Privacy Policy

Last updated · 29 May 2026

This Privacy Policy explains how Steel ("we", "us", "our") collects, uses, and protects your information when you join our waitlist, visit getsteel.app, or use the Steel app (together, the "Service"). Steel is operated from London, United Kingdom.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

Depending on how you use the Service, we may collect:

• Waitlist information: your email address when you join our waitlist.
• Account information: if you create an account, your display name, username, email address, and password (stored securely and encrypted).
• Profile information: optional details you choose to add, such as your sport, gym, bio, and profile photo.
• Workout data: exercises, sets, weights, reps, and other training information you log.
• Usage data: basic technical information such as device type, browser, and interactions with the Service, used to improve performance.

2. How We Use Your Information

We use your information to:

• Notify you when the Steel app launches (if you joined the waitlist)
• Provide, operate, and maintain the Service
• Display your workouts and profile to others according to your chosen privacy settings (Public, Private, or Solo)
• Calculate leaderboards, progress charts, and personal records
• Improve and develop new features
• Respond to your questions and provide support

3. Legal Basis for Processing

We process your personal data on the following bases:

• Consent: when you join the waitlist or create an account, you consent to us processing your data for the purposes described.
• Legitimate interests: to operate, secure, and improve the Service.
• Contract: to provide the Service you have signed up for.

4. Your Privacy Controls

Steel gives you control over what others can see. You can set your profile to:

• Public: your workouts appear in feeds and on leaderboards.
• Private: your workouts are hidden from others; you can still browse.
• Solo: all social features are turned off.

You can change these settings at any time within the app.

5. Sharing Your Information

We do not sell your personal data. We share information only with:

• Service providers who help us run the Service (for example, our hosting and database provider, Supabase, and our deployment provider, Vercel). These providers process data on our behalf under appropriate safeguards.
• Other users, but only the information you have chosen to make public through your privacy settings.
• Legal authorities, if required by law.

6. Data Retention

We keep your information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within a reasonable period, except where we are required to retain it by law. Waitlist emails are kept until launch or until you ask us to remove you.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict how we process your data
• Withdraw consent at any time
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at the email below. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Data Security

We use industry-standard measures to protect your data, including encryption of passwords and secure database access. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Children

The Service is not intended for anyone under the age of 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. International Users

Steel is opera