Privacy Policy for Barbold

Account Information:

• Email address (for email authentication)
• Name (optional, via Apple Sign-In or Google Sign-In if provided)
• Authentication credentials (securely managed through Firebase Authentication)

Profile Information:

• Gender (optional)
• Age/Date of Birth (optional)
• Height and weight
• Fitness level (beginner, intermediate, advanced)
• Activity level and fitness goals
• Measurement preferences (metric/imperial)
• Injury or muscle avoidance preferences (optional)
• Profile picture (optional, stored locally)

Workout Data:

• Exercise routines and workout plans
• Sets, reps, weights, and other exercise metrics
• Workout duration and timing
• Rest periods and timer usage
• Personal records and achievements
• Workout notes and customizations

Device Information:

• Device identifier (stored securely in device Keychain)
• iOS version and device model
• App version and usage statistics
• Error logs and crash reports (for debugging purposes)

Apple HealthKit Integration (Optional):

• Workout data export to Apple Health
• Activity rings data (move, exercise, stand goals)
• Heart rate data (if available)
• Active energy burned
• Past workout history import (with your permission)

Important: HealthKit data is processed locally on your device and shared with Apple Health only with your explicit permission. We do not store your HealthKit data on our servers.

Core App Functionality

• Provide workout tracking and fitness features
• Store your workout data
• Calculate personal records and fitness achievements
• Generate workout recommendations and progress insights
• Backup and restore your workout data

Account Management

• Create and manage your account
• Authenticate your identity
• Enable cloud storage of your data
• Manage subscription status and trial limits

Cloud Storage

Your workout data is securely stored using:

• Firebase Firestore: For workout plans, exercises, and user data
• Firebase Authentication: For secure account management
• End-to-end encryption: During data transmission
• Server-side security: Google Cloud Platform security standards

Security Measures

• All data transmission is encrypted using HTTPS/TLS
• Firebase security rules protect your data from unauthorized access
• Regular security updates and monitoring
• Device-level encryption for stored data

Limited Data Sharing

We may share your information only in these specific circumstances:

Data Access and Control

• View Your Data: Access all personal data we have about you
• Export Your Data: Download your workout data in standard formats
• Delete Your Account: Permanently delete your account and all associated data
• Correct Information: Update or correct your personal information

HealthKit Control

• Enable or disable HealthKit integration at any time
• Control what health data is shared with Apple Health
• Manage permissions through iOS Settings

Account Deletion

• All personal data is permanently deleted within 30 days of account deletion
• Anonymized usage statistics may be retained for app improvement

Integrated Services

• Firebase (Google): Authentication and data storage
• RevenueCat: Subscription management
• Apple HealthKit: Health data integration (optional)

Privacy Policies

Please review the privacy policies of these third-party services:

• Google Privacy Policy
• RevenueCat Privacy Policy
• Apple Privacy Policy

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including:

• Right to know what personal information we collect
• Right to delete personal information
• Right to opt-out of sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

European Users (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation, including:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing