Create a Privacy Policy for iOS and Android Apps

# FitPulse Privacy Policy

**Effective Date:** [Effective Date]
**Last Updated:** [Effective Date]

## Introduction

FitPulse Inc. ("FitPulse," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us through the FitPulse mobile application (the "App") available on iOS and Android. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use FitPulse.

- This policy applies to all users of the FitPulse App on iOS (via the Apple App Store) and Android (via Google Play).
- By downloading, accessing, or using FitPulse, you agree to the terms of this Privacy Policy.
- If you do not agree, please do not install or use the App.

## Information We Collect

### Personal Data
- **Account information:** name, email address, age, and password.
- **Health and fitness profile:** weight, height, fitness goals, workout history.
- **Subscription data:** billing identifiers managed through Apple App Store, Google Play, and RevenueCat (we do not store full payment card details).

### Health and Location Data
- **Apple HealthKit (iOS):** steps, heart rate, workouts, calories, and other metrics you authorize.
- **Google Fit (Android):** activity data, heart rate, step count, and other fitness metrics you authorize.
- **GPS location:** precise location collected during active workouts to map routes, distance, and pace.

### Device Data
- Device model, operating system version (iOS/Android), unique device identifiers (IDFA on iOS, AAID on Android), language, time zone, mobile carrier, and app version.

### Usage Data
- In-app interactions, features used, session duration, workout frequency, screens viewed, crash reports, and diagnostic logs.

> **Note on HealthKit:** Data received from Apple HealthKit is never used for advertising, shared with third parties for marketing, or sold, in compliance with Apple's HealthKit requirements.

## How We Use Your Information

We use the information we collect to:

- Create and manage your FitPulse account.
- Provide core fitness tracking, workout mapping, and progress analytics.
- Process subscriptions and in-app purchases via RevenueCat.
- Personalize your experience, recommendations, and training plans.
- Send transactional emails, push notifications, and service announcements.
- Monitor app performance, diagnose crashes, and improve stability.
- Display relevant advertising outside the App (excluding HealthKit/Google Fit data).
- Comply with legal obligations and enforce our Terms of Service.

## Third-Party Services and SDKs

FitPulse integrates the following third-party SDKs and services, each governed by its own privacy policy:

- **Firebase Analytics (Google):** usage analytics and user engagement metrics.
- **Firebase Crashlytics (Google):** crash reporting and stability diagnostics.
- **RevenueCat:** subscription management and receipt validation.
- **Meta Ads SDK (Facebook):** advertising attribution and measurement of ad campaigns.
- **Apple HealthKit (iOS):** access to health metrics with your explicit authorization.
- **Google Fit (Android):** access to fitness data with your explicit authorization.

These providers may collect device identifiers, IP address, and usage events as described in their own privacy notices.

## Data Sharing and Disclosure

We do **not** sell your personal information. We may share data with:

- **Service providers** (e.g., cloud hosting, analytics, crash reporting, subscription processors) acting under written data-processing agreements.
- **Advertising partners** (e.g., Meta) for non-health, non-HealthKit data used in attribution and measurement.
- **Legal and regulatory authorities** when required to comply with applicable law, subpoena, or court order.
- **Business transfers**, such as in the case of a merger, acquisition, or sale of assets, with continued protection of your data.

We never share HealthKit or Google Fit data with advertisers or data brokers.

## Data Retention

- Account and profile data are retained while your account is active.
- Workout, GPS, and health data are retained until you delete them or close your account.
- Crash logs and analytics data are retained for up to 24 months.
- Subscription records are retained as required by tax and accounting laws.
- You may request deletion of your account and associated data at any time.

## Data Security

We implement technical and organizational measures to protect your information, including:

- TLS/HTTPS encryption in transit.
- Encryption at rest for sensitive data.
- Access controls, authentication, and least-privilege principles.
- Regular security reviews and vendor assessments.

