Your training stays yours.

This policy covers the Signal app for iPhone and Apple Watch and its optional ChatGPT connector. Both are operated by Alberto Rodríguez Salgado. Contact alberto.rodriguez.salgado.97@gmail.com with questions or requests. Updated 31 October 2026.

In the Signal app

Signal works without an account. Your workouts, routines, schedule, settings, custom exercises and session history are stored on your iPhone and Apple Watch. They are not sent to us unless you turn on the ChatGPT connector below. Signal contains no advertising and no third-party analytics or crash-reporting tools, and it does not track you across apps or websites. If you choose to share diagnostics with app developers in your device settings, Apple may pass crash reports to us.

Apple Health. With your permission, Signal reads workouts, heart rate, active and resting energy and walking or running distance from Apple Health, to show live heart-rate zones and calories and to line your sessions up with the rest of your activity. It saves each finished session to Apple Health as a workout with those measurements. Health data stays on your devices: it is never sent to the connector, to ChatGPT or to us, and it is never used for advertising. You can change Signal’s access at any time in the Health app.

Apple Watch. Workouts and settings sync directly between your iPhone and your paired Apple Watch through Apple’s Watch connection, not through our servers. Widgets and Live Activities read the same on-device data.

Music. If you allow it, Signal uses Apple Music on your device to start a playlist you choose and skip tracks during a session. It does not send your music library anywhere.

Purchases. Signal Pro starts with a seven-day trial; its start date is kept in your device’s Keychain so a reinstall does not reset it. Signal Pro is a one-time purchase made through Apple’s App Store. Apple processes the payment; we never receive your payment details, and the app checks your purchase with Apple on the device.

Erase everything. Settings → Erase everything deletes your workouts and history from the iPhone and the paired Apple Watch, and if the ChatGPT connector is on, it also turns it off and deletes the online copy. Workouts already saved to Apple Health stay there until you delete them in the Health app. Deleting the app removes its on-device data, except the trial start date.

The optional ChatGPT connector

The connector is off by default. It shares a copy of your training log with your own ChatGPT account only after you review what is shared, give consent in Settings → AI assistants and approve the connection in Signal. The rest of this policy covers that connector.

What is shared

When you enable sharing, the connector stores up to 200 recent completed sessions, 100 saved routines, your weekly schedule and Signal’s exercise catalog. Records include names, dates, exercises, sets, repetitions, load, variations and timed segments. Names may contain text you entered.

Supported app versions also share perceived set effort, routine structure and warm-up sets, training goals and equipment, loading and bar/plate preferences, planned heart-rate zones, schedule moves, program capability and app-computed training totals. Planned zones are workout settings, not measured readings.

It excludes Apple Health readings, measured heart rate, calories, body measurements, personal notes and profile names. Avoid entering medical information into workout names or requests.

Why it is used and who receives it

The connector uses the copy you authorize to answer training queries, show progress and deliver suggestions. ChatGPT receives records relevant to its requests under that provider’s terms and data controls. Cloudflare hosts the service and storage. The connector itself does not call any AI model API.

Assistant-generated suggestions and their pending, added, dismissed or replaced status are stored for delivery. Replacing a pending suggestion affects the online inbox immediately. Saved routines and schedules change only when you choose Add in Signal.

Authentication and security

Technical records include device-credential hashes, OAuth grants, connection IDs, sync and last-use times, sharing status and short-lived approval requests. Linking uses a five-minute HttpOnly browser cookie. Source addresses are used for abuse prevention; short-lived hashed rate-limit buckets are stored for up to three days. Cloudflare also processes service security and diagnostic metadata. Application error logging excludes workout payloads, passwords and tokens.

Sample accounts contain synthetic data and use separately provisioned usernames and salted password verifiers. They never grant access to personal profiles. Sample credentials and data remain available until the operator disables or removes that account; they are kept out of the public plugin package.

Retention and deletion

• Personal workout copies expire after 90 days without upload or heartbeat.
• Suggestions expire after 30 days.
• Profiles with no initial upload expire after 14 days; profiles without an active assistant after 30 days; profiles without syncing after 120 days.
• Unused assistant connections expire after 90 days; their database records are removed after 91 days.
• After deletion, a credential hash is retained for 400 days to prevent an old phone or restored backup from recreating that deleted copy.
• Expired linking requests and rate-limit buckets are cleared by daily maintenance. OAuth and hosting storage may have separate operational recovery retention.

Disconnect & delete online copy in Signal immediately disables assistant access and deletes the active workout copy and suggestions. It does not erase content already shared in an assistant conversation; use that provider’s controls. Pausing sharing retains the existing copy with its paused status until deletion or expiry.

Your choices

You can stop sharing, disconnect and request access or deletion assistance through alberto.rodriguez.salgado.97@gmail.com, for the app or the connector. We need to verify that a request concerns your account before acting. Losing your phone’s device credential requires a new connection; the connector does not restore lost local training records.