Privacy Policy

Nothing. Smite has no server of ours to send data to, no account to attach it to and no analytics to record it with. The app's privacy manifest declares no collected data types and no tracking, and Apple publishes the same answer on the App Store product page.

So this policy is not a list of what we take. It describes the permissions Smite asks for on your device and what each one does with what it touches. In every case the answer is the same: it stays on the device, in your own iCloud if you switch sync on, or on a server of your own if you set one up.

Everything you create is written to Smite's own storage on your iPhone and works fully offline. That includes:

Sync is optional, off until you turn it on, and part of Smite Unleashed. It uses Apple's CloudKit to mirror your training into the private database of your own iCloud account, the same place your other apps keep their iCloud data. There is no Smite sign-in: Apple authenticates you through your Apple Account.

Apple encrypts that data in transit and at rest. We have no access to it, no keys for it and no way to see that it exists. You can switch sync off at any time in Settings, under Sync, Backups & Export, and remove the stored copy from iOS Settings under your Apple Account. iCloud itself is governed by Apple's Privacy Policy.

Sync to Your Server is optional, off until you set it up, and part of Smite Unleashed. It sends a copy of your training to a server address you enter yourself, using an access token you provide, so you can use the data in your own tools. We do not run that server, choose it or have access to it: the data goes from your iPhone straight to the address you entered, and it never reaches us.

Before anything is sent, Smite shows that address and asks what to share. Your workouts with their sets and notes, and your exercise library, are always included. Routines and your training plan, gyms and bars, gym locations, and body measurements (including bodyweight read from Apple Health) are each sent only if you switch them on, and locations and body measurements start off. Progress photos, your settings and anything that identifies your device are never sent. A different server address asks for your consent again.

You can change what is shared, or switch it off and forget the server and its token, at any time in Settings, under Sync, Backups & Export, Sync to Your Server. Turning it off stops sending; what your server already received stays there, and from then on it is in the hands of whoever runs that server. The developer guide describes exactly what is sent.

Check-in photos are taken with the camera inside Smite and written as ordinary image files into the app's private storage. They are deliberately left out of iCloud sync: even with sync on, the photos never leave the device, and only the check-in entry travels.

They are left out of exports and backups too. Deleting a check-in deletes its photo, and Delete All Data removes every one of them. Smite never reads your photo library.

Health is optional and does nothing until you grant it. When you do, Smite writes each finished workout to Health as a strength-training session and can write your bodyweight; it reads your latest bodyweight so measurements stay current, and your biological sex so the strength standards compare you against the right table. Your set-by-set detail stays in Smite.

On Apple Watch, Smite reads heart rate and active energy while a session runs, so the workout it saves to Health carries them. All of that is handled by Apple's Health store on your own devices. Smite sends none of it anywhere, except the bodyweight readings it keeps, when you choose to include body measurements in Sync to Your Server. You can review or withdraw the access at any time in the Health app.

Logging a set by voice uses the microphone and Apple's speech recognition. Smite requests on-device recognition wherever the hardware supports it, so the audio never leaves your iPhone; where it does not, Apple processes the audio under its own privacy policy. Either way Smite keeps no recording: the transcript becomes a weight and a rep count, and is then gone.

Location does one job: recognising which of your own gyms you are standing in, so the app can load its bars and plates. Access is While Using the App, and it is asked for the first time you place a gym on the map rather than at launch. Nothing runs in the background: no region monitoring, no significant-change updates, no history of where you have been. The coordinates you save belong to that gym record and stay on the device, or in your iCloud if sync is on. They reach a server of your own only if you include gym locations in Sync to Your Server, which starts off.

Rest timers, training-day nudges and check-in reminders are local notifications, scheduled and delivered by iOS on the device itself. Smite has no push server and sends you nothing. The only remote notifications involved are the silent ones Apple's CloudKit uses to tell a device that a sync change is waiting.

There are none. Smite contains no analytics or advertising SDKs, no advertising identifier and no third-party trackers. It does not record what you tap, does not build a profile of you, and does not track you across other apps or websites. Its privacy manifest sets tracking to false and lists no collected data, which is a claim Apple checks at submission.

If you have turned on Share With App Developers in iOS privacy settings, Apple may pass us crash logs and performance statistics for Smite. Those come from Apple, in Apple's own aggregated form, and contain no workout data and nothing that identifies you. Turning that setting off stops them. Smite has no crash reporting of its own.

Smite is free to download. The optional Smite Unleashed unlock is a one-time in-app purchase sold and processed by Apple, so we never see your payment details, your billing address or your Apple Account. The app only stores a local flag saying whether the unlock applies, and mirrors it to a paired Apple Watch. The 14-day trial is a date in local storage: nothing is charged, nothing is registered, and nothing leaves the device.

Smite keeps rolling snapshots of its own database on your device, so a bad update can be rolled back. Those snapshots never leave it. An export is different: the moment you share a JSON or CSV file it goes wherever you send it, and what happens to it there is outside the app's control. Exports carry no photos.

