Introduction

PeakForm Coaching ("we", "our", or "us") is committed to protecting your privacy and handling your personal information with care. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website and mobile applications (iOS and Android).

By using the Service, you consent to the data practices described in this Privacy Policy.

Information We Collect

Account Information

• Email address and password
• First name and last name
• Date of birth (to verify you are 18+)
• Phone number (optional)
• Profile photo (optional)
• Timezone and measurement preferences

Health and Fitness Data

• Body measurements (weight, body fat %, circumferences)
• Wellness scores (energy, sleep, stress, motivation, recovery, hunger)
• Progress photos (front, side, back views)
• Workout logs (exercises, sets, reps, weights)
• Nutrition data (food logs, calorie/macro tracking)
• Barcode scans (used to retrieve food nutrition information)
• Habit tracking and goals
• Check-in submissions (wins, challenges, notes)

Device and Usage Information

With your consent, we use Google Analytics (via Firebase) to collect anonymous usage data to help us understand how visitors interact with our website and applications. This includes:

• Device ID, operating system, app version
• Push notification tokens
• Error logs and crash reports
• Usage analytics (pages viewed, features used, time spent)
• IP address and general location (city/country level)
• Browser type and version
• Referral sources (how you found our website)

How We Use Your Information

We use your information to:

• Create and manage your account
• Provide the coaching service
• Enable coach-client communication and data sharing
• Store and display your fitness progress
• Send notifications (workout reminders, check-in alerts, feedback)
• Monitor client activity patterns to generate intelligent alerts for coaches
• Process subscription payments
• Improve the Service and user experience
• Analyze usage patterns and Service performance
• Detect and prevent fraud and security incidents

We will never:

• Sell your information to third parties
• Share your information with third parties for marketing purposes
• Use your information for purposes other than those stated above

How We Share Your Information

With Your Coach or Clients

When you establish a coach-client relationship:

Coaches can view: Your progress check-ins and photos, body measurements, wellness scores, workout and nutrition logs, habits and goals.

Clients can view: Coach-assigned programmes, exercises, meal plans, feedback, and nutrition targets.

With Third-Party Service Providers

• Firebase (Google): Authentication and user management
• Stripe: Payment processing for subscriptions
• Backblaze B2: Cloud storage for progress photos
• Brevo: Transactional email delivery
• Expo: Push notifications to mobile devices
• Sentry: Error tracking and performance monitoring
• Google Analytics: Website and app usage analytics

These providers are contractually obligated to protect your data and use it only for specified purposes.

Cookies and Tracking Technologies

What are Cookies?

Cookies are small text files stored on your device that help us understand how you use our website and applications. We use cookies only with your explicit consent.

Types of Cookies We Use

• Essential cookies: Required for authentication and core functionality
• Analytics cookies: Google Analytics tracks usage patterns, page views, and user interactions to help us improve the Service
• Performance cookies: Monitor app performance and error rates

Google Analytics (Firebase)

We use Google Analytics through Firebase to collect anonymous usage statistics. This helps us:

• Understand which pages and features are most popular
• Identify technical issues with our website and applications
• Improve user experience and performance
• Make data-driven decisions about feature development

This data is aggregated and anonymized. For more information about how Google uses data, visit Google's Privacy Policy.

Your Consent

When you first visit our website, you'll see a cookie consent banner. Analytics will only be activated if you click "Accept". You can:

• Accept cookies to help us improve the website
• Decline cookies and still use all website features
• Withdraw consent at any time by clearing your browser cookies

Note that disabling essential cookies may affect Service functionality.

Data Security

We implement security measures to protect your information:

• HTTPS/TLS encryption for data in transit
• Encryption of sensitive data at rest
• Secure authentication (Firebase, JWT tokens)
• Rate limiting and security headers
• Regular security monitoring

However, no system is 100% secure. You use the Service at your own risk.

Data Retention

• We retain your information while your account is active
• Progress photos are automatically deleted after 2 years
• When you delete your account, most data is deleted immediately
• Some data may be retained for legal compliance, fraud prevention, or backup purposes (deleted within 30-90 days)

Your Privacy Rights

You have the right to:

• Access: Request a copy of your personal information
• Correct: Request correction of inaccurate information
• Delete: Request deletion of your data
• Export: Request your data in a portable format
• Object: Object to certain processing activities
• Withdraw Consent: Withdraw consent at any time
• Opt Out: Opt out of analytics tracking

To exercise these rights, update your profile in account settings or contact us at privacy@peakform.io.

Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect information from anyone under 18.

If we discover that we have inadvertently collected personal information from someone under 18, we will delete that information immediately. If you are a parent or guardian and believe your child has provided personal information to us, please contact us at privacy@peakform.io.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence (UK, US, EU). We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

GDPR and CCPA Compliance

If you are in the European Economic Area, UK, or Switzerland, we comply with the GDPR. You have additional rights under GDPR as outlined above.

If you are a California resident, you have rights under the CCPA. We do not sell your personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you via email or in-app notification at least 30 days before changes take effect.

We may collect additional data types as we add new features to the Service. Material changes will be communicated as described above.