title: Settings — Account description: Sign in, export data, delete account.
Settings — Account
Reached from Settings → Account or by tapping the profile header at the top of Settings. Where you manage sign-in, data export, and account deletion.
You can use most of RhythmFit without an account. Sign-in unlocks:
- iCloud sync across multiple iOS devices.
- Restoring purchases on a new device.
- Sharing workouts with your display name attached.
Sections
When not signed in
Sign in with Apple
The default sign-in method. One tap, no password. Apple's "Hide my email" relay works fine — we never need to know your real email.
Sign in with email
Magic-link flow via Supabase. Type email → check inbox → tap link. No password to remember.
Continue without account
Explicit button to dismiss the sign-in section. The button is there because we don't want sign-in to feel mandatory; making it explicit prevents anxiety about "did I just create an account?"
When signed in
Profile header
Display name (editable), email (read-only), avatar (auto-generated geometric pattern; not user-uploadable in MVP).
iCloud sync
Toggle. Mirrors the iCloud row in the main Settings list. Tracks whether multi-device sync is active.
Export data
Tap to generate a JSON bundle of:
- Every workout in your library (with full block detail).
- Every session record (timestamps, completion, per-block timing).
- Settings preferences.
- Share codes you've published.
The bundle is shared via the iOS share sheet — save to Files, email to yourself, AirDrop to a Mac.
Restore purchases
For users who subscribed on another device and want to restore Pro on this one. Calls into StoreKit / RevenueCat.
Sign out
Signs out locally. Workouts and history remain on this device (local Core Data isn't tied to the account). Re-signing in syncs from the cloud.
Delete account (destructive)
Red text. Tap once for confirmation sheet. Two-step process:
- Confirm intent.
- Type "delete" to confirm.
The action:
- Deletes your Supabase row.
- Deletes every share code you created (links return 404).
- Cancels any active subscription via RevenueCat → Apple.
- Local data on this device stays unless you also uninstall.
We respond to deletion within 30 days for any non-immediate processors (analytics queues, backups). The user-facing record is gone immediately.
What "your data" means
Multiple types of data live in different places. Knowing where each lives helps you understand what export/delete affects.
| Data | Lives in | Affected by export / delete | | ------------------- | ------------------------------ | --------------------------- | | Workouts | Local Core Data, iCloud (opt.) | Both | | Session records | Local Core Data, iCloud (opt.) | Both | | Settings prefs | UserDefaults | Export only | | Account / email | Supabase | Both | | Share codes | Supabase | Both | | HealthKit writes | Apple Health (your device) | Neither (Apple owns it) | | AI prompts | Anthropic (transient) | Neither (we don't store) | | App Store receipts | Apple | Neither (Apple owns it) |
Sign in with Apple vs email
Both work; both have trade-offs.
| Aspect | Sign in with Apple | Email + magic link | | ------------------ | ------------------------------------ | -------------------------------- | | Setup speed | One tap | Two taps + email check | | Email visible to us| Only if you don't pick "Hide my email" | Always your real email | | Recovery | Tied to your Apple ID | Re-issue magic link | | Cross-platform | Apple only | Works on web (rare) |
We don't recommend one over the other. Pick whatever fits your current sign-in habits.
What's NOT here
- Password, because there isn't one (no Auth0 / Cognito-style password flow).
- Connected social accounts (no Twitter / Google / Facebook sign-in). We could add them; we deliberately haven't.
- Subscription management — that's Settings → Subscription, not in Account. Account doesn't change tier; it manages identity.