Privacy Policy

Introduction

Welcome to Personal Workout App. We are committed to protecting your privacy and the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our fitness tracking mobile application and related services.

Please read this Privacy Policy carefully. By using Personal Workout, you agree to the collection, use, and sharing of your information as described in this policy.

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address (used as your primary identifier)
• Name (optional)
• Profile photo (optional)
• User preferences and settings

Health and Fitness Data

Collected via Apple HealthKit:

• Workout sessions (duration, type, exercises performed)
• Sets, repetitions, and weight data
• Rest periods between exercises
• Heart rate data (if you authorize HealthKit access)
• Active calories burned
• BMI entries (if you choose to track them)
• Progress photos (if you choose to take them)

Subscription and Billing Information

Processed securely through RevenueCat:

• Subscription status (Free, Pro Monthly, Pro Yearly)
• Purchase transaction records
• Subscription expiration dates

Note: Payment information is processed by Apple through App Store transactions. We do not collect or store your credit card details.

Device and Usage Information

• Device model and operating system version
• App version and build number
• Usage patterns (features used, frequency of use)
• Crash reports and performance data
• Unique device identifiers (for subscription management)

Analytics Data

Through Firebase Analytics (Google):

• Screens viewed and navigation paths
• Feature engagement metrics
• Session duration and frequency
• Error occurrences and app performance

2. How We Use Your Information

3. Legal Basis for Processing (GDPR)

If you are located in the EEA or United Kingdom, we process your data on the following legal bases:

1. Contractual Necessity — Processing necessary to provide our Service
2. Legitimate Interests — Analytics, security, and service improvement
3. Consent — Processing of HealthKit data (you can withdraw at any time)

4. Data Sharing and Third Parties

We Share Your Data With:

1. RevenueCat (Subscription Management)

• Purpose: Process subscriptions and manage customer entitlements
• Data Shared: Subscription status, device identifier, purchase events
• Location: United States
• Privacy Policy: RevenueCat Privacy Policy

2. Firebase Analytics (Google LLC)

• Purpose: Understand app usage and improve user experience
• Data Shared: Aggregated, anonymized usage metrics
• Location: United States (with global data processing)
• Privacy Policy: Google Privacy Policy

3. Apple Inc. (HealthKit Integration)

• Purpose: Sync health data with Apple Health app
• Data Shared: Workout and health data (stored locally on your device)
• Privacy Policy: Apple Privacy Policy

We Do NOT Share Your Data With:

• Advertising networks
• Data brokers
• Third parties for marketing purposes
• Government agencies (unless legally required)

5. Data Retention and Deletion

Your Right to Deletion

1. Free tier workout history is immediately deleted from our servers
2. Account information is removed within 30 days
3. Health data on your device can be deleted through HealthKit settings

6. Your Privacy Rights

Additional Rights for California Residents (CCPA)

• Opt-out of the "sale" of personal information (note: we do not sell data)
• Non-discrimination for exercising privacy rights
• Designate an agent to make requests on your behalf

Additional Rights for EU/UK Residents (GDPR)

• Withdraw consent at any time
• Lodge a complaint with a supervisory authority
• Data protection by design and by default

7. Health Data and HealthKit

Personal Workout App uses Apple's HealthKit framework to:

1. Read health data from the Health app (if authorized)
2. Write workout data to the Health app
3. Access heart rate, active energy, and other metrics during workouts

Your Control

• HealthKit authorization prompts are presented before any data access
• You can revoke authorization at any time in iOS Settings → Health → Data Access & Devices
• Health data is encrypted and stored locally on your device

8. Data Security

• Encryption: Data is encrypted in transit (TLS) and at rest
• Access controls: Strict authentication and authorization for employee access
• Secure storage: HealthKit data remains on your device with iOS security protections
• Regular audits: We periodically review our security practices

Data Breach Notification

In the event of a data breach, we will notify you within 72 hours (GDPR) or as otherwise required by law, providing details of what happened and the steps we're taking to address it.

9. Children's Privacy

Personal Workout App is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

COPPA Compliance: We do not target our services to children and do not collect information from users under 13.

10. Governing Law and Jurisdiction

• Federal and provincial laws of Canada, including PIPEDA
• Apple App Store Terms and Conditions (where applicable)

For International Users:

• EU/UK residents: GDPR protections apply
• California residents: CCPA/CPRA rights apply
• Other jurisdictions: Local privacy laws apply

11. Contact Us

For EU/UK residents: You have the right to lodge a complaint with your local data protection authority.