Privacy policy

1. Controller

The controller responsible for processing personal data within the meaning of the Swiss Federal Act on Data Protection (FADP) and – where applicable – the EU General Data Protection Regulation (GDPR) is:

[First and last name – placeholder]
E-Mail: info@getnextset.app

For all questions about privacy and to exercise your rights, an email to this address is all it takes.

2. Overview

• The website uses no cookies, no analytics tools and no ads, and loads no content from third parties (fonts, too, are served from our own domain).
• The app doesn’t need an account and doesn’t send any training data to the provider. It contains no ads and no analytics or tracking libraries; its privacy manifest declares no tracking and no data collection.
• Optional features such as iCloud sync, Apple Health or Apple Music use Apple services that you turn on yourself and that are subject to Apple’s own privacy policies.

3. Website

3.1 Hosting and server logs

The website is hosted by Vercel Inc. (USA). When you visit it, Vercel processes technically necessary data, in particular your IP address, date and time, the address requested, the referrer, browser and system information (user agent) and your approximate region. The purpose is to deliver the website securely and reliably and to prevent abuse. The legal basis is our legitimate interest in a working, secure service (FADP; Art. 6(1)(f) GDPR).

Data may be transferred to the USA and other countries in the process. Vercel states that it is certified under the EU-U.S. Data Privacy Framework and relies on it for transfers from the EU, the United Kingdom and Switzerland. Details, including how long logs are kept, can be found in Vercel’s privacy policy.

3.2 No cookies, no tracking

The website sets no cookies and uses no analytics, advertising or social media services. There is no profiling. Settings such as light or dark mode are taken directly from your device without being stored. The language follows your browser setting or the language you choose – it is part of the address and isn’t stored either.

3.3 Interactive demo

The app demo runs entirely in your browser and uses sample data only. What you enter there (e.g. weights or search terms) stays in your browser’s memory and is neither stored nor sent; reloading resets everything. If you turn on “Hear announcements and ticks”, fixed announcement texts from the app are spoken by your browser’s speech output. Depending on your browser and voice, this speech output may run through the browser maker’s servers; the feature is off by default.

3.4 Contact by email

If you contact us by email, your details (email address, name, message) are used only to handle your request and are deleted afterwards unless there’s a legal obligation to keep them. Emails to the address given are received and stored through an email service provider; depending on the provider, data may be transferred abroad in the process.

4. The NextSet app

4.1 No account, no server of the provider

You don’t need an account for NextSet. The app runs no server of its own: workouts, logbook entries, notes, your own exercises, favorites and settings are stored on your device. The provider has no access to this data.

4.2 iCloud sync

If you’re signed in to iCloud on your device and sync is turned on (Settings › Data & iCloud), your logbook, your own exercises and favorites are stored in your private iCloud database (Apple CloudKit) and kept in sync between your devices. The content is stored there in encrypted fields; with Advanced Data Protection for iCloud it’s end-to-end encrypted. This service is provided by Apple; Apple’s privacy policy applies. The provider of NextSet cannot access your private iCloud database.

4.3 Apple Health

The Apple Health connection is off by default. Only when you turn it on in the app and grant the permissions does NextSet save finished workouts as strength training (start, end, duration) in Apple Health and read heart rate, active energy and body weight. The values read (e.g. the average and maximum heart rate of a workout) are stored in the corresponding logbook entry and – if turned on – synced through your private iCloud. Health data is sensitive personal data; it is processed only on your devices and in your iCloud and is never sent to the provider or third parties. You can turn off the connection in the app at any time and revoke the permissions in the Health app.

4.4 Apple Watch

The watch app exchanges workout status, settings, logbook changes and – during a workout – your heart rate directly with your iPhone (via Apple’s WatchConnectivity). With your permission, the watch records a strength training workout with heart rate and active energy in Apple Health.

4.5 Apple Music

If you allow access to Apple Music, NextSet shows the title, artist, album and artwork of what’s playing in Apple Music and controls playback. To do so, NextSet checks once whether you have an Apple Music subscription. Artwork may be loaded from Apple’s servers. From other apps, NextSet only learns that audio is playing – not which app or which song.

4.6 Announcements, notifications, Live Activity, widgets and Siri

The app creates voice announcements on the device using the iOS speech output. Notifications are scheduled locally on the device. The Live Activity, widgets, Siri and Shortcuts are displayed or run by the operating system; Apple’s privacy policy applies.

4.7 Reporting bugs and suggesting features

“Report a Bug” and “Suggest a Feature” open a prepared email in the app. Besides your text, it contains the device model, the system version and the app’s version and build number – no training or settings data. The email is only sent if you send it yourself (see section 3.4).

4.8 App Store

The app is downloaded and updated through Apple’s App Store. If you’ve agreed in your device settings to share analytics with app developers, Apple provides the provider with aggregated statistics and crash reports. These don’t reveal anything about your training data.

5. Disclosure and processing abroad

The provider doesn’t sell any data and doesn’t share any data for advertising purposes. The only recipients are the service providers named above (Vercel for the website, the email provider for messages to the provider). You use Apple services within your own relationship with Apple. For transfers to countries without an adequate level of data protection, the providers rely on recognized safeguards such as the Data Privacy Framework or standard contractual clauses.

6. Retention and deletion

• You delete the app’s data yourself: individual entries in the logbook, everything by deleting the app. You manage data stored in iCloud in your device’s iCloud settings.
• Emails are deleted as soon as the request has been dealt with and there’s no obligation to keep them.
• Vercel keeps the website’s server logs only as long as needed for operation and security.

7. Your rights

Under the FADP, you have in particular the right to access, rectification, erasure, restriction and the release or transfer of your data, as well as the right to object to processing. Where the GDPR applies, you have the rights under Art. 15–21 GDPR. To exercise them, contact the email address given above. As the provider doesn’t receive any training data, access will usually only concern data from email contact.

You can also lodge a complaint with a supervisory authority – in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), in the EU with the authority of your country of residence.

8. Data security

The website is served exclusively encrypted (HTTPS) and uses security headers such as a Content Security Policy. The app stores data in its protected container on the device and transfers it only through Apple’s encrypted services.

9. Changes

This privacy policy may be updated if the app, the website or the law changes. The version published on this page applies. We’re happy to answer questions through support.