Rhino Lab - Privacy Policy

Privacy Policy

Last updated: October 24, 2025

1. Who We Are & Scope

This Policy covers the Rhino Lab LLC mobile application and related support.

Controller: Rhino Lab LLC
Email: support@rhinolabapp.com

This Policy applies to all users of Rhino Lab.

2. Data We Collect

The data we collect depends on how you use Rhino Lab and which features you enable. If a category doesn’t apply to your usage, we do not collect it.

Account & Profile

Email, display name (if you create an account or sign in)
Authentication identifiers (e.g., platform UID)

Workout Content You Create

Exercises, sets/reps/weights, notes, dates, progression/history

App & Device Data (Non-Sensitive)

Device model, OS version, app version, language/region
In-app events (feature usage)
Crash/diagnostic logs

Payments/Subscriptions

Limited transaction metadata via Google Play Billing (we do not store card numbers)

Local/SDK Storage

Used for sign-in sessions, preferences, analytics, and crash reliability.

3. How We Use Data (Purposes)

Provide the App: account creation/login, sync workouts, save preferences.
Improve & Debug: analytics to understand usage, diagnostics, crash reporting.
Communications: service messages, account/security notices.
Safety & Compliance: prevent abuse; comply with legal obligations.
Payments: manage purchases/subscriptions through Google Play Billing.

Legal Bases (GDPR/UK GDPR): performance of a contract (providing the app), legitimate interests (security, improvement), consent (optional features like notifications), and legal obligation (records).

4. Sharing & Disclosure

We share data only as needed:

Service Providers (Processors): hosting, analytics, crash reporting, backups, email delivery—acting under contract and our instructions.
Legal & Safety: to comply with law, enforce terms, or protect rights/safety.
Business Transfers: during a merger, acquisition, or asset sale, data may transfer under similar protections.

We do not sell personal data. We do not share data for cross-context behavioral advertising.

5. Retention

We keep data only as long as necessary for the purposes above:

Account/workout data: retained while your account is active.
Diagnostics: typically ≤ 24 months (or shorter where feasible).
Legal/backup copies: retained as required by law or for dispute resolution, then securely deleted.

You may request deletion at any time (see Your Rights and Account Deletion).

6. Security

We use reasonable administrative, technical, and organizational measures (e.g., encrypted transport, restricted access, least-privilege). No system is 100% secure; please use a strong password and keep your device updated.

7. International Transfers

If data is processed outside your country, we use appropriate safeguards (e.g., Standard Contractual Clauses) to protect your information.

8. Your Rights & Choices

Depending on your location, you may have the right to:

Access your data
Correct inaccurate data
Object/Restrict certain processing
Withdraw consent (e.g., for notifications)

How to exercise: Use in-app settings or email rhinolab125@gmail.com. We will respond within the time required by applicable law.

9. Account Deletion

You can delete your account and associated personal data:

By email: Send a request to rhinolab125@gmail.com from your account email.
By Google Form Links: Go to this google form: https://docs.google.com/forms/d/e/1FAIpQLSenfLzCv5zLYqB8jy3OOgSvCuYBgy6OTFxL_RDfHnT_WUw1eQ/viewform?usp=sharing&ouid=111070367974461571881
In-App: Go to menu > profile information > Delete my account

Upon deletion, we remove or de-identify personal data, except where retention is required by law (e.g., fraud prevention, tax). Deleted accounts cannot be restored.

10. Children’s Privacy

Rhino Lab is not directed to children under 13 (or the minimum age in your region). We do not knowingly collect personal information from children. If you believe a child has used the app and provided data, contact us so we can take appropriate action.

11. Third-Party Services & SDKs

We may use reputable processors, for example:

Hosting/Database: e.g., Google Cloud / Firebase
Analytics: e.g., Firebase Analytics
Crash Reporting: e.g., Firebase Crashlytics
Payments: Google Play Billing

Each acts as our processor under contract. We keep our Google Play Data Safety declarations aligned with our actual usage.

12. Permissions (How We Use Them)

Notifications: send reminders/updates only if enabled.

Manage permissions anytime in your device settings.

13. Do Not Track / Global Privacy Control

We do not track you across third-party apps for advertising. If this changes, we will honor applicable signals and update this Policy and our Google Play Data Safety disclosures.

14. Changes to This Policy

We may update this Policy as features or laws change. We will post updates with a new Effective date. If changes are material, we will provide additional in-app notice.