Summary
We collect account details, workout and nutrition activity, subscription and billing status, optional AI prompts, ads/analytics signals, and data from integrations you connect (like Oura). We use this information to run the service, personalize your experience, support you, and keep the platform secure. We share data with service providers such as hosting (Vercel), email delivery (Resend), AI models (OpenAI), ads (Google AdSense/AdMob), analytics (Vercel Analytics), billing verification (Google Play), and device integrations (Oura) as needed. You can access or delete your data in Settings or by contacting us.
Information we collect
- Account data: email, username, password hash, role, invite codes, session cookies for authentication.
- Profile and preferences: training goals, schedule, equipment, injuries/preferences, theme settings.
- Workout and nutrition data: workouts, sessions, performed sets, plans, meal plans, reviews, trainer messages.
- Integrations: Oura tokens and summaries when connected; mobile ads preferences based on role; Google Play purchase tokens and entitlement states for subscriptions.
- AI interactions: prompts and responses with your coach; optional user-provided OpenAI API key.
- Device and app context: basic request/device information and analytics events (via Vercel Analytics); ad-related identifiers handled by Google AdSense (web) and AdMob (mobile).
- Support reports and diagnostics: when you submit a report, we collect the message you provide and a recent diagnostic snapshot to help troubleshoot issues.
- Support communications: emails sent to us or triggered by the app (password reset, notices).
How we use information
- Provide and improve core features: authentication, workouts, meal planning, trainer chat.
- Personalize recommendations, plans, and AI outputs based on your profile and activity.
- Process subscriptions and manage PREMIUM access when purchased via Google Play.
- Deliver emails (Resend), analytics (Vercel Analytics), and ads (AdSense/AdMob) when applicable.
- Sync integrations you enable (e.g., Oura), and respect your settings and role-based ads controls.
- Protect against fraud/abuse, secure accounts, and comply with legal obligations.
Payments and subscriptions
Mobile subscriptions are verified through Google Play. We receive purchase tokens from the app and store entitlement status (e.g., active, expired) to set PREMIUM access. We do not store full payment instruments; payment processing is handled by Google. If Apple IAP is added in the future, we will update this policy to describe the data flows.
Advertising and analytics
- Ads: Web uses Google AdSense; mobile uses Google AdMob. Ad delivery may use device identifiers or cookies managed by Google. Ads are hidden for PREMIUM, TRAINER, and ADMIN roles, and can be disabled globally by the app operator.
- Analytics: Vercel Analytics captures usage and performance metrics (e.g., page views, device/browser context). Data is used to improve stability and experience.
AI features
Coach prompts, plan generation, and chat can include workout history, goals, and feedback you provide to generate responses. When AI is used, relevant inputs are sent to OpenAI. If you choose to supply your own OpenAI API key, that key may be stored for your account and used for your requests. Do not share sensitive information you do not want processed by the model.
Support reports and diagnostics
If you submit a support report, we collect the message you type and a snapshot of recent account activity and diagnostics to help troubleshoot issues.
We do not intentionally collect passwords, auth tokens, or payment details in support reports.
- Diagnostic snapshots may include recent trainer chat messages (truncated), AI request metadata (model name, token counts, success status, prompt/response previews), workout metadata, and workout session metadata.
- We also capture basic device and browser context (URL, user agent, timezone, viewport) and request identifiers used for debugging (for example, x-vercel-id).
Support reports are used only for support, debugging, and improving reliability. Reports are delivered to our support inbox via Resend, retained for up to 30 days, and then automatically deleted. Please avoid including sensitive personal information in the free-text field.
Wearables and integrations
If you connect Oura, we store access tokens and import daily summaries to personalize training guidance. Disconnecting Oura stops new imports; tokens and imported data are removed when you delete your account.
Data retention
We retain account, workout, subscription, AI interaction history, and integration data while your account is active to provide the service. You can request deletion in Settings or by contacting us; deleting your account removes associated personal data from our primary systems. Support reports and diagnostic snapshots are retained for up to 30 days before automatic deletion. Hosting and email providers may keep limited logs for a short period per their policies.
Security
We use reasonable safeguards such as encrypted transport (HTTPS), hashed passwords, access controls, role-based permissions, and least-privilege service accounts. No system can be fully secure; please use a strong password and keep your credentials safe.
Your rights and choices
- Access and update your profile, training preferences, and AI key choices in Settings.
- Control ads through your role (PREMIUM/ADMIN/TRAINER hide ads) and app-wide ad settings.
- Disconnect integrations like Oura at any time; stop sending prompts to AI by not using AI features or removing your AI key.
- Request account deletion from Settings (where available) or email us to delete your account and related personal data.
- Opt out of marketing emails by using any provided unsubscribe mechanism.
Children’s privacy
The service is not directed to children under 13 (or the minimum age in your region). We do not knowingly collect personal information from children in that age group. If you believe a child provided data, please contact us so we can delete it.
International transfers
We use cloud providers (e.g., Vercel, Google, Resend, OpenAI) that may process data across regions. By using the service, you understand your data may be transferred to and processed in countries outside your residence.
Changes to this policy
We may update this policy to reflect product, legal, or operational changes. We will update the “Last updated” date above and, when required, notify you through the app or email.
Contact us
For questions or requests about this policy or your data, contact Kaizen Fitness at [email protected].