Privacy
What AYRLI knows about you.
Last updated 7 September 2026. AYRLI is early software and this page changes when the app does.
The short version
- The location permission is used for one thing: noticing when you arrive at your gym and when you leave. The app records the two crossings, not a trail.
- Your sessions are visible to the people in your crew. That is the point of the app.
- Your measurements, your progress photos, your workout log and your voice notes are private to you unless you tick "share" on a specific one.
- There are no ads, no analytics, no tracking SDKs, and nothing is sold to anybody.
- Your data sits in a database in Sydney.
- Ask and it all gets deleted.
Who you are dealing with
AYRLI is built and run by its developer in Brisbane, Australia. It is not a company product and there is no marketing department behind it. For anything on this page — a question, a correction, a complaint, or a deletion request — email support@ayrli.app.
Location: exactly what happens
AYRLI asks for the "Always" location permission, which is the strongest one iOS has, and it is fair to be suspicious of that. Here is what it does with it.
The app registers a geofence — a circle of between 50 and 500 metres around the gym you chose. iOS watches that circle, not the app. When you cross into it, iOS wakes AYRLI in the background and hands it one fact: "entered". When you cross out, it hands it "exited". The app turns those two facts into a session with a start time and an end time.
What that means in practice:
- No location history is kept. A session row stores which gym and what time. It does not store coordinates. There is nowhere in the database that a track of your movements could go.
- The app does not run continuous location updates. It only registers regions. Nothing in AYRLI streams or samples your position, and the phone's own region monitoring is what is doing the watching.
- It only knows about the gym you gave it. Crossing the circle is the only location event that exists. Where you go the rest of the day is not something the app is told.
- If you say no, the app still works. Without "Always" the geofence cannot run, so AYRLI shows a check-in button instead. Tapping it takes a single position reading and sends it straight to the server to confirm you are actually at the gym; that reading is never stored, only answered yes or no.
The same one-off reading is taken if you use the map to set or move your gym's pin, so the map can open where you are.
What is stored
Some of this is not built yet. Where that is the case it says so, and the row is here so that this page does not have to change quietly later.
| Your account | Your email address and password, or your Apple ID if you sign in with Apple. Handled by Supabase Auth; the password is stored hashed and AYRLI never sees it. |
|---|---|
| Your profile | Your handle, display name, full name, a short bio, your profile photo, your weekly session target, and which crew you are in and your role in it. |
| Sessions | Start and end time, length, which gym, whether it came from the geofence or you added it by hand, the type (full, rehab, cardio, recovery), whether it was solo or with the crew, what you were training, and whether it happened at the gym, at home, at the physio or elsewhere. |
| Workout log | Exercise names, set numbers, reps, weights, how hard it felt, and personal bests. |
| Measurements | Whatever you choose to log: weight, body fat, chest, waist, hips, shoulders, arms, thighs, calves, neck — with the date, and any target you set. |
| Progress photos | The photo, the date, and which pose it is. |
| Plans and reasons | What you said you would train and when, whether you answered yes, no or not sure, whether you turned up, and — if you logged one — the reason you missed a day. |
| Rehab | If you use rehab mode: which areas you are working on, your weekly plan, pain scores before and after, drills, and your notes. |
| Crew activity | Feed entries for your sessions, badges and milestones, and the reactions people leave on them. |
| Friends | Who you have sent a friend request to, who has sent you one, and who accepted. |
| Voice notes (not shipped yet) | The recording, its transcript, and the exercises and observations pulled out of it. Recorded on your phone first and uploaded when there is signal. |
| Patterns (not shipped yet) | Facts drawn from your own voice notes — performance, pain, sleep, mood and so on — and the weekly summaries built from them, so the app can tell you what it is noticing. This part is private to you and the crew never sees it. |
Health information
Measurements, pain scores, injuries and the reasons you give for missing a day are health information, and Australian privacy law treats them as sensitive. They are stored because you typed them in, they are private to you by default, and nothing in the app shares them anywhere unless you specifically say to.
