Last updated: 27 August 2026
Steady Increment is published by Lonexa LLC (Kentucky, United States).
This policy describes what the app stores, what leaves your device, and what never does. It is written to be read rather than to be defensible, because the architecture is genuinely simple: the app is local-first, and most of it never touches a server at all.
| Where it lives | |
|---|---|
| Everything you log — workouts, sets, cardio, plans, gyms, body metrics | On your device, in a database only this app can read |
| The same data, if you create an account | Also on our server, so a second device can see it |
| Progress photos | On your device only. Never uploaded, under any circumstances. |
| Protocols, doses, injection sites, lab results | On your device. Synced only if you have an account. Never sent to the AI provider. |
| What the AI features see | Training numbers only — see Artificial intelligence below |
You do not need an account to use this app. Logging a workout has never required one and never will. An account exists for one reason: so the same data appears on a second device.
Workouts, sets, weights, reps, cardio sessions, plans, gyms and their equipment, bodyweight, body-fat percentage, tape measurements, readiness check-ins, protocols and doses, and laboratory results.
All of it is stored locally on your device. The app reads every screen from that local copy, which is why it works with no signal.
If you grant permission, the app reads sleep, steps, heart rate, bodyweight and body-fat percentage from Health Connect, and writes completed workouts back to it.
READ_HEALTH_DATA_IN_RECORDS). Laboratory results are entered by hand only.If you create an account, we store your email address and an authentication token. Passwords are handled by our authentication provider and are never stored by us in a form we can read.
We do not currently collect crash reports, analytics, advertising identifiers or device identifiers. If that changes, this policy will be updated before the change ships, and the section will say exactly what is collected.
We have never sold personal data and will not. We do not share it with advertisers or data brokers.
Nothing, unless one of these three things is true.
Your logged data is uploaded to our server so your other device — or your partner, if you have linked accounts — can see it. Row-level security means one account cannot read another's rows; this is enforced by the database, not by the app.
These sync: workouts, sets, cardio sessions, plans, gyms, equipment, exercise preferences, readiness check-ins, body metrics, protocols, protocol logs, laboratory results, settings.
These never sync, by design:
Partners share plans, workouts and sets. Partners do not share body metrics, protocols, laboratory results, progress photos or AI spending. Either person can unlink at any time.
See below.
AI features are optional and are off unless you use them.
When you use one, the app sends a small context — training numbers relevant to the question — to our server, which forwards it to Anthropic (our AI provider) and returns the answer. Our server holds the API key so it is never in the app.
The context never contains:
This is enforced in code at the point every request is built, not by instructions in a prompt, and it is covered by automated tests that fail the build if a restricted field is ever added to a request.
The one thing derived from protocol data that can be sent is a count — "a dose was logged on four days this week" — used to correlate training load with consistency. It carries no information about what was taken.
Anthropic processes these requests on our behalf. We do not use your data to train any model, and our agreement with Anthropic does not permit them to either.
Every AI feature has a deterministic fallback. If you switch AI off, or have no signal, or exceed the monthly budget, the app still answers — from the local engine — and always tells you which answer you are looking at.
Steady Increment is not directed at children and we do not knowingly collect data from anyone under 13 (or the equivalent minimum age in your jurisdiction).
Local data stays on your device until you delete it.
Synced data stays on our server until you delete it or close your account.
Settings → Data → Reset everything deletes both. It purges the server copy first and refuses to run at all if it cannot reach the server, precisely so it cannot leave you with a device wiped and a server copy waiting to come back.
Deleting the app removes all local data including progress photos. If you had an account, use the reset above before uninstalling, or contact us, to remove the server copy too.
Depending on where you live you may have the right to access, correct, export, delete, or restrict processing of your personal data, and to object to it.
Two of these you can exercise without contacting anybody:
For anything else, or to have your account and its server data removed entirely, email the address below. We will respond within 30 days.
If you are in the EEA or UK, the lawful basis for processing is performance of a contract (providing the app you asked for) and, for the AI features and Health Connect access, your consent — which you can withdraw at any time by turning them off.
Data in transit is encrypted with TLS. Data on our server is encrypted at rest and access is restricted by row-level security policies enforced by the database. Data on your device is protected by your device's own encryption and app sandboxing.
No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you and any required regulator without undue delay.
If this policy changes materially, the app will say so before the change takes effect rather than quietly updating a page nobody revisits.
Lonexa LLC support@lonexa.ai