Privacy Policy

Information We Collect

• Account Information: Name, email address, and profile picture obtained through Google Sign-In.
• Fitness Data: Workouts, exercises, sets, reps, weights, routines, and progress data you enter.
• Community Data: Group memberships, posts, comments, friend connections, and rivalry information.
• AI Interactions: Messages you send to the AI coach and preferences you set.
• Usage Data: How you interact with the App, features you use, and error reports.
• Device Information: Device type, operating system, and app version for troubleshooting.

Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide you with the App's services (account creation, workout tracking, community features)
• Legitimate Interests: Processing for app improvement, security, and fraud prevention, where our interests do not override your rights
• Consent: Processing based on your explicit consent (AI coach interactions, optional features)
• Legal Obligations: Processing required to comply with applicable laws

You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

How We Use Your Information

We use your information to:

• Provide and operate the App's features
• Track your workouts and display progress
• Personalize your AI coach experience
• Enable community features (groups, rivalries, friends)
• Send you relevant notifications
• Improve the App and fix bugs
• Ensure security and prevent abuse
• Comply with legal obligations

Information Sharing

We share data only in these circumstances:

• With other users: Profile info and activity you choose to share in groups or public features
• Service providers: Google (authentication), AI providers (for coach features), hosting services
• Legal requirements: When required by law, court order, or to protect rights and safety
• Business transfers: In connection with a merger, acquisition, or sale of assets

Third-party services have their own privacy policies governing their use of your data.

International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States (for AI services and cloud hosting). These countries may have different data protection laws. When we transfer data outside the European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or transfers to countries with adequate data protection as determined by the European Commission. By using the App, you consent to these international transfers.

AI Data Processing

When you use the AI coach, your messages and relevant fitness data are sent to third-party AI services (such as Anthropic or OpenAI) to generate responses.

• These providers process data according to their own privacy policies.
• We send only the information necessary for the AI to provide relevant coaching.
• AI providers may use data to improve their services, subject to their policies.

Data Retention

• We retain your data for as long as your account is active.
• Workout history and progress data are kept to provide you with long-term tracking.
• If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as preventing fraud).
• Anonymized, aggregated data may be retained indefinitely for analytics.

Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure database storage, and access controls. However, no system is completely secure. You are responsible for keeping your account credentials safe. We will notify you of any data breach that may affect your personal information.

Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data (use the Export feature in Profile settings)
• Deletion: Delete your account and all associated data
• Correction: Update inaccurate information in your profile
• Portability: Export your data in a machine-readable format
• Objection: Object to certain processing of your data
• Restriction: Request we limit how we use your data

To exercise these rights, use the in-app features or contact us. We will respond within 30 days.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information (subject to certain exceptions)
• Right to Opt-Out: We do not sell personal information, so this right does not apply
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, use the in-app features or contact us. We will verify your identity before processing requests. You may designate an authorized agent to make requests on your behalf.

Children's Privacy

Flexi is not intended for children under 13 (or under 16 in the EU without parental consent). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App or by email. Your continued use after changes become effective constitutes acceptance. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us through the App or at the email address provided in your account settings. For EU residents, you also have the right to lodge a complaint with your local data protection authority.