Privacy Policy

This policy applies to everyone who visits vigwork.com, whether or not you create an account. If anything here is unclear, write to support@vigwork.com.

Browsing the library needs nothing from you. The exercise catalog, search, and filtering all work without an account, and we do not track individual visitors across sessions for this.

Creating an account collects:

• Your name and email address.
• A password, stored as a salted cryptographic hash. We never store or have access to your actual password.
• If you sign in with Google instead, your name, email, and profile image as provided by Google. We never see your Google password.

Using the product collects, only for what you actually use:

• Optional profile details you choose to share (age, sex, height, weight, activity level, training experience), used only to personalise a generated program.
• Training programs, whether built by you or generated by the AI coach, and every session you log against them (sets, reps, weight, effort, notes).
• The full text of your conversation with the AI coach. This is necessary for the coach to function (it is how the conversation has context turn to turn) and is kept so you and we can see what a program was actually built from.
• A record of any purchase: amount, currency, which provider you paid through, and its status. We do not receive or store your card number or PayPal login. Payment card details are handled entirely by Stripe or PayPal, never by us.

We use one cookie to keep you signed in and one to remember your language choice. Both are required for the site to function and are not used for advertising or cross-site tracking. We do not currently run any analytics or advertising trackers on this site; if that changes, this policy will be updated first.

We do not sell personal data, to anyone, ever. Data is shared only with the service providers that make the product work, each acting on our instructions:

• Database and hosting (Supabase, Vercel): stores your account and program data, and serves the site.
• Google: only if you choose to sign in with Google.
• The AI coach's model provider (via OpenRouter): receives your conversation with the coach in order to generate responses and the program itself.
• Stripe and PayPal: only if you make a purchase, to process the payment.
• Resend: only to deliver a password reset email when you request one.

We may also disclose information if legally required to, or to protect the rights, safety, or property of VigWork or our users.

Our service providers operate in the United States and other countries. If you are located outside those countries, your data will be transferred to and processed there. Each provider we use is a recognised, established company with its own security commitments; we choose providers that encrypt data both in transit and at rest.

We keep your account and its data for as long as your account exists. If you ask us to delete your account (write to support@vigwork.com), we delete your personal data within 30 days, except where we are legally required to keep payment records for longer (typically for tax and accounting purposes).

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, write to support@vigwork.com. We will respond within a reasonable time and in any case within any deadline the law where you live requires.

If you are in the European Economic Area or the UK, you also have the right to lodge a complaint with your local data protection authority.

Passwords are hashed, never stored in plain text. Traffic to the site is encrypted (HTTPS). Sign-in is rate limited against automated guessing. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security, but we treat account and payment data as the most sensitive thing we hold and design accordingly.

VigWork is not directed at, and we do not knowingly collect data from, anyone under 16. If you believe a child has created an account, contact us at support@vigwork.com and we will remove it.

If we make a material change to this policy, we will update the date at the top of this page and, where required by law, notify you directly.

Questions about this policy or your data: support@vigwork.com. See also our Terms of Use.