Privacy Policy
Last updated [DATE]
This explains what [COMPANY NAME] collects, why, and what control you have. Some of what you log is health data, which gets extra protection under [GDPR / UK GDPR / APPLICABLE LAW].
What we collect
Account and profile: email address, and what you choose to add: display name, username, photo, bio, city and country.
Training: workouts, sets, weights, reps, notes, cardio sessions and the gyms you train at.
Social: who you follow and who follows you, comments, reactions and challenges.
Coach: your conversations with the coach and how much of it you use, so we can apply fair-use limits.
Body and health: weight, body composition, measurements, progress photos, sleep, alcohol and subjective readiness. This is special-category health data.
Nutrition: what you log and the targets you set.
Technical: app version, platform and error diagnostics. We do not log request bodies or your content in diagnostics.
Why we process it
To provide the service you asked for: storing your log, computing progression, and showing your trends.
To generate coaching suggestions, which involves sending relevant extracts of your training data to our AI provider.
To take payment, through a payment processor. We never see or store your card details.
Health data is processed on the basis of your explicit consent, which you give by logging it and can withdraw by deleting it.
Who sees it
Every table is protected so one account cannot read another’s data. Others see only what is listed here. Accounts start public; you can make yours private in Profile.
If your account is public, anyone signed in can see your name, username, photo, city, bio, follower and following counts and recent sessions, and can follow you; your followers see your posts (records, streaks, sessions logged, cardio).
If your account is private, others see only your name and username until you approve their follow. People you have blocked see nothing.
Nobody else sees your notes, bodyweight, measurements, photos, sleep, alcohol or food.
Leaderboards show your name, photo and best lifts to anyone signed in, only if you join them. Private accounts cannot join.
A share link exposes only the snapshot you chose, expires after 30 days by default, and can be revoked at any time.
Your best main lifts, divided by your bodyweight, count anonymously towards the percentiles other lifters see on their body map. No one sees your numbers, and a percentile only appears when at least 20 people are compared.
Our processors: [HOSTING PROVIDER], [AI PROVIDER], [PAYMENT PROCESSOR], [EMAIL PROVIDER]. Each is bound by contract and processes only what is needed.
Where it lives and how long
Data is stored in [REGION].
We keep your data while your account is open. When you delete your account, training, body, nutrition and social data are removed within [RETENTION PERIOD].
[BACKUP RETENTION — backups may hold deleted data for a further period; state it.]
Your rights
Access, correct, export or delete your data. Object to or restrict processing. Withdraw consent for health data.
Deleting your account is in Settings, under Account. For an export, email [CONTACT EMAIL].
You can complain to [SUPERVISORY AUTHORITY].
Children
Fluke Fitness is not for under-[MINIMUM AGE]s. We do not knowingly collect their data, and will delete it if we learn we have.
Security
Data is encrypted in transit and at rest. Access is enforced per row in the database rather than only in the app.
Progress photos are stored privately and served through short-lived signed links.
No system is perfect. We will notify you and the regulator as required if a breach affects you.
Changes and contact
We will tell you before material changes take effect.
Contact: [CONTACT EMAIL]. [DATA PROTECTION OFFICER / EU REPRESENTATIVE, if required.]