you open a page, a small Umami script sends Umami the page address, the website that sent you (if any), your browser, operating system, device type, screen size and language, and the country you're in. Umami works out the country from your IP address. According to Umami, it doesn't collect information that identifies you personally, anonymises everything it collects, uses no cookies, and never tracks you across other websites. Nothing is saved in your browser. Like most online services, Umami runs its service with other providers (such as hosting and content delivery companies), some of which are in the United States.
We also send Umami a few events about how the app is used. None of them include your name, email address or the content of any message:
- Workouts started: the workout's name and format, whether you chose motivation audio, and where you started it.
- Workouts built: the format, length and difficulty you picked, and how many exercises.
- Searches: what you typed in the workout search and how many workouts matched. Please don't type personal details into the search box.
- Clicks on community links: the "Support us" link, the announcement bar and the box at the end of blog posts.
- Contact messages: only that a message was sent, and the topic you chose.
Only the site owner can see these statistics, in Umami's own dashboard. We never combine them with other information to work out who you are, and we never sell or share them. Because Umami uses no cookies and can't identify you, the app doesn't need a cookie banner. To learn more about how Umami handles data, see Umami's privacy policy.
Information leaving South Africa
These providers are based in, and may process information in, the United States, the European Union and other countries outside South Africa. We use them because the app can't be delivered, displayed or improved without them. They operate under their own privacy commitments and the laws that apply to them.
6. What we don't do
- We don't set cookies.
- We don't use advertising or social media tracking pixels, session recording, advertising, or analytics that use cookies or follow you across websites. Our only analytics is Umami, described in section 5.
- We don't have accounts, and we don't collect phone numbers or payment details. We only receive a name and email address if you send us a message (see section 5).
- We don't collect health information. Your times, rounds, ticks and changes stay on your device, and we never see them. We only count which workouts are started (see section 5), not how you did.
- We don't sell, rent or share information for marketing, and we don't build profiles of you or make automated decisions about you.
7. Why this information is used
- On your device: the local storage in section 3 is needed for the app to work as you expect: to remember your theme, favourites and choices, and to keep a workout going if the page reloads.
- By the services in section 5: the request details are needed to deliver the app to your browser, display it properly, and keep the hosting secure. This is necessary to provide the service you asked for, and in our legitimate interest in running a working, secure website.
- Visitor statistics (Umami): used only to see who is using the website (in anonymous totals, such as how many visitors come from which countries and devices) and how the app and blog are used, so we can improve them, for example by adding workouts that people search for but can't find. This is in our legitimate interest, and it's collected in a way that can't identify you.
- Messages you send us: your name, email address and message are used only to read and reply to you. You choose to send them, and answering you is in our legitimate interest.
8. Your choices
- The storage notice. On your first visit, and again 10 days after you last accepted it, the app shows what it stores and asks you to accept. The app needs this storage to work, so if you choose "No" you are sent to Netflix instead and nothing is saved.
- Clearing your data. You can delete everything the app has saved at any time by clearing this website's data (sometimes called "site data" or "cookies and site data") in your browser settings. Your theme, favourites and any workout in progress will then be reset.
- Private browsing. In a private or incognito window, your browser deletes the app's storage when you close the window.
- Blocking outside services. You can use browser tools to block the font or styling services, although the app may then look wrong or stop working. Blocking Umami (many ad and tracker blockers do) doesn't affect the app at all.
9. How long information is kept
- Theme and favourites: until you change them or clear your browser data.
- Workout in progress: until you reset or cancel it, 6 hours if unfinished, or 30 minutes once finished.
- Storage notice answer: until you clear your browser data. It is treated as out of date after 10 days, when you're asked again.
- Items held in memory: until you close the page.
- Visit and usage statistics: kept by Umami for up to 6 months, then deleted.
- Leaderboard and Hall of Fame entries (only if you took part): kept on the site as a record of past months until you ask us to remove yours.
- Messages you send us: only as long as we need them to deal with your message and any follow-up. You can ask us to delete yours at any time.
- Service logs (section 5): for as long as each provider keeps them under its own policy.
10. Security
The app is served over an encrypted (HTTPS) connection. Information in local storage stays on your device, so anyone who can use your device and browser may be able to see it. Protect your device with a lock screen, and clear the app's data if you share your device. No method of storage or transmission is completely secure, but because we collect so little, the only information about you we hold is any message you choose to send us.
11. Children
Fatboy Fitness is intended for adults aged 18 and over. Anyone under 18 may only use it with the consent and supervision of a parent or legal guardian. We don't knowingly collect personal information about children. If you believe a child's information has reached us, let us know on our contact page and we will help remove it.
12. Your rights
Under POPIA you have the right to:
- ask whether we hold personal information about you, and ask for a copy of it;
- ask us to correct or delete personal information about you;
- object to the processing of your personal information;
- lodge a complaint with the Information Regulator (South Africa) at inforeg.org.za.
Because the app keeps your information on your own device, you can see and delete it yourself at any time (see section 8). For anything else, including messages you've sent us and the hosting logs, send us a request on our contact page and we will help as far as we are able. If you live outside South Africa, you may have similar rights under your local law, such as the GDPR in the European Union and United Kingdom, and we will respect them.
13. Changes to this policy
If the app starts using information differently, for example by adding a new service, we will update this policy and the "Last updated" date above. If a change is significant, the storage notice will tell you about it the next time you open the app.
14. Contact us
For questions about this policy, or to exercise your rights, send us a message on our contact page.