No method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

## Children's Privacy (COPPA)

- FitPulse is not intended for children under **13 years old**.
- We do not knowingly collect personal information from children under 13.
- If we learn that we have collected data from a child under 13, we will delete it promptly.
- Parents or guardians who believe their child has provided us information may contact support@fitpulse.app.

## Your Privacy Rights

### GDPR (European Economic Area, UK, Switzerland)
You have the right to:
- Access, correct, or delete your personal data.
- Object to or restrict processing.
- Withdraw consent at any time.
- Port your data to another service.
- Lodge a complaint with your local Data Protection Authority.

Legal bases for processing include consent, contract performance, legitimate interests, and legal obligations.

### CCPA/CPRA (California Residents)
You have the right to:
- Know what personal information we collect, use, and disclose.
- Request deletion or correction of your personal information.
- Opt out of the "sale" or "sharing" of personal information (we do not sell personal information as defined by law).
- Non-discrimination for exercising your rights.
- Limit the use of sensitive personal information.

To exercise any rights, contact us at support@fitpulse.app. We will verify your identity before fulfilling requests.

## International Data Transfers

- FitP

# Privacy Policy for FitPulse

**Effective Date:** [Effective Date]

**Last Updated:** [Last Updated Date]

## 1. Introduction

FitPulse Inc. ("**Company**," "**we**," "**us**," or "**our**") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, FitPulse (the "**App**"), available on iOS and Android platforms, and our related services (collectively, the "**Service**").

Please read this Privacy Policy carefully. By accessing or using FitPulse, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our App.

**Minimum Age Requirement:** FitPulse is intended for users aged 13 years or older. By using this App, you represent and warrant that you meet this age requirement.

---

## 2. Information We Collect

### Personal Information
We collect the following personal information you voluntarily provide:

- **Account Information:** Email address, name, age, and weight
- **Health and Fitness Data:** Workout duration, distance, calories burned, heart rate, and other health metrics integrated from Apple HealthKit (iOS) and Google Fit (Android)
- **Location Data:** GPS coordinates and location history during workouts (collected only when you enable location services and start a workout)

### Device and Technical Information
We automatically collect:

- **Device Identifiers:** Device type, operating system version, unique device identifiers, and device settings
- **App Usage Data:** Features accessed, workout frequency, session duration, crash reports, and performance analytics
- **Network Information:** IP address and mobile network provider information

### Information from Third-Party Sources
We receive information from:

- **Apple HealthKit (iOS):** Health and fitness data you authorize to sync with FitPulse
- **Google Fit (Android):** Health and fitness data you authorize to sync with FitPulse
- **Analytics and Advertising Providers:** Usage patterns, device information, and advertising interaction data (see Section 5 for details)

---

## 3. How We Use Your Information

We use collected information for the following purposes:

- **Service Delivery:** Creating and maintaining your account, providing fitness tracking features, and delivering personalized workout recommendations
- **Analytics and Improvement:** Understanding user behavior, improving App functionality, and optimizing user experience through Firebase Analytics and Crashlytics
- **Subscription Management:** Processing payments, managing subscription tiers, and billing inquiries through RevenueCat
- **Advertising and Marketing:** Displaying personalized advertisements via Meta Ads SDK and sending promotional content (with your consent where required)
- **Communication:** Responding to support requests, sending service updates, and notifying you of policy changes
- **Legal Compliance:** Fulfilling legal obligations, enforcing Terms of Service, and protecting against fraud or security threats
- **Location-Based Features:** Providing map visualizations, route tracking, and location-specific performance analytics during workouts

---

## 4. Third-Party Services and SDKs

FitPulse integrates the following third-party services and software development kits (SDKs):

### Firebase (Google Analytics and Crashlytics)
- **Purpose:** App analytics, crash reporting, and performance monitoring
- **Data Shared:** Device information, app usage events, crash logs, and anonymous identifiers
- **Privacy Policy:** https://policies.google.com/privacy

### RevenueCat
- **Purpose:** Subscription management, in-app purchase processing, and billing
- **Data Shared:** Email, subscription status, purchase history, and device identifiers
- **Privacy Policy:** https://www.revenuecat.com/privacy

