Privacy without an account requirement.
What data Kohlrabi collects and what happens to it. You can use the app without signing in - when you stay signed out, your workout data remains on the device and in the browser you’re using. The short version is in the cards below; the full policy follows.
Last updated: October 31, 2026.
Signing in is optional
An account is only needed if you choose cross-device sync. The basic workout tracker works without one.
Your device comes first
Signed-out workout data is stored locally in your browser. Clearing browser data or changing devices can remove it, so the app includes a data export for backups.
Share links are public
A share link opens for anyone who has it - no sign-in wall. Don’t put anything in a shared workout you wouldn’t post publicly.
You control deletion
Settings → Data has export, delete-all and, when you’re signed in, delete account. You can also sign out and keep using the app locally.
The full policy
Data that stays on your device
Without an account, everything you log is stored locally in your browser. It never leaves your device while you stay signed out. Clearing browser data, switching browsers, or changing devices can remove it, so use the Settings export for backups.
Account information
If you create an account, we store your email address to sign you in and operate sync. Sign-in is passwordless: a magic link or one-time code sent to that address. Those sign-in emails are delivered through Resend.
Email updates
When you sign in, your email address is added to our mailing list, run by EmailOctopus, with three topics: app updates, a newsletter, and app tips. All three are on by default. Turn any of them off in Settings → Marketing, or use the unsubscribe link in any email. Signed-out users are never added to the list.
Kohlrabi Coach waitlist
If you join the Kohlrabi Coach waitlist on the trainers page, your email goes on that waitlist only, run by EmailOctopus. We email you once, when Coach opens. Joining the waitlist doesn't add you to the mailing list above.
Synced workout data
When you’re signed in, your workouts, programs, settings, and preferences are stored with our database provider (Supabase) so they sync across your devices.
Analytics
We don’t run analytics. The site and app send no usage events to us or anyone else. Nothing to opt out of.
Share links
Share links (kohlrabi.us/s/…) are public by design. The link carries the workout or program being shared - its exercises, sets, and targets - so anyone with the link can open it. A copy is kept on our servers so link previews render. There is no expiry and no sign-in required to open one.
How we use your data
Your data is used to operate the service: signing you in, syncing your workouts across devices, rendering share links, and responding to messages you send us. That’s it - no advertising profiles, no data brokerage.
What we don’t do
We don’t sell your personal data. We don’t run third-party ad trackers. We don’t collect anything you don’t give us: no location, no contacts, no health-app data. No workout data is given to any AI model for training. See the AI disclosure page for exactly how AI is and isn’t used.
Service providers
We use a small set of third parties, each for one job: Cloudflare (hosting and edge delivery), Supabase (database and authentication), Resend (sign-in emails), EmailOctopus (the mailing list), and Letterbird (the bug report form). They process your data only to provide those services. Donations are handled entirely by Buy Me a Coffee; we don’t see or store your card details.
Bug reports
If you report a bug through the form on the What's new page, the form is run by Letterbird and whatever you include reaches us by email. Reports may also become GitHub issues. Please don’t include passwords or other sensitive information.
Coaching inquiries
Messages sent through the coaching inquiry form are used to respond to you about training. They aren’t added to any marketing list.
Data retention
Local data stays until you delete it. Account and synced data is kept while your account exists. Deleting your account removes your synced data and the share links you created right away; backups may persist briefly. Deleting your account doesn’t remove you from the mailing list, so unsubscribe from the emails or contact us to be removed.
Your controls
Settings → Data includes a full JSON backup, a CSV export of your workout history, and delete-all with confirmation. When you’re signed in, Delete account in the same place removes your account and synced data. You can sign out anytime and keep using the app locally.
Security
We use reasonable technical and organizational measures to protect your data, including encrypted connections and access controls. No method of transmission or storage is completely secure.
Children
The service isn’t directed at children under 13, and we don’t knowingly collect their personal data.
Cookies and local storage
The site and app use browser storage to keep you signed in, remember your theme, and save your workouts locally. We don’t use third-party advertising cookies.
Changes to this policy
Material changes will be posted on this page with a new last-updated date.
Contact
Questions about privacy, or a deletion request? Send a message through the inquiry form under Work with me on cruciferousgreens.com.