Privacy Policy

In short

• There are no accounts. We do not ask for your name, email, or phone number.
• There is no advertising, no analytics, no tracking, and no third-party SDKs in the app.
• We do not sell your data or share it for advertising.
• Our server keeps only the small amount of data described below, most of it hashed or short-lived.

Data that stays on your iPhone

Your saved workouts and drafts, the original workout text, your settings, a random installation ID created by the app, the app's App Attest key ID, and a local copy of your free-send count are stored only on your iPhone. They are deleted when you delete the app.

Free sends and subscription

Each Apple Account gets three free successful sends or schedules to Apple Watch. To count them, the app sends Apple-signed proof of the app download (App Transaction), an Apple App Attest check, and an Apple DeviceCheck token. Our server stores:

• a SHA-256 hash of the App Transaction ID (not the ID itself) and a counter from 0 to 3;
• a record of each send or schedule (an operation ID, its type and status, never the workout content);
• the public App Attest key for your installation;
• short-lived one-time security challenges (a few minutes) and hashes of the installation ID and IP address used for rate limits (a few minutes).

The counter, send records, and App Attest key are kept so the free count is not reset. They contain no name, email, or workout content. Apple's DeviceCheck stores two bits per device on Apple's side.

When you subscribe, the app sends Apple's signed transaction to our server, which checks it with Apple and issues a short-lived access token. Payments are handled entirely by Apple; we never see your payment details. For AI usage limits and cost accounting we keep request counts, token counts, and costs linked only to the hashed App Transaction ID, without any workout text.

AI interpretation

Most workouts are read directly on your iPhone. Only when a workout needs AI, and only after you agree in the app, is the workout text sent to our server and then to the AI provider. Only the workout text (and, for an automatic check, a summary of the on-device result) is sent to the provider; your name, contact details, installation ID, and IP address are not.

Our server does not save the workout text. It keeps:

• a SHA-256 hash of the text and the AI response, for up to 10 minutes, to avoid processing the same request twice;
• a hash of your IP address and the random installation ID, for up to 24 hours, for rate limits;
• token counts and costs without the text, for cost accounting.

The AI provider is Cloudflare Workers AI, using the DeepSeek V4 Flash model, which runs on Cloudflare's infrastructure. According to Cloudflare's Workers AI data usage documentation, Cloudflare does not use the workout text to train AI models or to improve its services, and does not make it available to other Cloudflare customers. WatchSetGo does not save the text in any Cloudflare storage service.

You can turn AI interpretation off at any time in the app's Settings. The app then reads workouts only on your iPhone.

Service providers

• Cloudflare hosts our server and its database, and runs the AI model (Cloudflare Workers AI) that interprets workout text.
• Apple handles purchases and subscriptions, App Attest, and DeviceCheck.

Health and Calendar

WatchSetGo does not read or write Health data. It does not have access to your Calendar: when you add a workout to your calendar, iOS shows its own screen and saves the event itself.

Children

WatchSetGo is not intended for children under 13.

Your choices and deletion

To ask a question or request deletion of server data, email support@watchsetgo.com. Our server does not store your name or email, so we cannot find your data by them. The only way to match a request to server records is the app's random installation ID, which the app does not currently display. Records tied to the installation ID are deleted automatically within 24 hours. Deleting the app removes everything stored on your iPhone.

Changes to this policy

If this policy changes, we will update this page and its effective date.