### Meta Ads SDK
- **Purpose:** Serving personalized advertisements and measuring ad performance
- **Data Shared:** Device identifiers, app usage patterns, and anonymized user behavior
- **Privacy Policy:** https://www.facebook.com/about/privacy

### Apple HealthKit (iOS) and Google Fit (Android)
- **Purpose:** Accessing authorized health and fitness data
- **Data Shared:** Only data you explicitly authorize and approve through OS-level permissions
- **Privacy Policy:** Apple (https://www.apple.com/privacy) and Google (https://policies.google.com/privacy)

These third parties may use your information according to their own privacy policies. We recommend reviewing their privacy policies directly.

---

## 5. Data Sharing and Disclosure

We do **not** sell your personal information to third parties for marketing purposes. However, we may share information in the following circumstances:

- **Service Providers:** With vendors and contractors who process data on our behalf under strict confidentiality obligations
- **Legal Requirements:** When required by law, court order, or government request, or to protect our legal rights
- **Business Transfers:** In the event of merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction
- **Aggregated Data:** We may share anonymized and aggregated data that cannot identify you for research, marketing, and analytics purposes
- **With Your Consent:** When you explicitly authorize us to share information with third parties

---

## 6. Data Retention

We retain your personal information as follows:

- **Account Data:** Retained while your account is active and for 12 months after account deletion unless legally required to retain longer
- **Health and Fitness Data:** Retained for the duration of your subscription; deleted within 30 days of account termination
- **Location Data:** Retained for 90 days unless needed for legal, security, or fraud prevention purposes
- **Analytics Data:** Aggregated and anonymized analytics are retained indefinitely; individual event logs are retained for 12 months
- **Backup Data:** Backup copies may be retained for up to 30 days after deletion

---

## 7. Data Security

We implement reasonable technical, administrative, and physical safeguards to protect your information:

- **Encryption:** All data transmission between your device and our servers uses TLS/SSL encryption
- **Secure Storage:** Personal information is stored in encrypted databases with access controls
- **Access Restrictions:** Only authorized personnel with a legitimate business need can access sensitive data
- **Regular Audits:** We conduct periodic security assessments and vulnerability testing

**No security system is completely impenetrable.** While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

---

## 8. Children's Privacy (COPPA Compliance)

FitPulse is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

**If you are a parent or guardian** and believe your child has provided information to FitPulse, please contact us immediately at support@fitpulse.app, and we will delete such information promptly.

For users aged 13–17, we provide additional privacy protections and limit data collection and marketing practices consistent with applicable child protection laws.

---

## 9. Your Privacy Rights

### GDPR (European Users)
If you are located in the European Union, you have the following rights:

- **Right of Access:** Request a copy of personal data we hold about you
- **Right to Rectification:** Correct inaccurate or incomplete information
- **Right to Erasure:** Request deletion of your personal data ("Right to be Forgotten")
- **Right to Restrict Processing:** Limit how we use your information
- **Right to Data Portability:** Receive your data in a structured, portable format
- **Right to Object:** Oppose processing of your information for marketing or profiling purposes
- **Right to Withdraw Consent:** Revoke consent for data collection at any time

### CCPA (California Users)
If you are a California resident, you have the right to:

- **Know** what personal information is collected, used, and shared
- **Delete** personal information collected from you (subject to certain exceptions)
- **Opt-Out** of the sale or sharing of your personal information
- **Correct** inaccurate personal information
- **Access** your personal information in a portable and readily useable format

**California Shine the Light:** You may request information about categories of personal information we share with third parties for their marketing purposes.

### Other U.S. State Privacy Laws
Similar privacy rights may apply if you reside in Colorado, Connecticut, Utah, Virginia, or other states with privacy legislation.

**To Exercise Your Rights:** Contact us at support@fitpulse.app with the subject line "Privacy Rights Request." Please include your name, email, and a detailed description of your request. We will respond within 30 days.

