Privacy Policy

Last updated: August 1, 2026

At Fitness Goals ("we", "our", or "the application"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and online services.

1. Information We Collect

Profile Information: Full name, email, phone number (optional), age, gender, starting and current weight, height, and fitness goal.

Activity Data: Daily logs (workouts, nutrition, water, mindset), weekly check-ins, progress photos, points, and streak.

Workout Adaptations: When you use “Adapt my session,” we store the written command or accepted transcript, interpreted parameters, applied restrictions, and the proposed or used routine. Fitness Goals does not store the original audio file in this version.

Technical Information: IP address, device type, model, operating system, unique device identifier, and app configuration.

Cookies & Tokens: We store CSRF tokens, authentication sessions, and user preferences such as language and weight units.

2. How We Use Your Information

Provide, maintain, and improve application services
Personalize your fitness and nutrition experience
Generate workout and meal plans tailored to you
Interpret daily adaptation requests and select approved exercises compatible with your plan, equipment, and restrictions
Send reminder and motivational notifications
Process transactions and payments, when applicable
Comply with legal and regulatory obligations
Detect and prevent fraud
Analyze app usage for improvements using anonymous analytics

3. Data Protection

We implement technical, administrative, and physical safeguards to protect your information:

SSL/TLS encryption for data in transit
Encrypted storage on secure servers
Two-factor authentication where available
CSRF validation on applicable forms and mutations
Access auditing for sensitive data
Secure password requirements

4. Third Parties and Data Sharing

Base44 SDK: We use Base44 for backend services, storage, and authentication. Base44 maintains its own privacy policy.

Device or Browser Voice Services: If you use the microphone, your operating system, browser, or speech-recognition provider may process audio into text under its own terms. Fitness Goals receives the resulting transcript and does not store the original audio in this version.

Stripe (Payments): If payments are used, Stripe processes card information under its own privacy policy.

We do NOT sell your data: Your data is not sold to third parties. We share data only with necessary service providers under appropriate confidentiality arrangements.

5. Data Retention

While your account is active: We retain your fitness data, profile information, and configuration.

After account deletion: We anonymize or delete data within 30 days, except information that must be retained for legal reasons such as audit or tax obligations.

Backups: Encrypted backups may be retained for up to 90 days for disaster recovery.

6. Your Rights (GDPR/CCPA)

Right of Access: Request a copy of your personal data
Right to Delete: Request deletion of your account and data through Settings
Right to Correct: Edit your profile information at any time
Right to Portability: Request export of your data in JSON format
Right to Opt Out of Marketing: Unsubscribe from marketing emails at any time

To exercise these rights, contact: support@myreto21.app

7. Cookies and Tracking Technologies

We use cookies and localStorage to:

Maintain an authenticated user session
Remember preferences such as language, theme, and units
Store CSRF tokens for security
Support anonymous analytics such as Google Analytics or Sentry when enabled
Support opt-in push notifications

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or an in-app notification when appropriate.

9. Contact

If you have questions about privacy:

support@myreto21.app

Dominican Republic