Legal & Privacy

What we collect: Passo stores a random session ID in your browser's local storage to track your workout history and progression. This ID is generated locally — it contains no personal information.

Google Sign-In (optional): If you choose to sign in with Google, Passo receives your name, email address, and profile picture from Google OAuth 2.0. This information is stored in our database solely to associate your session with your account. We do not use it for advertising or share it with third parties.

Workout data: Exercises completed, reps, RPE ratings, and pain flags are stored server-side linked to your session ID (and optionally your Google account). This data is used only to power your progression and workout history.

What we do not collect: We do not use analytics trackers, ad networks, or sell any data. We do not collect payment information — Passo is free.

Data retention: Session data is retained as long as your account exists. You may request deletion by opening an issue on the GitHub repository.

Use at your own risk: Passo provides exercise suggestions for informational purposes only. Nothing on this app constitutes medical advice, diagnosis, or treatment. Consult a qualified healthcare provider before starting any new exercise program, especially if you have pre-existing injuries or health conditions.

No liability: Passo and its creator are not liable for any injury, loss, or damage arising from your use of the app or performance of any exercises described herein.

Acceptable use: You agree not to misuse the app, attempt to reverse-engineer or compromise its security, or use it in any way that violates applicable laws.

Service availability: Passo is provided as-is, without any guarantee of uptime or availability. The service may be modified or discontinued at any time without notice.

Session cookie: When you sign in with Google, Passo sets an HTTP-only session cookie containing a JWT token. This cookie is used solely to keep you signed in between visits. It is not used for tracking or advertising.

Local storage: Passo stores your anonymous session ID in your browser's local storage (not a cookie). This allows your workout history to persist without requiring an account.

No third-party cookies: Passo does not load any third-party scripts that set cookies (e.g., analytics, advertising networks).

You can clear cookies and local storage at any time through your browser settings. Clearing them will reset your anonymous session — your history will no longer be accessible unless you were signed in with Google.