PnR Fitness · Updated October 22, 2026

Privacy policy

PnR is a private fitness application operated by Ethan Parks. For questions about your data or help deleting it, contact Ethan through the private contact method used for your invitation.

Information you save

PnR stores account information and the records you choose to enter, including workouts, fitness measurements, program progress, diet records, mental wellness notes, and progress photos. Passwords and recovery codes are stored as hashes. Session cookies keep you signed in, and browser storage supports local app data and synchronization.

Storage and access

The hosted app stores account records in Cloudflare and photo files in a private Cloudflare R2 bucket. Account sign-in controls access to the photo journal and other records. Each account can access its own records. The assigned PnR administrator can view uploaded progress photos.

When Google Drive is connected, the server also uploads photos to the owner’s private PnR Drive folder and keeps the corresponding file IDs. PnR does not create public or “anyone with the link” sharing permissions. The Google account owner and anyone the owner separately grants access to that folder can view its files.

When Google Sheets synchronization is configured, saved records and photo references are copied to the private backend spreadsheet. The spreadsheet owner and people separately granted access to the spreadsheet can read those exported records, including mental wellness notes. The spreadsheet contains photo references rather than image bytes.

Google permissions

PnR requests the Google Drive drive.file permission to create and manage files made for, or explicitly used with, PnR. It does not request access to all files in your Drive. Google authorization tokens are stored as encrypted server configuration and are used for the photo-storage connection. Google data is used to provide these storage and synchronization features, not for advertising or sale.

PnR’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Retention and deletion

Saved records remain available until they are deleted or the app’s storage is removed. Deleting a connected photo in PnR deletes its app copy and its Drive copy; the photo’s spreadsheet reference is removed on a successful subsequent synchronization. Copies you exported or shared separately remain under your control. Contact the operator for account-data deletion assistance.

You can revoke PnR’s Google authorization from your Google Account’s third-party connections settings. Revocation stops further Drive operations but does not itself delete existing files.

External services

Cloudflare and Google process information to provide the storage and hosting features described here. Opening an external exercise video takes you to that provider, whose own privacy practices apply. Private photos are not published as public website assets.