The strongest protection your training has is that it barely goes anywhere. It sits in Smite's own storage on your iPhone, under iOS file protection and whatever passcode, Face ID or Touch ID you have set, which is why setting one matters more here than any promise we could make. With sync on, Apple encrypts the copy in your iCloud in transit and at rest. Sync to Your Server only ever connects over HTTPS with normal certificate checks, refuses redirects, and keeps its access token in your iPhone's Keychain; how well the copy is kept after it arrives depends on the server you run.

There is no server of ours to break into, no user database to leak and no password of yours to steal. What the design cannot protect is a file after you export and share it, or a device someone else can unlock. No system is perfectly secure and we make no absolute guarantee, but the amount of trust you have to place in us stays close to zero.

For as long as you keep it, and not a day longer. Smite deletes nothing on a schedule: history stays until you remove it, and a check-in photo stays until you delete the check-in. We hold no copy of any of it, so there is no retention period on our side to describe and nothing that quietly expires. Apple applies its own retention to the App Store transaction and to whatever sits in your iCloud, and a server you sync to keeps what it receives for as long as you keep it there.

Your data lives on your device, and in your iCloud if sync is on, and it can outlive the app: uninstalling does not clear an iCloud copy. In Settings, under Sync, Backups & Export, Delete All Data erases every workout, routine, exercise, record and check-in on the device, and in iCloud too when sync is running. It also switches off Sync to Your Server and forgets its address and token, without touching what that server holds: delete that copy on the server itself.

To finish the job, remove the app and clear its iCloud data from iOS Settings under your Apple Account. Once it is gone from the device and from iCloud it is gone for good. Because we hold no copy, there is nothing to request from us and nothing for us to delete on your behalf.

We could not hand over your training if we wanted to. If a subpoena, a court order or a police request ever arrives, the only truthful answer available is that we hold nothing and can reach nothing. Data in your iCloud is Apple's to answer for, under Apple's own legal process, and data on your phone is yours.

Where the GDPR or the UK GDPR applies, the only processing in play is what the app does on your own device and, if you enable them, the sync into your own iCloud and the copy sent to a server you choose. That rests on providing the functionality you asked for and on the consent you give when you switch a permission on. We operate no servers and receive no personal data, so there is no further processing to justify, no legitimate-interest balancing to run, and no profiling or automated decision-making.

Training records, bodyweight and check-in photos are health data, which the GDPR treats as a special category. Wherever a feature in this policy touches it, that happens because you explicitly asked for the feature by granting the permission, switching sync on or setting up Sync to Your Server, and you can withdraw that at any time by turning the feature off.

Depending on where you live you have rights of access, correction, deletion, restriction, objection and portability. Because your data sits on your device and in your own iCloud, you exercise all of them directly: the app shows you everything it holds, lets you edit or delete any of it, and exports the lot as JSON or CSV on demand. If you think your rights have been infringed you can complain to your local supervisory authority; in the Czech Republic that is the Office for Personal Data Protection.

If you live in California, Colorado, Virginia or another US state with a privacy law, the answer is the one everybody else gets: we collect no personal information, so there are no categories to disclose, no sources to list and no business purposes to explain. We have never sold or shared personal information, we do not process it for cross-context behavioural advertising, and we run no financial-incentive or loyalty programme. The rights to know, delete, correct and opt out have nothing here to attach to.

Smite is not intended for children under 13, or under 16 in the European Union where local law sets that age. No personal data reaches us from anyone, so there is none gathered from a child either. If a child has used the app on your device, everything they logged is on that device and can be deleted there.

We do not sell or share your data, because we never receive it. The only company involved at all is Apple: the App Store for the download and the purchase, iCloud and Health for the features you opt into. If you set up Sync to Your Server, your data also goes to whoever runs the server you entered, which is you or someone you chose, and to no one else. Smite embeds no analytics provider, no advertising network and no third-party service. It does bundle one piece of open-source code, the MuscleMap body silhouettes, which is drawing code with no service behind it.

Smite transfers nothing anywhere for us. If optional iCloud sync stores your data in a data centre outside your country, that transfer is Apple's, made under Apple's own safeguards. We are not a party to it and receive nothing from it. Sync to Your Server sends data to the address you entered, wherever that server happens to be.

The site you are reading sets no cookies, runs no analytics and embeds nothing from anyone else. It remembers one thing, in your browser's own storage: whether you chose the light or the dark theme. The price is shown in your currency by guessing from your device's time zone and language, in your browser, and that guess is stored nowhere.

Like any web server, the host serving these pages processes the request itself, including your IP address and browser, to deliver the page and keep the site up. We add no tracking on top of that and build no profile out of it.

If this policy changes materially, the new version goes up here and the date at the top changes with it. We will not quietly expand what the app collects: the privacy manifest inside the app and the privacy label on the App Store are public, and any change would have to show up there too. Continuing to use Smite after an update means you accept it.