Fitness Tracker is a privacy-first desktop application for tracking workouts, building routines, and visualizing progress — built for people who believe in deliberate practice. You've seen that phrase on this site before. But what does it really mean?
Local-First by Design
First and most importantly: the Fitness Tracker application and database are installed entirely on your device. The app contains no adware, no tracking software, and no network validation checks — it doesn't even verify your license online. You can optionally choose to upload a backup of your data to a cloud service, but this feature is off by default.
When you first install Fitness Tracker, you're prompted to create a local account. This lets multiple users share the same device while keeping their data separate. You'll enter an email address and password — both of which remain on your computer and are never sent anywhere.
This does not mean you've signed up for anything. Your account is stored locally. There are no subscriptions, no data export fees, and no lock-in. You own your copy, and your data is yours.
About Encryption
Currently, the Fitness Tracker database is not encrypted. That means anyone with access to your computer can also access your data. Encryption is coming soon, but we want users to help guide those decisions. The first versions will include an in-app survey explaining encryption options, tradeoffs, and allowing users to vote.
In the meantime, if you're concerned about local access, consider securing your operating system and files. You can also use euphemisms, nicknames, or even misinformation within your logs. Feel free to contact us if you have questions about securing your data.
Security Considerations
Fitness Tracker runs locally, so it's only as secure as your device. Like any desktop software, it's vulnerable to keyloggers, ransomware, viruses, or malicious scripts. Greg Hluska Consulting strongly encourages:
- Automatic updates
- Windows Defender or another reputable antivirus
- Safe download and email practices
- A basic understanding of personal digital security
Reporting Bugs
There is no bug bounty or disclosure program yet — Fitness Tracker hasn’t launched. As a rule, if researchers find security flaws before something is public, it should never go public. :)
Once Fitness Tracker is live, we’ll maintain a /security page with responsible disclosure policies. We take trust seriously. If you find a security flaw, please give us a chance to fix it — and then feel free to write about it. Call your talk “Fitness Tracker? It should be called Come In, Hacker” and present it at DEFCON.
Support & Logs
If you submit a support request, you’ll need to provide enough info for us to reply. Anyone with access to the private #support Slack channel will be able to view what you send.
Fitness Tracker uses Siteimp’s structured logger for Tauri. Logs are stored locally in a transparent format — you can read them or delete them at any time. When submitting a support request, you’ll be shown a table preview of what data will be included. You can:
- Delete specific fields
- Replace them with custom text
- Skip the log entirely
Log submission is always optional. In the future, you’ll be able to turn off logging completely. But during the early stages of launch, logs are incredibly helpful for resolving issues quickly.
Infrastructure Transparency
This website is hosted on Cloudflare Pages. You can read their privacy policy. Cloudflare has done a tremendous amount to make the internet safer.
We use Formimp to handle all contact and support forms. Formimp does not store or collect personal data — unless you're sending massive spam or trying to break in. In that case: please stop.
Both Formimp and Fitness Tracker are products of Greg Hluska Consulting. They’re built with privacy in mind. Because Formimp integrates with Slack to deliver messages to real humans, Slack’s privacy policy applies as well.
If you have questions about your privacy, feel free to contact Greg Hluska directly. You’ll hear back from a real person.