Enhanced Fitness · Privacy Policy

Draft for Tom to edit. Bracketed items still need filling in. Have a lawyer read it before public signup (D75).

Effective [date]

Enhanced Fitness is run by [LLC name], [address] ("we"). This policy explains what the app keeps about you, why, who else touches it, and how to get it back or get rid of it. Questions or requests: privacy@[domain].

The short version

• Your data is used for one thing: showing you your own training and what worked for you.
• We don't sell it, share it with advertisers, pool it with other members, or use it to train AI models.
• When you upload a lab report, a DEXA scan, or a file of body measurements, we send it to an AI service to read the numbers off it. The service keeps nothing and may not train on it.
• There are no ads, analytics or tracking tools in the app.
• You can download everything we hold about you, or delete your account and all of it, from Account at any time.

What we keep

Your account: email, name, time zone, preferred units, and a profile photo if you add one. There is no password — signing in is a one-time code emailed to that address — so there is none to store.

Your body: date of birth, sex, height, max heart rate, bodyweight and body-fat readings, VO2 max readings, and tape measurements, each typed in or imported by you.

Your training: mesocycles, workouts, exercises, every set you log, cardio sessions, mobility and skill progress, goals, weekly check-ins and your notes.

Your cycles: the compound protocols you enter (compound, dose, unit and frequency) and their dates.

Your lab reports: any bloodwork report you upload or photograph, kept as the original file, together with the values, units, reference ranges and draw dates read off it or typed in by you. The original file is yours alone: it is shown only to you, it comes out with your export, and it is deleted when you delete your account or the report.

Sign-in records: a record of each signed-in device (when it signed in, when it was last used, and its browser type); a one-time sign-in code and link, held only as a one-way hash and deleted once used or expired; and a short-lived count of sign-in attempts per email and network address, used only to stop guessing and to stop the app being used to send mail to someone who didn't ask for it.

Imported measurements: when you import body measurements from a screenshot, photo, PDF or file, the file is read and not stored — only the measurements it held are kept, under the dates they were taken, and each one can be corrected or deleted on its own day.

Apple Health: if you import an Apple Health export, your phone reads the file in the browser and only the VO2 max readings are sent to us. The rest of the file never leaves your device.

Your bodyweight, body-fat, heart-rate, VO2 max, cycle and lab data are health data. We treat all of it as sensitive. Your lab reports are the most sensitive thing the app holds, and they are treated that way.

Why we keep it

Only to run the app for you: plan your mesos, run your sessions, and show your progress against your diet phases and cycles. We collect health data only because you choose to enter it to use those features. Signing up and entering it is your consent. You can withdraw that consent at any time by deleting the data or your account.

We don't make automated decisions about you that have legal or similar effects. The app's suggestions, such as weights, RIR and "what worked", are training information, not medical advice.

Who else touches it

We never sell your data or share it for advertising. Only these service providers process it, solely to run the app and under contracts that bar any other use:

• Vercel hosts the app and keeps short-lived error logs. We strip the values you enter from those logs.
• Neon hosts the database, in the United States [region].
• Resend sends the sign-in emails. It receives your email address and the one-time code, because that is the email; it sends nothing else and holds no other part of your data.
• Anthropic reads the files you upload to be read: a lab report, a DEXA scan, or a file of body measurements. That one file is sent to Anthropic's API, which returns the values printed on it. Under Anthropic's commercial terms the file is not retained after the request and is not used to train models. A measurement file is not kept by us either. Nothing else in the app is sent to any AI service, and nothing is sent unless you upload it.
• [Payment processor] handles subscription payments. We never see your full card number.

We would disclose data only if the law requires it, such as a valid court order, and we will tell you unless we're legally barred from doing so. If [LLC name] is ever sold, this policy goes with your data, and you will be told first and given the chance to delete your account.

How long we keep it

• While you have an account, we keep your data so your history stays complete.
• When you delete your account, your data is deleted from the live database immediately, your uploaded lab reports included.
• A report you delete goes immediately, and its original file goes with it.
• Database backups roll off within 7 days.
• Error logs roll off within [n] days.
• Failed sign-in counts clear themselves within minutes to hours.

Your choices and rights

Wherever you live, you can:

• See and download everything we hold about you, from Account → Export my data.
• Correct anything by editing it in the app.
• Delete your account and all your data, from Account → Delete my account. If you can't sign in, use [domain]/delete-account or email us.
• Withdraw consent for health data by deleting it.
• Ask us anything about your data at privacy@[domain]. We answer within 30 days.

Washington residents have these rights for consumer health data under the My Health My Data Act. We collect it only with your consent, only to provide the app, and never sell it. You can appeal a decision we make about a request by replying to our answer; if we deny the appeal, you can contact the Washington Attorney General.

California and other US states with privacy laws: we don't sell or share personal information as those laws define it, and we use sensitive information only to provide the service.

UK and EU residents: [LLC name] is the controller of your data. We process account and training data to perform our contract with you, and health data on the basis of your explicit consent. You also have the rights to restrict or object to processing and to data portability, and you can complain to your local data protection authority. Your data is stored in the United States. Transfers rely on our providers' Standard Contractual Clauses.

Security

There are no passwords to lose, and a sign-in code is held only as a one-way hash. Connections are encrypted. Each person's data is walled off to their account, and an uploaded report is served only to the account that uploaded it, never cached outside your device. Sessions can be ended from Account → Sign out everywhere. No system is perfectly secure: if a breach affects your data, we will tell you without undue delay.

Cookies and storage on your device

One cookie keeps you signed in. The app also stores a few things on your device so a lost connection doesn't lose your work, such as a running timer, an unsaved set and a draft meso. Nothing is used for tracking.

Age

Enhanced Fitness is for adults 18 and over. We don't knowingly collect data from anyone younger. If we learn we have, we delete it.

Changes

If we change this policy in a way that affects how your data is used, we'll tell you in the app before the change takes effect.