Privacy Policy

Fitflux ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application.

1. Information We Collect

We collect information to provide our fitness and rehabilitation tracking services. This includes:

A. Personal Information (PII)

• Account Data: Email address, name, and profile picture (via authentication providers).
• Contact Info: Phone number (optional, for notifications).
• Waitlist Data: Before you create an account, we collect your email address, optional name, and selected platform plan when you join the launch waitlist. We use this information only for platform availability and onboarding updates. Waitlist records are scheduled for automatic deletion 365 days after your most recent valid submission.

B. Health and Fitness Data (Sensitive Data)

To fulfill the core function of the app, we allow you to input:

• Physical Characteristics: Age, weight, height, biological sex.
• Health History: Injury history, pain levels, RPE (Rate of Perceived Exertion), and assessment results.
• Workout Logs: Exercise history, weights lifted, and performance metrics.

C. Usage Data

• Device information (browser type, IP address).
• Interaction data (pages visited, features used).
• Error logs and performance data.

D. Google Calendar Data (Optional Integration)

Trainers may choose to connect Google Calendar for scheduling conflict checks. When connected, Fitflux:

• accesses calendar-list metadata so the trainer can select which calendars should block scheduling;
• receives only free/busy time ranges from selected calendars;
• does not import event titles, descriptions, attendees, notes, or locations; and
• does not create, modify, or delete Google Calendar events.

2. How We Use Your Information

We use your data for the following purposes:

1. Service Provision: To create workout programs, track progress, and visualize assessments.
2. AI Processing: We use Artificial Intelligence to analyze your data and generate personalized recommendations.
3. Communication: To send you updates, security alerts, and support messages.
4. Improvement: To monitor usage trends and debug technical issues.
5. Scheduling Conflict Prevention: To warn trainers about external busy time and prevent clients from booking conflicting Fitflux sessions.

3. Third-Party Service Providers

We share data with trusted third-party providers to operate our Service. We do not sell your data to advertisers.

Google API Data Use and Retention

Fitflux stores encrypted Google Calendar identifiers and normalized busy-time intervals only for as long as the trainer keeps the integration connected. Disconnecting Google Calendar removes the stored authorization credential and busy-time projections. Fitflux does not sell Google user data or use it for advertising.

Fitflux's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. International Data Transfers

Fitflux is operated from Canada. However, our service providers, including Firebase, our AI providers, Sentry, Resend, and Stripe, may store and process data in the United States or other jurisdictions. By using the Service, you acknowledge that your information may be transferred to and processed in countries with different data protection laws than your country of residence.

5. Your Rights

Depending on your location (including Canada/PIPEDA and Europe/GDPR), you may have the following rights:

• Access: Request a copy of the data we hold about you.
• Correction: Update inaccurate information.
• Deletion: Request deletion of your account and associated data ("Right to be Forgotten").
• Export: Receive your data in a portable format.

To exercise these rights, contact us at officialfitflux@gmail.com.

6. Data Security

We implement industry-standard security measures, including:

• Encryption: Data is encrypted in transit (HTTPS) and at rest (via Firebase).
• Access Controls: Strict access limitations to internal data.
• Data Minimization: We only request data necessary for the app's functionality.

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Children's Privacy

Our Service is intended for users aged 18 and older. We do not knowingly collect personal information from children under 18 directly.

• Clinician Note: Clinicians may manage profiles for younger athletes only if they have obtained verifiable parental consent. The Clinician assumes full responsibility for this data.

If you become aware that a child has provided us with personal information without parental consent, please contact us so we can delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at:
officialfitflux@gmail.com