Sore Winner
Privacy
Effective 2026-10-09. Operated by Stephen Sander, Alberta, Canada.
Sore Winner is a strength and nutrition coach. It holds information about your body, your training, your food and your conversations with the coach. This page says exactly what that is, where it goes, and how you get it back or make it go away. There is no advertising, no analytics, no tracking, and nothing is sold.
What the app holds about you
Your account
- email address
- name
- a hashed password if you set one
- a Google account identifier if you use Google sign-in
- your theme and unit preferences
About your body
- birth year
- sex
- height
- weigh-ins
- sleep you log
- water you log
- tape measurements
- progress photos you choose to add — encrypted by the app before they are stored
- menstrual cycle events you choose to log — any note is encrypted by the app
- recovery after childbirth, if you tell the app
- whether you are breastfeeding, if you tell the app
Your training
- your weekly plan
- every set you log
- cardio sessions — minutes, distance and how they felt — and your cardio programme
- training history you import from another app or a spreadsheet — the sets and weigh-ins in it, never the file itself
- how sessions felt
- injuries and niggles you report — any note you add is encrypted by the app
- equipment you have
Your food
- meal plans
- meals you log
- foods you dislike and dietary restrictions
- what is in your kitchen
- the household items you buy regularly, how much and how often
- saved meals and batches
- the food you ask the calculator about, and what the app estimated
- foods you have put your own figures on, so the app uses them next time
The coach
- your full conversation with the coach — encrypted by the app before it is stored, and, from 3 October 2026, read by the owner in a daily review to find and fix bugs
- things the coach keeps for you — what you ask it to remember, and lasting things you mention like a recipe or a food you avoid — encrypted by the app before they are stored, and editable or deletable from the coach at any time
- what the coach spent, so the app can cap it
- how your training, eating and each lift are graded, and why
- what the app asked TypeSafe on your behalf and what it answered, kept thirty days
Friends
- who you are sharing training with
- a share code you can reset
The arcade
- your best score on each arcade game, shown to everyone on the app on the all-time board — under a made-up name like “Iron Otter” unless you choose your own
- the name you choose for the board, if you choose one
- your top five on each game, kept on your device only
Grocery prices
- the shelf prices the browser extension reads for you, kept as your own price history
- unless you turn it off, the same shelf prices — store, province, product, price, sale and date, and nothing that says who scanned them — shared with everyone on the app nearby
- which province your scans come from, so shared prices are for your area
- the items the extension searched for at a store and could not find or add, so the searches can be fixed — kept with your account, and cleared whenever you ask
Security
- sign-in attempts, with the address they came from and an approximate location
- a truncated browser identifier
- what you asked the app for and whether it shipped
- if you connect Safari on your iPhone, a key for its extension — kept only as a one-way hash, with its name, when it was connected and last used, and whether you revoked it in Settings
Everything here is something you entered, logged, or told the coach. The app does not read your contacts, your location, your photo library, or anything else on your device. A progress photo is only stored if you add it.
Why
To be your coach. Your body data sets your targets. Your training log drives your plan. Your food log is compared to your targets. Your conversation is what the coach remembers. None of it is used for any other purpose, and none of it is used to advertise anything to you or anyone else.
Where it goes
Your data leaves the app's own server in exactly these cases and no others:
- Anthropic
Your conversation with the coach and a summary of your current state — today's training, your plan, your weight trend, your goal, what the coach keeps for you and, where you have told the app, your recovery status — are sent to Anthropic's API to generate the coach's replies. Anthropic does not use API data to train its models.
- Neon
Hosts the database. Everything the app stores lives there, encrypted in transit and at rest.
- Vercel
Hosts the app and serves every request, and holds a nightly backup of the database and your progress photos in private storage that only the app can read. Vercel attaches an approximate location (city, region, country) to requests, which the app records only in its security log.
- TypeSafe
Some of the app's small decisions are made by TypeSafe's API (the "Jev" model): which library food matches what you typed, whether a recipe line is one grocery item or several and which aisle it is in, and how your training or eating is going. For those it is sent the words you typed for a food, lines from your shopping list, and your own figures — sessions done against planned, days logged, protein against your target, a lift's recent volumes and sets, which weekdays your sessions were missed on, and your protein by meal — along with a few findings drawn from them, so it can choose which one is worth telling you. Never your name, email, body measurements or conversation.
- Googleonly if you use it
Only if you sign in with Google. Google tells the app your email address, your name, and that the address is verified. Nothing goes back to Google.
