The short answer. Your training log is stored securely against your account so you can never lose it. Only you can see it. You can download everything or delete everything, any time, without asking permission. No ads, no tracking, no selling data, no third parties. That is the whole deal.
When Boring Works launched, everything you logged stayed on your device. Nothing was sent anywhere. I was proud of that, and it had a flaw I found the hard way: I reinstalled the app on my own computer and lost my own training data. If it could happen to me, it would happen to you.
So I changed it. Version 2 stores your log on the Boring Works server, tied to your account. Your phone keeps a fast local copy and works fully offline; the server keeps the permanent record. Reinstall, clear your cache, drop your phone in the sea: log back in and everything comes back. I would rather change a promise openly than keep one that loses your work.
That is the list.
The one exception is one you control: coaching clients get a switch in the members' area that says "Share my training log with Rob". If you turn it on, I can see your last 14 days of sessions, your current week plan, and your weight trend, so I can coach you against what actually happened rather than what memory says. Turn it off and my access ends immediately. It is off by default and stays off unless you flip it.
For honesty's sake, here is what I can see about every account without any sharing: that the account exists, the name and email you gave, when you last logged in, and when your log last backed up. I cannot read the log itself. Passwords are stored scrambled (hashed); nobody, including me, can read them back.
Both of these live in the members' area, and neither needs my permission or a support email:
One click gives you your entire log as a file the app can re-import.
Removes your account and everything attached to it from the server, permanently: log, plans, check-ins, backups, everything. There is no soft delete and no retention period. Gone means gone.
Everything travels encrypted (HTTPS). Passwords are hashed, never stored readable. Sign-in uses signed tokens, and revoking an account ends its sessions on every device. Signups and logins are rate limited. The server lives with a reputable host, and the code that runs this site does one job: run this site.
Reply to any email from me, or write to rob@boringworks.fitness. You will get me, not a support desk, because there is no support desk. There is just me, and I built this thing to be worth trusting.