Privacy Policy

The Service is operated by [YOUR NAME / ENTITY NAME], based in [Minnesota, USA]. If you have questions about this policy, contact us at [CONTACT EMAIL].

Account information. When you register, we collect your email address and a securely hashed password. If you sign in through a third-party provider (e.g., Google), we receive basic profile information from that provider as permitted by your settings there.

Content you provide. We store the training data you enter, which may include workouts, exercises, personal records (PRs), sets/reps/loads, dates, notes, and any body or performance metrics you choose to log.

Automatically collected data. When you use the Service, we and our infrastructure providers automatically collect technical information such as IP address, browser and device type, access times, pages viewed, and general usage patterns.

We do not intentionally collect sensitive categories of data beyond the fitness metrics you voluntarily enter, and we do not require them.

We use your information to:

• Create and maintain your account and authenticate your logins
• Store, display, and let you manage your training data
• Operate, maintain, secure, and improve the Service
• Diagnose technical problems and prevent abuse or fraud
• Respond to your requests and communicate service-related notices

We do not sell your personal information.

We share information only as needed to run the Service:

Service providers (data processors). We rely on third parties to host and operate the Service:

• Supabase — database, authentication, and storage of your account and training data
• Vercel — application hosting and delivery
• [Add any analytics, email, or error-monitoring providers you use, e.g., a transactional email service]

These providers process data on our behalf under their own security and privacy commitments. Links to their privacy policies are available on their websites.

Legal reasons. We may disclose information if required by law, subpoena, or valid government request, or to protect the rights, safety, or property of our users or ourselves.

Business transfers. If the Service is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your information.

We retain your account and training data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we are required to retain it for legal or legitimate operational reasons (e.g., backups, which are purged on a rolling schedule).

We use reasonable technical and organizational measures to protect your information, including encrypted transport (HTTPS), hashed passwords, and access controls provided by our infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You can access and update most of your information directly within the app. You may also request to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export a copy of your data

To make a request, email [CONTACT EMAIL].

California residents (CCPA/CPRA). You have the right to know what personal information we collect, to request deletion, and to correct it. We do not sell personal information. We will not discriminate against you for exercising these rights.

EU/EEA and UK residents (GDPR). Where GDPR applies, our legal bases for processing are performance of our contract with you (providing the Service), your consent, and our legitimate interests in operating and securing the Service. You have rights to access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local data protection authority.

We use cookies and similar technologies for essential functions such as keeping you logged in and maintaining session state. [If you add analytics, describe non-essential cookies here and how users can opt out.]

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it. [If your app is intended for adults only, state 18+ here instead.]

Our providers may store and process data in the United States and other countries. By using the Service, you understand your information may be transferred to and processed in jurisdictions with different data protection laws than your own.

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date and, where appropriate, notify you within the Service. Continued use after changes take effect constitutes acceptance.

Questions or requests: [CONTACT EMAIL]

[Mailing address, if you choose to include one]