Fitgineered Privacy Policy

1) Information we collect

A) Information you provide

Account information: name (if provided), email address, password (stored as a secure hash), and profile details trainers or clients choose to add (for example age, gender, height, weight, and other fitness information).

Trainer app content: programs, exercise plans, assignments, and notes created using the Trainer app.

Client app content: activity logs, workout results, and other inputs submitted by a client.

Messaging: Messages sent through in-app chat are stored on our systems and may be visible to intended recipients (for example a trainer and client). Messages are encrypted in transit (TLS) but are not end-to-end encrypted.

Uploads and saved sessions (future or optional): If you choose to upload or save content (for example videos), we store the uploaded content and related metadata so that you and any trainer you connect with can access it.

B) Information collected automatically

Operational logs (server side)

We generate technical logs when users interact with the Services. These logs may include:

• pseudonymous internal user identifiers
• device and browser information
• IP address
• timestamps and event names
• route templates, request status, and similar system metrics

These logs help ensure reliability, detect abuse, and diagnose issues.

Authentication and security records

When users sign in or refresh a session, we create session records containing:

• IP address and approximate region (for example city/province)
• browser and device information
• login/refresh timestamps
• an internal ID linking the record to the account

We use this information to detect unusual login activity, investigate misuse, and protect accounts.

Analytics (client side)

We use analytics tools to understand how users interact with the Services and improve performance and usability. These tools may collect:

• device/browser information,
• session identifiers,
• approximate geographic region (based on IP),
• navigation events (screens viewed, buttons tapped, features used).

We do not collect:

• precise latitude/longitude,
• postal code,
• DOM or form input values,
• text users type,
• message content,
• session recordings or replay.

Analytics are used to understand usage patterns and improve product experience, not for advertising.

C) Pose tracking and video processing (future functionality)

If future features support camera-based form tracking:

• live pose processing may occur in memory and may not be stored unless you save content;
• saved videos and derived metrics will be stored as part of your account and shared with authorized trainers.

We will provide in-product notice if these features launch.

2) How we use information

We use information to:

• operate, maintain, and improve the Services;
• authenticate users and secure accounts;
• support trainer–client workflows;
• detect and prevent fraud or abuse;
• debug and monitor system performance;
• comply with law and enforce our terms.

3) Consent

We collect, use, and disclose personal information with your knowledge and consent except where permitted by law. You may withdraw consent subject to restrictions and reasonable notice.

4) Sharing and disclosure

We may share information:

• Service providers: hosting, storage, logging/monitoring, analytics, communications, and (when enabled) payment processing. These providers process information solely to support our Services.
• Trainer/client visibility: information and content submitted in one application may be visible to the corresponding linked party (trainer or client).
• Legal and safety: to comply with laws and protect the platform and its users.
• Business transfers: in the event of merger, acquisition, or similar transaction.

We do not sell personal information.

5) International transfers

Service providers may process data in Canada, the United States, or other jurisdictions with comparable protections.

6) Retention

Different categories of data are held for different periods:

• Operational logs: generally retained for up to 7 days
• Authentication/security session records: retained while accounts remain active and for a reasonable period afterward
• Analytics data: retained according to configurations that support product improvement
• Client/trainer content including uploads: retained until deleted or until an account is closed, subject to legal requirements

7) Security

We use administrative, technical, and physical safeguards designed to protect information. No system is fully secure.

8) Your rights and choices

Users may request:

• access to personal information,
• corrections,
• deletion (including account removal),
• withdrawal of consent or disabling of certain data collection where technically feasible.

We may verify identity before fulfilling requests.

9) Children’s privacy

The Services are not intended for children under 13.

10) Changes

We may update this Policy. If material changes are made, we will update the date and may provide in-product notice.

11) Contact

team@fitgineered.com