Last updated: 23 September 2026
Valt is a workout tracking app built and run by Rob Kinsella, who is responsible for your data under UK data protection law. Valt keeps your data on your phone first. You can use it fully without an account, in which case your training data never reaches me at all.
This policy explains what Valt stores, where it goes, and what you can do about it. The terms of use cover everything else.
Everything above is stored in Valt's own database on your device. That's what lets you log a session with no connection at all.
Signing out doesn't delete it. Your data stays on the device, so signing back in is immediate. If you've signed in on a device that isn't yours, your data remains there, and on Android it may also be included in that device's own backup. To remove it, uninstall Valt or clear its data in your device settings. Signing out on its own isn't enough.
You can take a copy of everything at any time from Settings > Data Export, whether or not you have an account.
Workout recordings, the second-by-second files, stay on your phone. They're never synced to your account, and they're excluded from cloud backup, though they do move across when you set up a new phone from this one. If you have allowed it, the heart rate, speed and power from a recording are also copied into Health Connect, which is on your phone too. If you connect intervals.icu, a session's recording is sent there with it (see Connected services). You can export one as a TCX file from Settings > Export Data to open it in another app. Once exported, where it goes is up to you.
If you create an account, your data and settings sync to Supabase, on servers in the European Union, so it's backed up and available on your other devices. Progress photos are never uploaded: they stay on your device.
Synced data is sent over an encrypted connection, encrypted at rest by Supabase, and access-controlled so only your account can read it. Free-text fields such as notes and injury descriptions are also obscured before upload, so they aren't readable at a glance. This isn't end-to-end encryption.
Your password is handled by Supabase's authentication service. Valt never stores it. Your email address is used to sign you in and for account messages such as password resets, never for marketing.
You can choose to connect other services. Each is off until you turn it on.
API keys and sign-in tokens for these services are kept in your device's encrypted storage and never sent to me.
When Valt crashes or hits an error, it can send an anonymous report so the problem can be found and fixed.
A crash report contains: the error message and the technical stack trace showing where in the app it happened, the Valt version you're running, your device model and manufacturer, and your operating system version.
A crash report never contains: your workouts, sessions or sets; your measurements, progress photos or notes; your name, email address, username or IP address; or any image of your screen.
Crash reports are processed by Sentry, on servers in the European Union, and deleted after up to 30 days. Crash reporting is on by default. You can turn it off at any time in Settings > Crash Reports, and it stops immediately.
Settings > Send Feedback opens your own email app with a message prepared for you. Nothing is sent until you press send, and you can edit or delete any part of it first, including the technical details filled in automatically (your Valt version, device and operating system). It's used only to reply to you and fix the issue.
The valt.fitness website counts visits with Umami, a privacy-friendly analytics service. It sets no cookies, doesn't identify you or follow you across other sites, and records only general details such as the page viewed, the referring site, your country and your browser type. The app itself has no analytics, and the pages the app opens aren't counted.
The app checks valt.fitness a few times a day for service notices, such as planned maintenance, which it shows on your dashboard. That request carries nothing about you or your data. Like any web request, the site's host, GitHub Pages, sees your device's IP address; Valt itself never receives it.
Data you sync is used only to provide the sync you asked for. Because some of it is health data, syncing relies on your consent, which you can withdraw at any time by deleting your account. Crash reports are used to keep the app working, which is a legitimate interest you can opt out of.
You can:
You can delete your account in the app from Settings > Account > Delete Account. This removes your account and all its data from the server. You can choose whether to keep or remove the copy on your device.
If you can't access the app, email support@valt.fitness from the address linked to your account, and your account will be deleted within 30 days.
Valt isn't intended for anyone under 16.
When this policy changes, the date at the top changes with it. A change that affects how your data is used will also be mentioned in the app's release notes.
Questions about this policy or your data: support@valt.fitness
Valt Relay, the watch app, has its own privacy policy.