---

## 10. International Data Transfers

FitPulse Inc. is based in California, United States. Your personal information may be transferred to, stored in, and processed in the United States or other countries where we and our service providers operate.

**For European Users:**

# Privacy Policy for FitPulse

## Introduction

- **FitPulse Inc.** (“**FitPulse**,” “**we**,” “**us**,” or “**our**”) provides the **FitPulse** mobile application on **iOS and Android**.
- This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use the FitPulse app, related services, and features.
- FitPulse is a **fitness tracking app** that allows users to record workouts, monitor progress, and connect health information from **Apple HealthKit** and **Google Fit**.
- By using FitPulse, you agree to the practices described in this Privacy Policy.
- **Users must be at least 13 years old** to use the app.
- **Effective Date:** [Effective Date]

## Information We Collect

### Personal Information You Provide

- We collect information you provide directly when you create an account, update your profile, subscribe, or contact us, including:
  - **Name**
  - **Email address**
  - **Age**
  - **Weight**
- We may also collect any information you provide when communicating with customer support.

### Health and Fitness Information

- With your permission, FitPulse may access and process health and fitness data from:
  - **Apple HealthKit** on iOS
  - **Google Fit** on Android
- This may include workout-related and fitness data you choose to connect or share with the app.
- Health data is used only to provide and improve fitness tracking features and is handled in accordance with Apple and Google platform requirements.
- We do **not** use HealthKit or Google Fit data for advertising or marketing purposes.

### Location Information

- We collect **GPS location data during workouts** when you grant location permission.
- This information is used to:
  - Track workout routes
  - Measure distance and pace
  - Provide workout summaries and map-based activity history
- On some devices, location may be collected in the foreground while the app is in use, depending on your settings and workout activity.

### Device and Technical Information

- We may automatically collect certain device and app information, including:
  - Device model
  - Operating system and version
  - App version
  - Mobile platform (**iOS/Android**)
  - Device identifiers
  - IP address
  - Crash logs and diagnostic information
  - Language and time zone settings

### Usage Information

- We collect information about how you interact with the app, such as:
  - Features used
  - Screens viewed
  - Session duration
  - Workout activity within the app
  - Subscription events
  - App performance and engagement metrics

## How We Use Your Information

- We use personal information to:
  - Create and manage your account
  - Provide fitness tracking and workout features
  - Sync and display data from Apple HealthKit and Google Fit
  - Track routes, pace, and workout performance using location data
  - Personalize your app experience
  - Process and manage subscriptions
  - Respond to support requests and communicate with you
  - Monitor app performance, troubleshoot issues, and fix bugs
  - Analyze usage trends and improve the app
  - Maintain security, detect fraud, and enforce our terms
  - Comply with legal obligations

- We may use email addresses to send:
  - Account-related notices
  - Subscription and billing communications
  - Service announcements
  - Important policy or security updates

## Third-Party Services and SDKs

- FitPulse uses third-party service providers and software development kits (**SDKs**) to operate the app.

### Firebase Analytics

- We use **Firebase Analytics** to understand how users interact with FitPulse.
- Firebase Analytics may collect:
  - App usage events
  - Device and technical information
  - Approximate identifiers associated with your device or app instance
- This helps us improve performance, usability, and features.

### Firebase Crashlytics

- We use **Firebase Crashlytics** to monitor crashes and diagnose technical issues.
- Crashlytics may collect:
  - Crash reports
  - Device state information
  - Diagnostic data at the time of an error

### RevenueCat

- We use **RevenueCat** to manage in-app subscriptions and entitlement status.
- RevenueCat may process:
  - Subscription status
  - Purchase-related identifiers
  - App user identifiers
  - Transaction metadata
- Payment transactions themselves may be processed by **Apple App Store** or **Google Play**, subject to their own privacy policies.

### Meta Ads SDK

- We use the **Meta Ads SDK** to measure ad performance, attribution, and marketing effectiveness.
- The Meta Ads SDK may collect:
  - Device information
  - Advertising identifiers
  - App events
  - Interaction data for attribution and campaign analysis
- Where required by law, we will seek consent before using advertising-related tracking technologies.