- Appleonly if you use it
Only if you sign in with Apple. Apple tells the app your email address (or a private relay address, if you chose to hide yours) and that it is verified. Nothing goes back to Apple.
- Stripeonly if you use it
Only if you subscribe. Stripe takes the payment on its own page — your card never reaches this app — and is given your email address and an account identifier so the subscription can be matched to you.
- Resend
Sends the app's emails: your address and the message — a link to confirm your email, a sign-in or password-reset link, an invitation, or your shopping list when you ask for it to be emailed. Nothing about your body or your conversation.
- Instacartonly if you use it
Only if the owner has connected it and only when you ask: the week's shopping list — item names and quantities, nothing about you — is sent to build a cart.
- Grocery stores — Real Canadian Superstore, Loblaws, No Frills, Save-On-Foods, Walmart and Costcoonly if you use it
Only when you tap Find in shop mode or use the Sore Winner browser extension: your own browser opens that store's search for the item, so the store sees the item's name, exactly as if you had typed it into their search box. Nothing else about you is sent, and the app itself never contacts them.
- Bring!only if you use it
Only if you send your shopping list to Bring!. Bring!'s servers fetch a signed, read-only link to that week's list — item names and quantities, nothing about you — which stops working after a week.
- Apple, Google or Mozilla push servicesonly if you use it
Only if you turn on a weigh-in reminder, or if you run the app and someone asks you for more coach allowance. The push carries no content at all — it wakes your device, and the app then works out what to say. The push service never sees a word of it.
Friends
If you and another person both agree, each of you can see the other's training and only training: sessions this week, hard sets this week, your streak, lifetime sessions, your rank, this week's heaviest lifts. Never weight, measurements, photos, food, or anything from the conversation. A request that has not been accepted reveals nothing. Either of you can end it at any time.
The owner
The person who runs this deployment can see an operational summary: who has an account, how each signs in, activity counts, what the coach is costing, and the security log. They cannot see your weight, measurements, photos or meals through the app, and the code enforces that. They do hold the database and its backups, which contain everything. From 3 October 2026 the owner also reads conversations with the coach in a daily review, to find and fix what the app got wrong — a meal logged with the wrong figure, an answer that missed. They are read for that and nothing else, never shared, and nothing written before that date is read.
How long
Until you delete it. Two things expire on their own: where a sign-in came from (the address and rough location in the security log) is removed after 90 days, and an account whose email was never confirmed is deleted after 30 days. Nightly backups are encrypted, kept for 30 days, and then deleted.
Your rights
- See it, and take it with you. Everything is shown in the app, and Settings → Your data downloads all of it as one file — your profile, weigh-ins, measurements, every set, plans, cardio, meals, your kitchen, your photos by date and the whole conversation — plus your training history as a spreadsheet other apps can read. The coach can do the same on request.
- Correct it. Everything can be edited or removed, by tapping or by asking the coach.
- Erase your data and keep your account, from Settings.
- Delete your account entirely, from Settings. Everything the app holds about you is removed immediately and permanently, including from the coach's memory. There is no waiting period. What your use of the coach cost is kept only as part of an anonymous daily total, linked to no account, so the app's bill still adds up. An encrypted nightly backup taken before you deleted it still holds your data until it ages out after 30 days, and an account is never restored from one without your asking.
- Ask. Write to stephen.sander1@gmail.com for anything the app cannot do itself.
Security
Passwords are hashed with scrypt. Sessions are signed and cannot be pointed at another account. Nothing in an account can be used until its email address is confirmed — by a link we send, or by Google or Apple sign-in, who have already confirmed it. The only cookie is the one that keeps you signed in. The coach cannot reach accounts or credentials at all.
Everything travels encrypted, and the database is encrypted where it is stored. On top of that, the app encrypts the most personal things itself, with its own keys (AES-256-GCM), before they are ever written down — so a copy of the database or a backup, on its own, shows only scrambled data for these:
- your conversation with the coach
- what the coach keeps for you — titles and text
- progress photos
- your notes on pain, injuries and niggles
- your notes on your cycle
- every nightly backup, whole
Numbers the app has to calculate with — weights, sets, meals, measurements — are protected by the database's encryption but not by this second layer, because the app could not work out your progress from scrambled numbers.
Age
Sore Winner is for adults. It is not directed at anyone under 18, and no account is knowingly created for a minor.
Changes
If what the app collects or where it goes changes, this page changes with it and the effective date above moves. This page is generated from the same list the code is checked against, so it cannot quietly fall behind.