Privacy Policy

1. Information we collect

We collect the information you give us and a small amount needed to run the Service:

• Account information, such as your email address and the credentials used to sign in.
• Profile information you enter, such as your display name, height, bodyweight, goals, training experience, and preferred units.
• Training information, such as your lifts, estimated maxes, generated programs, logged workouts, the notes you add to sessions, and your bodyweight log.
• Coaching information generated for you, such as feedback notes and progress summaries.
• Connection information, if you choose to connect a third-party workout-logging service: the key you provide (stored encrypted) and the connection status. We use it only to sync your program and read back the workouts you logged there.
• Acknowledgment records, such as the version of the Terms, Privacy Policy, and disclaimer you accepted, with the date and the network details captured at the time of consent.
• Billing information: when you subscribe, our third-party payment processor handles your payment. We receive and store your subscription status and a customer reference, but we do not collect or store your full payment card details.
• A profile photo, if you choose to add one.

2. Sensitive information

Some of what you provide, such as your bodyweight, body measurements, and training data, can reveal information about your health and fitness. We collect it only to operate the Service for you, and we do not use it for advertising.

3. How we use your information

We use your information to:

• create and adapt your training programs and coaching
• operate your account, process your subscription, and provide support
• send you transactional messages such as coaching notes, reminders you have turned on, and account emails
• keep the Service secure, prevent abuse, and meet legal obligations

4. How we share information

We do not sell your personal information, and we do not share it for advertising. We share information only with service providers that help us run the Service, and only as needed for them to perform their function for us. These providers fall into the following categories:

• cloud hosting, database, and storage providers that run our application and store your data
• an artificial-intelligence service provider that generates your programs and coaching. To do this we send a summary of your training inputs, such as your goals, experience, and current lifts. We do not send your name, email address, or account identifier, and we use processing that is not retained to train outside models.
• an email delivery provider that sends our transactional emails
• a payment processor that handles billing and subscriptions
• a third-party workout-logging service, only if you connect one and only to sync your own data

5. Sharing required by law

We may disclose information if required by law, to comply with a valid legal request, to enforce our Terms, or to protect the rights, safety, and security of our users, the public, or us. If we are involved in a merger or sale, information may transfer as part of that transaction, subject to this Policy.

6. Cookies and tracking

We use a small number of cookies that are necessary to keep you signed in and to operate the Service. We do not use advertising or third-party tracking cookies, and we do not run third-party analytics or tracking on the Service.

7. Data retention

We keep your information while your account is active and as needed to provide the Service. When you delete your account, we delete your personal information, except for limited records we are required to keep or that are kept in secure backups for a short period before they expire.

8. Your choices and rights

You can view and update your profile in the app, manage which emails and coaching messages you receive, and connect or disconnect a workout service at any time. You also have the following rights, which you can exercise from the Data and privacy area in your account settings or by contacting us:

• Access and export: download a copy of your data.
• Correction: update inaccurate information.
• Deletion: delete your account and your personal information.

9. California residents

If you are a California resident, you have the right to know what personal information we collect and how we use it, to request deletion of your personal information, and to not be discriminated against for exercising these rights. We do not sell or share your personal information for cross-context behavioral advertising. You can exercise these rights using the tools described above or by contacting us.

10. How we protect your information

We use technical and organizational safeguards to protect your information, including encryption of sensitive credentials at rest, encryption in transit, access controls that limit each account to its own data, and keeping our service secrets on the server only. No system is perfectly secure, but we work to protect your information and to limit who and what can access it.

11. Children

The Service is for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

12. Changes to this Policy

We may update this Policy from time to time. When we make a material change, we will update the date at the top and may ask you to review the updated Policy. Your continued use of the Service after an update means you accept it.

13. Contact us

For privacy questions or requests, contact us at support@thevirtualcoach.fit.