### Apple HealthKit and Google Fit

- FitPulse integrates with:
  - **Apple HealthKit**
  - **Google Fit**
- We access health and fitness data only after you grant permission.
- Health data obtained through these services is used solely to provide health and fitness functionality and not for advertising, profiling, or unrelated marketing.

## Data Sharing and Disclosure

- We do **not sell** your personal information in the traditional sense.
- We may share information in the following circumstances:

### Service Providers

- With trusted vendors that help us operate the app, including:
  - Analytics providers
  - Crash reporting providers
  - Subscription management providers
  - Infrastructure and support providers

### Business and Advertising Partners

- We may share limited data with advertising and measurement partners, such as **Meta**, for attribution, campaign effectiveness, and analytics, subject to applicable law and consent requirements.

### Legal and Safety Reasons

- We may disclose information if required to:
  - Comply with applicable law, regulation, subpoena, or legal process
  - Enforce our agreements or policies
  - Protect the rights, property, or safety of FitPulse, our users, or others
  - Detect, prevent, or investigate fraud, abuse, or security issues

### Business Transfers

- If FitPulse is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.

## Data Retention

- We retain personal information for as long as necessary to:
  - Provide the app and requested services
  - Maintain your account
  - Fulfill subscription and transaction obligations
  - Resolve disputes
  - Enforce agreements
  - Meet legal, tax, accounting, and regulatory requirements
- Health, workout, and profile data may be retained while your account is active and for a reasonable period afterward unless deletion is required by law or requested by you.
- Crash, analytics, and technical logs may be retained for shorter periods as needed for diagnostics and service improvement.

## Data Security

- We use reasonable administrative, technical, and organizational safeguards to protect your information, including measures designed to prevent unauthorized access, disclosure, alteration, or destruction.
- These safeguards may include:
  - Encrypted transmission of data
  - Access controls
  - Authentication mechanisms
  - Monitoring and logging
- No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

## Children's Privacy (COPPA)

- FitPulse is **not intended for children under 13**.
- We do not knowingly collect personal information from children under 13.
- If we learn that we have collected personal information from a child under 13 without appropriate authorization, we will delete that information as required by applicable law.
- If you believe a child under 13 has provided personal information to us, please contact us at **support@fitpulse.app**.

## Your Privacy Rights (GDPR, CCPA, and Similar Laws)

### GDPR and Other International Privacy Rights

- Depending on your location, you may have the right to:
  - Access the personal information we hold about you
  - Request correction of inaccurate information
  - Request deletion of your information
  - Object to or restrict certain processing
  - Request portability of your data
  - Withdraw consent where processing is based on consent
  - Lodge a complaint with a supervisory authority

- Our legal bases for processing may include:
  - Performance of a contract with you
  - Your consent
  - Compliance with legal obligations
  - Our legitimate interests, such as improving and securing the app

### California Privacy Rights (CCPA/CPRA)

- If you are a California resident, you may have the right to:
  - Know what personal information we collect, use, disclose, and retain
  - Request deletion of personal information, subject to exceptions
  - Request correction of inaccurate personal information
  - Access specific pieces of personal information
  - Limit certain uses of sensitive personal information where applicable
  - Not be discriminated against for exercising your privacy rights

- We do not sell personal information for money.
- We may share certain identifiers or app event data with advertising partners for analytics or attribution, which may be considered “sharing” under California law.

### How to Exercise Your Rights

- To submit a privacy request, contact us at:
  - **support@fitpulse.app**
  - [Contact Email], if different
- We may need to verify your identity before fulfilling certain requests.
- You may also manage some data directly in your device settings, app settings, Apple HealthKit, or Google Fit permissions.

## International Data Transfers

- FitPulse is based in **California, United States**.
- If you use the app from outside the United States, your information may be transferred to and processed in the United States or other countries where our service providers operate.
- These countries may have data protection laws that differ from those in your jurisdiction.
- Where required, we use appropriate safeguards for international transfers, such as contractual protections or other legally recognized transfer mechanisms.

