Privacy
MCP Strength is a workout logger for the iPhone. This page says what we store, who can see it, how long it lasts, and how to delete it. It is written to match the app as it works today, not a lawyer’s template. It is not medical advice and we are not a covered health-care provider.
Last updated 31 August 2026.
Who we are
MCP Strength is run by the person behind this product. Questions: help@mcpstrength.com.
What we store
If you create an account we store:
- your email and, if you created the account with a password, an encrypted password (we cannot read the password back)
- if you use Sign in with Apple or Google, the email that provider shares (Apple may be a private relay address) and, on the first Apple grant, a name — we do not post to Google, and we do not offer Facebook
- workouts (sets, weights, reps, rest, set type, RPE, notes, sticky notes, when you trained)
- templates and programs you save
- exercises you add, plus the shared exercise library
- body measurements you record
- settings such as weight units and Apple Health switches
Those sync to our database (hosted with Supabase in the United States) so another of your devices — or an AI tool you connect — can see the same history. The phone also keeps a copy locally. A workout you log with no signal is real on the phone first; it uploads when it can.
Why we store it
To run the logger you asked for: so your training is backed up, so you can use more than one device, and so an AI you explicitly connect can read and write your templates and history — never anyone else’s.
Apple Health
Health data stays under your control. The app only reads or writes Health types you allow, and only when the matching switch in Settings is on. Types we can touch, if you allow them: workouts and Active Energy, plus Weight, Body Fat %, calories eaten, and Waist. Other body-part measurements stay in this app; Apple Health has no type for them.
This is training data, not a medical chart. We do not use Health data for advertising. Turning a switch off in the app, or revoking access in Apple’s Health app, stops that direction.
Claude, ChatGPT, and other AI tools
Nothing is shared with an AI until you connect one (the connector URL is https://mcp.mcpstrength.com) and tap Allow on this site. That connection is to your account only. You can deny a request. The AI then sees what the tools return — including notes and sticky notes on workouts and templates, if those tools are used.
There is no “revoke connected apps” button on this site yet. Change your password in the app, or delete the account, to cut off old sessions. We do not collect the chat log from Claude or ChatGPT.
Who else receives data
- Us — to operate the app and answer help@mcpstrength.com.
- Supabase — hosts the database and sign-in.
- Apple — if you allow Health, Apple holds those samples under your Apple ID. If you sign in with Apple, Apple shares the email (or a private relay) and, on first grant, a name. If you install via TestFlight or the App Store, Apple also sees what any App Store account sees.
- Google — only if you tap Continue with Google or Connect Google. They share the email on that Google account. We do not post anything to Google.
- The AI client you connected — only after Allow, and only as that signed-in user.
We do not sell your training data. We do not put a made-up number in Apple Fitness. The database refuses reads across accounts even if our server misbehaves.
How long it lasts
Your live rows stay until you delete them or delete the account. When you delete a workout or template in the app, we keep a hidden copy (a tombstone) for up to 90 days so another device that was offline can learn it was deleted instead of bringing it back. After that window the row is removed.
Deleting the whole account removes the login immediately and deletes your rows on the server. A phone that was offline may still show a local copy until it next opens; that copy is not an account.
Deleting
You can delete individual workouts and templates in the app. To delete the whole account, open Profile and choose Delete Account. That signs you out, wipes the copy on that phone, and removes the login. You will not be able to sign in again with that account.
If you cannot open the app, email help@mcpstrength.com from the address on the account and we will delete it.
Children
MCP Strength is not directed at children under 13. Do not create an account for one.