1. Introduction
Mindful Body ("we," "our," or "us") operates the Mindful Body fitness tracking application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application. By using Mindful Body, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Account Information
When you create an account, we collect your email address and password. If you sign in using Google OAuth, we receive your name, email address, and profile picture from Google. If you sign in using Apple, we receive the account information Apple provides, such as your email address and, on first authorization, your name.
Fitness & Workout Data
We collect data you provide during your use of the app, including:
- Custom exercises you create (name, muscle groups, equipment)
- Workouts and training programs you design
- Scheduled and completed workout sessions
- Set logs including reps, weight, RPE (Rate of Perceived Exertion), RIR (Reps in Reserve), and notes
- Workout duration, dates, and progress history
Device & Usage Data
We automatically collect certain information when you access the app, which may include your timezone, browser type, device information, IP address, request logs, and general usage patterns. We also use essential cookies or similar storage technologies to maintain your session, preferences, and application security.
Coaching & Communication Data
If you use the AI coach, we process the messages you submit and relevant workout context needed to generate a response. If you connect with a trainer, information shared through that relationship may include assigned plans, workout history, and session details.
3. How We Use Your Data
We use the information we collect to:
- Provide and maintain the Mindful Body application
- Track your workout history and display progress analytics
- Personalize your experience with AI-powered coaching suggestions
- Sync your data across devices
- Send important account-related communications
- Enable trainer and client collaboration when you choose it
- Prevent fraud, abuse, and unauthorized access
- Improve and optimize the application
4. Third-Party Services
Mindful Body relies on the following third-party services to operate:
- Supabase — Provides our database, authentication, and backend infrastructure. Your data is stored securely in Supabase-managed PostgreSQL databases with row-level security policies.
- Google OAuth — If you choose to sign in with Google, your authentication is handled by Google's OAuth 2.0 service. We only receive the profile information you authorize.
- Sign in with Apple — If you choose to sign in with Apple, your authentication is handled by Apple. We receive only the account information Apple provides for authentication.
- Vercel — Hosts our web application and processes requests. Vercel may collect standard server logs.
- OpenAI — Processes prompts and relevant context when you choose to use AI-powered coaching features.
We may also disclose information when required by law, to protect the rights and safety of users or the service, or as part of a business transaction. We do not sell your personal information.
5. Data Storage & Security
Your data is stored in secure, encrypted databases managed by Supabase. We implement row-level security policies to ensure that users can only access their own data. Authentication tokens are stored using secure session cookies. Access granted to a trainer is limited to an active trainer-client relationship. While we strive to protect your data, no method of electronic transmission or storage is 100% secure.
6. Data Retention
We retain personal and fitness data while your account is active and for as long as reasonably necessary to provide the service, meet legal obligations, resolve disputes, and enforce agreements. You may request account deletion by contacting us. Some records may remain temporarily in backups or be retained where required by law.
7. Your Rights
Depending on where you live, you may have the right to:
- Access the personal and fitness data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Request a portable copy of certain data
- Object to or restrict certain processing
- Withdraw consent where processing relies on consent
To exercise a privacy right, contact us using the information below. We may need to verify your identity before completing a request.
8. Children's Privacy
Mindful Body is not intended for children under 13, or a higher minimum age where required by local law. We do not knowingly collect personal information from children below the applicable minimum age. If we learn that we have done so, we will take steps to delete it.
9. International Data Processing
Our service providers may process information in countries other than the country where you live. Where required, we use appropriate safeguards for these transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the application after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us at support@mindfulbodyapp.com.
Learn more about Mindful Body or read our Terms of Service.