Privacy, in plain English
Last updated: August 8, 2026
The Surplus app is built so your data stays on your phone. It has no accounts, no sign-in, no analytics, no advertising, and no tracking of any kind. This website is separate: it uses a visitor-analytics tool and a waitlist form, both described at the bottom of this page.
The app: what stays on your phone
Everything you record lives only in the app's own storage on your device:
- Food you log, calories, protein, and your daily targets
- Your body-weight entries, goal mode, and rate
- Your workout plan, every set you log, and your workout history
- Your Live Activity style choices (Surplus Studio)
Deleting the app deletes all of it. There is no server copy.
The camera and label scanning
The nutrition-label scanner uses the camera and reads labels on-device with Apple's Vision framework. No photo or video ever leaves your phone.
Barcode and product lookups (Open Food Facts)
When you scan a product barcode Surplus hasn't seen before, it sends that barcode — and nothing else — to the Open Food Facts public database to look up nutrition and ingredient information. Your history and preferences are never attached. Open Food Facts is a non-profit open-data project; its policy is at world.openfoodfacts.org/privacy. Products you've scanned before are answered from the on-device cache without any network request.
Training together (Duo)
Duo connects two phones through a small session server ("room") we run on Cloudflare. A room exists for at most two hours and deletes itself when both people finish (or when it expires). While a room is alive it holds only:
- The first name each person typed into Surplus (never from your contacts or Apple ID)
- The workout's structure: exercise names, set counts, and rep targets — never the weight you lift. Loads stay on each person's own phone; your partner's card shows sets and names only.
- Presence: which exercise and set each person is on, rest end times, completed-set counts, and whether a personal record happened (the exercise name only)
- Your own Lock Screen card's content — including your own current weight — held solely so the server can update your own phone's Lock Screen while the app is asleep. It is never shown to your partner.
- Apple push tokens for each person's own Live Activity, used only to deliver those updates and removed when the workout ends
Bluetooth is used for recognition only: the joining phone reads one signed invitation from the host's phone, and Bluetooth stops. No workout data crosses Bluetooth. Nothing from a Duo is retained after the room ends — no history of rooms, no account, and no way for us to identify who trained.
What the app never does
- No analytics or telemetry of any kind
- No advertising, no ad identifiers, no tracking across apps
- No selling or sharing of data — there is nothing to sell
- No accounts and no passwords
This website uses visitor analytics
getsurplus.fit uses HeyCatch to count
visits and see which parts of the page people read. It records ordinary web-analytics
information — pages viewed, referrer, approximate location from your IP address, and
device and browser type — and sends it to HeyCatch (in.heycatch.ai), which
is built on PostHog. We do not give it your name, email address, or phone number, and we
do not use it to identify individual people. The app contains no
analytics at all; this is the marketing website only.
This website's waitlist is separate
The app never sees or touches the waitlist. If you join the waitlist on getsurplus.fit, the email address or phone number you enter is stored by our website host (Netlify) so we can tell you when Surplus opens up — launch updates only. Text messages: message and data rates may apply, reply STOP to quit. Every email has an unsubscribe link. To be removed, you can also write to the address below.
Health disclaimer
Surplus's calorie and protein targets are estimates (based on standard formulas such as Mifflin-St Jeor) for general fitness purposes. Surplus is not a medical device and does not provide medical advice.
Children
Surplus is a fitness and nutrition tool intended for adults and is not directed at children under 13.
Deleting your data
Delete the app. Because everything is on-device and Duo rooms self-delete, that removes everything. For the website waitlist, use any unsubscribe link, reply STOP, or email us.
Contact
Questions: stevenjeffreygray@gmail.com
Changes
If this policy changes, the updated version will be posted at this URL with a new date.