Privacy Policy
SportzLabs Privacy Policy
Last updated: 7 October 2026
Overview
SportzLabs builds sports intelligence products and related websites. This policy explains the information used by the SportzLabs corporate site and linked SportzLabs apps, including Workout Studio and AFL Performance.
Corporate Website
The SportzLabs website is a marketing and information site. If you contact us by email, we may receive your email address and the information you choose to include in your message so we can respond.
Linked Apps
SportzLabs apps may use analytics, performance data, and links to third-party publishers. Each app may have more specific privacy details. AFL Performance does not currently require account registration or login.
AFL Performance
AFL Performance provides team and player statistics, comparisons, charts, trend signals and links to AFL news. It does not currently require an account. Its sports information concerns teams, players and publicly available sports coverage; it is separate from the personal workout and sensor records you enter in Workout Studio.
The analytics, third-party services, support and privacy-request sections of this policy also apply to AFL Performance. When you follow a news or other external link, the destination site may collect information under its own privacy policy. If you contact us about AFL Performance, we receive the contact details and any information or screenshots you include.
Workout Studio
Workout Studio uses Supabase to manage account email, profile name and authentication. Workout routines and session history currently remain in your browser or installed app, separated by account; they do not yet sync between devices. Clearing browser storage removes this local workout data.
Workout Sensors
When you connect a compatible Bluetooth sensor, Workout Studio records heart-rate readings and optional temperature readings with timestamps and the exercise you select. These stay in local browser or installed-app storage. Temperature is never sent to Strava. You can stop recording by disconnecting the sensor or ending the session. Bluetooth access requires your device permission. No scan-derived location is collected.
Optional Strava Connection
For supported strength workouts, we also send matched exercise identifiers, completed sets, repetitions, weights and durations so Strava can generate its own workout log and muscle map. Unmatched exercises remain in the activity description. Heart-rate device test readings outside an active workout are not saved or uploaded.
If you connect Strava, Workout Studio stores your Strava athlete identifier and authorization tokens securely on the server to upload newly completed workouts automatically when automatic sharing is enabled. You can switch this off in Account settings. These tokens are not available to other users or the browser. Workout Studio does not import your Strava activity feed.
Posting sends the activity title, start time, duration, type and a description of completed sets to Strava. Heart-rate averages and peaks are included only when you separately enable heart-rate sharing. Manual uploads allow you to review and edit these fields. No GPS route is generated. Visibility is controlled by your Strava settings. Minimal activity identifiers and posting status are retained to prevent duplicate uploads.
You can disconnect Strava in your Workout Studio account settings or revoke access in Strava. Disconnecting removes stored authorization tokens; activities already posted remain on Strava. Contact support for account or integration-record deletion requests.
Analytics
SportzLabs apps may use analytics tools, including Google Analytics, to understand product usage and improve the experience. Analytics events are intended to measure app usage and are not intended to collect passwords or sensitive account credentials.
Third-Party Services
SportzLabs products may link to external websites, data providers, news publishers, analytics providers, app stores, or support services. Those services operate under their own privacy policies.
Account And Support Requests
To request support or ask a privacy question for a SportzLabs app, contact us through the SportzLabs support page.
How Workout Studio Uses Information
Account information is used to sign you in and maintain your profile. Local workout and sensor information is used to show your routines, completed sessions and training summaries. Connecting Strava is optional: when you choose to share, the selected workout details pass through our Supabase service to Strava. This is separate from cloud synchronisation of your workout history.
The iPhone app does not currently integrate Apple Health or HealthKit. Bluetooth heart-rate and temperature readings come from sensors you choose to connect. Workout Studio does not use these readings for advertising.
Website Analytics And Local Storage
Some SportzLabs website pages load Google Analytics to measure visits and use of the site. Google Analytics can use cookies and collect page views, browser and device information and approximate location. This is separate from Workout Studio’s locally stored workout history. The current Workout Studio iPhone build does not include Google Analytics.
You can manage website cookies through your browser settings. Blocking or clearing storage may affect sign-in and removes locally saved workouts. See Google’s Privacy Policy for its handling of analytics information.
Service Providers And Overseas Processing
Supabase provides Workout Studio authentication and the server-side Strava integration. The current Workout Studio Supabase project is hosted in Singapore. GitHub Pages hosts the SportzLabs website. Google provides website analytics, and Apple provides app distribution and TestFlight. These providers may process technical information, including network requests and service logs, to operate and secure their services. Information may be processed outside Australia.
Provider privacy information is available from Supabase, GitHub, Strava and Apple. Your email provider also processes support messages you choose to send.
TestFlight Testing
When you test Workout Studio through TestFlight, Apple automatically collects crash logs and usage information and shares them with the developer. This can include app and device details and, depending on how you were invited, your name and email address. Feedback and screenshots you submit are also shared. We use this information to investigate issues and improve the app; we do not share TestFlight information with third parties.
Apple explains its collection and retention in TestFlight & Privacy. Avoid including passwords or information you do not want to share in feedback or screenshots.
Retention And Deletion
Local workout history and sensor records remain in the browser or installed app until you remove them or clear that app’s storage. Signing out does not itself delete this information. Uninstalling an app or clearing local storage does not delete your online account, server-side integration records, or activities already posted to Strava.
Account records are retained to operate your account until it is deleted. Strava connection tokens are retained while connected and removed when you disconnect. Activity identifiers and posting status support duplicate prevention; you can request deletion of these integration records. Activities already sent to Strava must be managed in Strava.
Support correspondence and any TestFlight reports we retain are kept for as long as needed to address the request, investigate the issue or maintain necessary support records. Provider-managed logs and backups follow the provider’s retention arrangements; deletion from active systems may not immediately remove backup copies. Information may also need to be retained to meet legal obligations or resolve disputes.
Privacy Choices And Contact
For access, correction or deletion of account information, integration records or support information, or to raise a privacy concern, email Derek@sportslabs.com or use the support page. Identify the app and the email address associated with your account. We may ask you to verify ownership before acting on a request; do not send your password.
You can withdraw optional sharing by turning off automatic Strava uploads or heart-rate sharing, disconnecting Strava, or revoking Bluetooth permission in your device settings. These choices stop future collection or sharing for the relevant feature; they do not remove information already sent. We cannot access or erase workout history held only on your device, so local records must also be removed there.
Changes
This policy may be updated as SportzLabs products change. The updated date on this page will reflect the latest version.