The short version: The Wharf WOD Timer is a workout timer. Your workout settings and history stay on your own phone. There is no account and no sign-up. The only data that leaves your device is anonymous: crash reports so we can fix bugs, and anonymous usage counts (like "a Tabata timer was started") so we know which timers matter. Neither can identify you. On Apple Watch, the app can save your workouts to Apple Health on your own devices; we never see those.
Your timer configurations and workout history are stored locally on your phone. We do not collect them, they are not uploaded, and they are not stored on any server. There is no account, so there is nothing for us to see. Deleting the app removes its locally stored data from your device.
If the app crashes or hits an error, an anonymous diagnostic report is sent to Sentry, our crash-reporting provider. It contains technical details (device model, OS version, what the app was doing when it failed). We configure it to exclude personal identifiers, and it never includes your workout data.
We count a handful of anonymous events — the app being opened, a workout being started or finished, and which timer type was used — via Aptabase, a privacy-first analytics service. These events carry no identifiers: no name, no email, no advertising ID, no precise location, and no way to link events to you. We use them only to understand which features are used.
No advertising, no ad tracking, no selling or sharing of data, no third-party marketing SDKs, and no account or profile of any kind.
When you first open the Apple Watch app it asks for one Health permission: to save workouts. With it, each workout you time is saved to Apple Health as a workout (its type, start and end time; during a workout session your watch adds the heart rate and calories it measures). The same permission is what keeps the timer, beeps and taps running while your wrist is down, and brings the timer back when you raise it.
Wharf WOD reads no Health data: it never asks to read heart rate, workouts or anything else, and it never sees what the watch records. Your Health data stays in the Health app on your devices, under Apple's Health privacy protections. It is never sent to Mental Metal or to anyone else, and it is not part of the crash reports or usage counts above.
You can decline the permission, change it later on the watch under Settings, Privacy & Security, Health, or turn off Track workouts in the watch app's Health settings. The timer still works; its cues then play only while the watch app is on screen.
When you first open the Wear OS app it asks for one permission: physical activity. With it, the watch runs each workout you time as an exercise session through Android's Health Services, which is what keeps the timer, beeps and taps going while your wrist is down and shows the workout on your watch face. The session requests no data types: the app reads no heart rate, step or other sensor data, keeps no record of the workout, and sends nothing off the watch.
You can decline the permission, change it later in the watch's Settings under Apps and permissions, or turn off Track workouts in the watch app's Health settings. The timer still works; its cues then play only while the watch app is on screen.
The Wharf WOD Timer is a stopwatch and interval timer, not a medical or fitness-assessment device. The phone app does not read health sensors, the watch apps use Health and the physical activity permission only as described above, and neither gives medical or training advice.
Questions about privacy? Email [email protected].
If we change how the app handles data, we will update this page and revise the "Last updated" date above.