## Permissions

**Privacy Policy for FitPulse**

**Effective Date:** [Effective Date]
**Last Updated:** [Date of Last Update]

## Introduction

Welcome to FitPulse! This Privacy Policy explains how FitPulse Inc. ("we," "us," or "our") collects, uses, shares, and protects information in relation to our mobile application, FitPulse (the "Service"), available on iOS and Android.

This policy is designed to help you understand what information we collect, why we collect it, and how you can manage it. By using our Service, you agree to the collection and use of information in accordance with this policy. This policy complies with major privacy regulations, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Children's Online Privacy Protection Act (COPPA).

## Information We Collect

We collect several types of information to provide and improve our Service to you.

### Information You Provide Directly

*   **Account Information:** When you create an account, we collect personal information such as your name, email address, age, and weight. This information is necessary to set up your profile and personalize your fitness experience.
*   **Health and Fitness Data:** You may voluntarily

# FitPulse Privacy Policy

**Effective Date: [Effective Date]**

FitPulse Inc. ("we," "us," or "our") operates the FitPulse mobile application ("App") available on iOS and Android platforms. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the App, a fitness tracking app for monitoring workouts, health metrics, and progress. We are committed to protecting your privacy and complying with applicable laws, including GDPR, CCPA, COPPA, Apple App Store Guidelines, and Google Play policies.

By using the App, you consent to the practices described in this Policy. If you do not agree, please do not use the App. We collect data only as necessary to provide our services, and users must be 13 years or older.

## Information We Collect

We collect the following categories of information to deliver personalized fitness tracking, analyze usage, and improve the App.

### Personal Data
- **Account Information**: Email address, name, age, weight, and height provided during registration or profile setup.
- **Health and Fitness Data**: GPS location data during workouts (precise location on iOS/Android), steps, heart rate, calories burned, and other metrics imported from Apple HealthKit (iOS) or Google Fit (Android).
- **Payment Data**: Subscription details processed via RevenueCat (we do not store full payment card details).

### Device and Usage Data
- **Device Information**: Device ID, model, OS version (iOS or Android), IP address, and mobile carrier.
- **Usage Data**: Workout logs, session duration, app interactions, and crash reports via Firebase Crashlytics.
- **Analytics Data**: Anonymized events like screen views and feature usage via Firebase Analytics.

We do not collect sensitive data like racial/ethnic origin, political opinions, or biometric data beyond fitness metrics.

## How We Use Your Information

We use your information for the following purposes:
- Provide core App features, such as tracking workouts, syncing health data from Apple HealthKit/Google Fit, and generating progress reports.
- Personalize your experience, e.g., tailoring workout recommendations based on age, weight, and GPS-tracked activities.
- Process subscriptions and payments through RevenueCat.
- Improve the App via analytics (Firebase Analytics) and crash reporting (Firebase Crashlytics).
- Send push notifications for workout reminders, updates, or promotions (with opt-out options).
- Display targeted ads via Meta Ads SDK.
- Comply with legal obligations, prevent fraud, and enforce our terms.
- Aggregate anonymized data for research and product development.

## Third-Party Services and SDKs

The App integrates third-party services for enhanced functionality. These providers may collect data as described in their policies:

| Service | Purpose | Platforms | Data Shared |
|---------|---------|-----------|-------------|
| Firebase Analytics & Crashlytics | Usage analytics and error reporting | iOS/Android | Anonymized events, device info, crash logs |
| RevenueCat | Subscription management | iOS/Android | Purchase data, subscription status |
| Meta Ads SDK | Personalized advertising | iOS/Android | Device ID, usage events for ad targeting |
| Apple HealthKit | Health data import (iOS only) | iOS | Steps, heart rate, etc. (user-authorized) |
| Google Fit | Health data import (Android only) | Android | Steps, heart rate, etc. (user-authorized) |

We do not sell your personal data. Review these services' privacy policies for details.

