Draft — final text pending
Workout Gears Privacy Policy
Effective date: [DATE OF FIRST RELEASE] Last updated: [DATE]
Rebel Phoenix Games LLC ("we", "us") makes the Workout Gears mobile app (the "App") and runs workoutgears.com (the "Site"). This policy explains what information the App and the Site handle, why, and the choices you have.
We designed Workout Gears to need as little about you as possible. We do not ask for your name, email address, phone number, location, contacts, photos, or any health measurement. The App shows no ads and contains no advertising or analytics trackers.
1. Information that stays on your device
The following is created and stored only on your phone, encrypted, and is never sent to us:
- your workout history (the date and time of each workout, its length, rounds, the techniques or exercises in each round, and the App's intensity score);
- your settings (the gears in your gallery and their order, rhythm, program, equipment level, coach voice, and Engine selection);
- a copy of the App's content (techniques, images, coach audio) kept so the App opens quickly and works without a connection.
This information is deleted when you use Erase my data in the App or uninstall the App. Because it never leaves your device, we cannot see it, restore it, or move it to a new phone.
2. Information we receive
To provide the App, it connects to our servers. In doing so we receive:
| What | Why | How long we keep it |
|---|---|---|
| An anonymous account identifier created by the App on first launch, and a secret the App uses to sign in. It is not linked to your name, email, or phone number. | To recognize your copy of the App, provide workouts, and apply your subscription. | Until you erase your data in the App, or 24 months after the App last connected. |
| Your acceptance of the health disclaimer (which version, and when). | To record that you read and accepted the safety terms before training. | For as long as we keep the account identifier, and after an erase request for up to 4 years as a record of acceptance, linked only to the anonymous identifier. |
| Workout requests: the gear and settings for a workout you start, and the workout plan our server builds. | Workout plans are generated on our servers. | Up to 7 days, then deleted automatically. |
| Subscription status: whether your subscription is active, its type and expiry, and a purchase token from the app store. | To unlock subscription content. | For as long as the subscription is active and 24 months after, for accounting and dispute purposes. |
| Technical request data: IP address, time, the request made, the App version, and errors, recorded in our server logs. | To run, secure and fix the service. | 14 days. |
We do not receive payment card or billing details: purchases are handled entirely by Apple (App Store) or Google (Google Play) under their own privacy policies.
3. How we use information
Only to provide and secure the App: to sign the App in, build workouts, apply your subscription, record your disclaimer acceptance, keep the service running and protect it from abuse, and comply with law. We do not sell or "share" (for cross-context behavioral advertising) personal information, and we do not use it to profile you.
4. Who processes it for us
- Amazon Web Services (servers, database, logs) in the United States, under its data-processing terms.
- Apple and Google, for app distribution and in-app purchases, as independent providers under their own terms.
We may disclose information if required by law, to protect rights and safety, or in a sale or reorganization of our business (where the successor is bound by this policy).
5. Your choices and rights
- Erase my data (in the App): deletes everything on your device and asks our server to delete your account identifier and subscription link. A record that a disclaimer was accepted may be kept as described above. Deleted server records can remain in encrypted database backups for up to 35 days before they are gone for good; sign-in tokens and recent workout plans, which are no longer linked to an account, expire within 60 days.
- Uninstall: removes all on-device data. Our server data for that identifier is deleted on the schedule above.
- Requests: depending on where you live (for example California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, other US states, the EU/EEA, the UK), you may have rights to access, correct, delete, or port personal information, to opt out of sale or targeted advertising (we do neither), and to appeal a decision. Because the App does not know who you are, include the account identifier shown in the App on the About card, under LEGAL → PRIVACY, with your request so we can find the records. Contact: support@workoutgears.com. We respond within the time the law requires. You will not be treated differently for exercising a right.
- EU/UK: we process the limited data above to perform our contract with you (providing the App and your subscription), for our legitimate interests in running and securing the service, and to comply with legal obligations. You may complain to your local data-protection authority.
6. Health information
The App does not collect health measurements (such as heart rate, weight, or medical conditions). Your workout history stays on your device. If a future version offers to collect or sync such information, we will ask first and update this policy.
7. Children
The App is intended for adults (18 and over), or for minors using it with the consent and supervision of a parent or guardian. It is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has used the App, contact us and we will delete what we hold.
8. Security
Data in transit is encrypted (HTTPS). On-device data is encrypted with a key held in the phone's secure hardware keystore where the device supports it. Our servers use access controls and least-privilege permissions. No system is perfectly secure.
9. International users
Our servers are in the United States. If you use the App from elsewhere, the limited information in section 2 is processed in the United States.
10. Changes
We will post changes on this page and update the "Last updated" date. If a change materially affects how we handle your information, we will tell you in the App before it takes effect.
11. Contact
Rebel Phoenix Games LLC, 4602 E Oberlin Way, Cave Creek, AZ 85331, USA, support@workoutgears.com.