Who can see what
This is enforced in the database itself, on every single read, rather than by the app remembering to be careful. The rules are:
| Only you, always | Your workout log, your measurement targets, your weekly schedule, your rehab plan and rehab logs, and — when they ship — your voice-note facts and pattern reports. |
|---|---|
| Only you, unless you share it | Every measurement, every progress photo, every voice note and every missed-day reason. Each one carries its own share flag and starts off unshared. Sharing one does not share the rest. |
| Your crew | Your profile, your sessions, the plans you broadcast to them, and your feed activity. Crew-mates see that you trained, for how long, and what you called it. |
| Nobody outside your crew | There is no public profile, no discovery, no web view of anyone's training. A crew can only ever read its own members. There is no way to search the app for a stranger. |
Private mode
If you would rather your crew not know it is you, private mode replaces your name and photo with a generated alias — "Ghost 47" — for everyone in the group. Your sessions, your presence and your streak all keep counting. The people who still see the real you are you and anyone whose friend request you accepted. The crew owner and admins get no back door.
A note about photos
Progress photos are stored in a private bucket and can only be fetched by you, or by your crew if you shared that specific photo. Your profile photo and a crew's cover photo are different: they sit in a public bucket, so anyone who has the exact URL can load them without signing in. The URLs are long and are not published anywhere, but they are not secret. Do not put anything in a profile photo you would mind a stranger seeing.
Notifications
At the moment every notification AYRLI shows you is scheduled by your own phone — the check-in confirmation and reminders. There is no push server and no device token is collected. If that changes, this page changes with it.
Who else touches your data
- Supabase runs the database, the sign-in and the file storage. The project is hosted on AWS in ap-southeast-2, Sydney, so your data stays in Australia.
- Apple, if you use Sign in with Apple, and for delivering the app itself through TestFlight or the App Store.
- Google Maps Platform, only when you search for a gym. What you typed goes to Google to get the list back, and — if the app knows roughly where you are at the time — a 20 km circle around you, so the gym down the road ranks above one in another city. Nothing about your training is sent, and nothing at all is sent unless you are searching.
- A transcription service, once voice notes ship, to turn a recording into text. Which one it is will be named here before the feature is switched on.
That is the whole list. There are no advertising SDKs, no analytics, no crash-reporting service and no third-party trackers in the app or on this website. Nothing is sold, and nothing is shared with anyone for their own purposes.
This website itself sets no cookies and runs no scripts other than its own. The font it uses is served from this domain, not from anyone else's.
Deleting your account
Self-serve deletion is not built yet, and pretending otherwise would be a lie. Today, "Delete account" in the app opens an email to support@ayrli.app, and the deletion is done by hand within 7 days. You can email that address directly instead.
What deletion removes: your account and everything attached to it — profile, sessions, workout log, measurements, targets, progress photos, plans, reasons, rehab logs, friendships, feed entries and reactions. Every one of those is wired to your account in the database so that removing the account removes them too; there is no pile of orphaned rows left behind. Your uploaded files — profile photo, progress photos, and voice recordings once those ship — are deleted in the same pass.
One thing outlasts the request, unavoidably: routine server logs and database backups roll over on their own schedule rather than being edited, so a copy can persist in those for a short time before it ages out.
If you just want out of a crew rather than out of the app, you can leave the crew in the app and keep your account and your history.
Your rights
Under the Australian Privacy Principles you can ask for a copy of what is held about you, ask for anything wrong to be corrected, and ask for it to be deleted. Email support@ayrli.app and it gets done — this is a small app and there is no process to navigate. If you are not happy with the answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
How long things are kept
Your training history is kept for as long as your account exists, because a training app with an expiring history would be useless. Delete your account and it goes.
Children
AYRLI is not built for children and is not offered to anyone under 16.
Security
Everything travels over HTTPS. Every read and write is checked in the database against who you are, not only in the app, so a bug in the app cannot hand your data to the wrong person. Your sign-in token is encrypted on the phone with a key that lives in the iPhone's keychain. None of that makes it perfect — no software is — and if something does go wrong that affects you, you will be told rather than left to find out.
When this page changes
The date at the top moves and the change is explained in the app. If a change means AYRLI would collect something new or share something further, you will be asked before it applies to you.