## Data Sharing and Disclosure

We share information only as necessary:
- **Service Providers**: With vendors like Firebase, RevenueCat, and Meta for App operations (under strict agreements).
- **Business Transfers**: In mergers, acquisitions, or asset sales, with notice where required.
- **Legal Requirements**: To comply with laws, respond to subpoenas, or protect rights/safety.
- **With Consent**: For marketing partners or affiliates if you opt in.

Under CCPA, we do not "sell" or "share" personal information as defined. No sharing with third parties for their direct marketing without consent.

## Data Retention

We retain your data only as long as needed:
- **Account Data**: Until account deletion or 2 years of inactivity.
- **Health/Fitness Data**: As long as your account is active; deleted upon request.
- **Analytics Data**: Anonymized after 14 months (Firebase standard).
- **Logs/Crashes**: 90 days.

Deleted data is securely purged. Backups may retain data up to 30 additional days.

## Data Security

We implement reasonable security measures:
- Encryption in transit (HTTPS/TLS) and at rest for sensitive data.
- Access controls, regular audits, and Firebase/Google Cloud security for iOS/Android data.
- No absolute security guarantee; report suspected breaches to support@fitpulse.app.

## Children's Privacy (COPPA)

FitPulse is not directed to children under 13. We do not knowingly collect data from children under 13. If we learn of such collection, we delete it promptly. Parents/guardians: Contact us at support@fitpulse.app. COPPA-compliant for users 13+.

## Your Privacy Rights (GDPR, CCPA)

You have rights regarding your data. California residents (CCPA/CPRA): Rights to know, delete, correct, opt-out of "sale/sharing," limit sensitive data use, and non-discrimination.

EU/UK residents (GDPR): Rights to access, rectify, erase, restrict, portability, object, and withdraw consent.

**How to Exercise Rights**:
- Email support@fitpulse.app with your request, including verification (e.g., account email).
- Access/delete via App settings (profile data).
- Opt-out of analytics/ads: App settings or device-level (iOS App Tracking Transparency/Android ad ID reset).
- CCPA Opt-Out: Do Not Sell/Share toggle in App.
- Authorized agents: Provide proof.

We respond within 45 days (extendable). Appeals: Reply to our response email.

## International Data Transfers

FitPulse Inc. is based in California, USA. Data from EU/UK users may transfer to the US via Standard Contractual Clauses (SCCs) with processors like Google/Firebase. We ensure adequacy under GDPR (e.g., EU-US Data Privacy Framework where applicable). Australian users: Transfers comply with APPs.

## Permissions Requested

The App requests permissions essential for functionality (iOS/Android prompts):
- **Location (GPS)**: Precise location during workouts for route mapping and distance tracking (background/foreground).
- **Health Data Access**: Apple HealthKit (iOS) or Google Fit (Android) for importing steps, heart rate, etc. (user-initiated).
- **Notifications**: Push alerts for workout reminders, achievements, or updates (opt-out anytime).
- **Background App Refresh**: For seamless HealthKit/Google Fit syncing (iOS).
- No camera, microphone, contacts, or photos access required.

Grant/revoke via device settings. Denials may limit features.

## Push Notifications and Analytics

- **Push Notifications**: Sent via Apple Push Notification service (iOS) or Firebase Cloud Messaging (Android). Opt-out in App or device settings.
- **Analytics**: Firebase collects anonymized data to optimize performance. Opt-out via App settings or device ad privacy features.

## Changes to This Policy

We may update this Policy to reflect changes. Posted version controls, with notice via App/push/email for material changes. Continued use constitutes acceptance. Check periodically.

## Contact Information

FitPulse Inc.  
[Company Address, if available]  
Email: support@fitpulse.app  
For privacy requests: privacy@fitpulse.app (or use support@fitpulse.app)  

California residents: Data Processing Addendum available upon request. EU Representative: [TBD]. DPO: support@fitpulse.app.

*Word count: 1,248*