# Privacy Policy for ProminFit
*Last updated: May 20, 2026*
## 1. Introduction
ProminFit (“we”, “our”, “the App”) provides fitness, nutrition, and health‑tracking services. This Privacy Policy explains what personal information we collect, how we use it, how we protect it, and your rights regarding your data.
## 2. Information We Collect
| Category | What we collect | Why we collect it |
|----------|----------------|-------------------|
| **Account information** | Email address, user‑id, authentication tokens. | To identify you, enable login, and manage your subscription. |
| **Profile data** | Gender, age, height, weight, activity level, fitness goals, dietary restrictions, health conditions, fitness experience, daily calorie target, XP/level, badges, water‑goal, water‑increment, body measurements, onboarding status. | To personalize workout and nutrition recommendations, calculate calorie targets, and power the AI Coach. |
| **Wearable data** | Steps, calories burned, workout sessions, heart‑rate (when available). | To sync activity data, provide accurate activity tracking and improve calorie‑burn calculations. |
| **Usage & device data** | Device type, OS version, app version, IP address, crash logs, analytics events. | For troubleshooting, performance monitoring, and improving the product. |
| **Push‑notification preferences** | Preference flags for workout reminders, water reminders, motivational messages. | To schedule and send relevant notifications. |
| **Cookies / local storage** | Session tokens, AsyncStorage flags (e.g., legal acceptance). | To maintain session state and remember user choices. |
We do **not** collect contacts, camera roll (unless you explicitly use the Food Scanner or Physique Scanner, in which case the image is processed using AI services and not stored on our servers).
## 3. How We Use Your Information
- **Personalization** – Generate custom workout plans, nutrition suggestions, and AI coaching messages based on your profile and activity.
- **Sync & Backup** – Store profile, nutrition logs, workout history, and subscription details in Supabase (cloud). Local cache is kept in AsyncStorage for offline use.
- **Analytics** – Aggregate anonymized usage statistics to understand feature adoption and improve the App.
- **Communications** – Send transactional emails (e.g., password reset, subscription receipts) and push notifications you have opted‑in to receive.
- **Legal & Safety** – Retain data required for fraud prevention, dispute resolution, and compliance with applicable law.
## 4. Data Sharing & Third‑Party Services
We **do not sell** your personal information. We may share data with:
- **Supabase** – Cloud database hosting (processed under Supabase’s privacy terms).
- **Google Fit / Apple Health** – When you enable wearable integration; data is read from the platform and stored only in your account.
- **Payment providers** (RevenueCat) – For subscription management.
- **Service providers** (e.g., email delivery, crash reporting) – Only the minimal data required for the service.
All third parties are contractually required to protect your data and to use it solely for providing the service.
## 5. Data Retention & Deletion
- **Account deletion** – You can delete your account from the Settings screen. This triggers:
1. Removal of your profile, nutrition logs, workout history, and subscription records from Supabase.
2. Deletion of any associated wearable data.
3. Clearing of all AsyncStorage entries on your device.
- **Retention period** – If you do not delete your account, data is retained for the duration of your subscription and for a minimum of 30 days after cancellation to allow recovery.
- **Backup** – Backups are retained for up to 90 days for disaster recovery.
## 6. Security
We use industry‑standard encryption (HTTPS/TLS) for data in transit and encrypted storage for data at rest in Supabase. On‑device data is stored in AsyncStorage, which is sandboxed per app. Access to wearable data requires explicit user permission on the device.
## 7. Your Rights
- **Access & Portability** – Request a copy of your data via the Settings → Data Export screen.
- **Correction** – Edit your profile information directly in the app.
- **Deletion** – Delete your account as described in Section 5.
- **Withdrawal of Consent** – Disable push‑notifications or revoke wearable permissions in the device settings.
## 8. Children’s Privacy
The App is not intended for children under 13 years of age. We do not knowingly collect personal data from children. If you become aware that a child has provided personal information, please contact us to have it removed.
## 9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted here with an updated date. Continued use of the App after changes constitute acceptance of the new terms.
## 10. Contact Us
If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact us at:
**Email:** help.prominfit@outlook.com