Privacy Policy

• On your device only: your workout sessions, sets, weights, personal records, exercise history, body weight, unit preferences, notes, and settings. This data never leaves your phone unless you export it yourself.
• In your account, if you sign in: your name, email address, and profile photo, as provided by Google or Apple Sign In — we never see your Google or Apple password. Your account also holds your subscription status (active, expired) and which catalog phases you've started, so a cancelled subscription doesn't take back a phase you already began.

• Signing in: Google or Apple Sign In, handled by Supabase Auth. We receive your name, email, and profile photo from whichever provider you choose — nothing else.
• Subscriptions and purchases: handled entirely by Apple and Google's own in-app purchase systems and processed through RevenueCat. We never see or store your payment card details — Apple/Google do.
• That you trained, but not what you did: when you finish a workout while signed in, the app records a count of completed workouts and the date of the most recent one. Your coach can see those two figures so they know whether subscribers are training. The workout itself — the exercises, sets, weights and notes — is not sent and stays on your device.
• The phase catalog: unlocked phases and your subscription status are checked against our database each time you sign in or your session refreshes.
• MooreMuscle Accessories (the Store tab): product listings are fetched read-only from Shopify. Tapping a product opens Shopify's own checkout in your device's browser — we don't collect anything from that visit ourselves, though the link includes non-identifying campaign tags (e.g. which screen you tapped from) so the coach can see which parts of the app drive sales. Once you leave the app, Shopify's own privacy policy applies.
• App updates: the app checks for over-the-air updates through Expo's update service (Expo privacy policy).

Account and subscription data is hosted on Supabase in the United States. These requests, like all internet traffic, include your IP address in transient server logs.

• No analytics or behavioral tracking
• No advertising and no ad identifiers
• No selling or renting of personal data
• No access to your contacts, location, or microphone.
• Photos you add stay on your phone. The camera is used to scan a QR code and, if you choose, to photograph your own gym equipment; you can also pick an existing photo from your library. Those images are saved on your device only and are never uploaded to us.

To request deletion of your account: email bihiett@gmail.com from the address associated with your account, with "Delete my account" in the subject line. We'll confirm by email once it's done — normally within a few days.

• Deleted: your name, email, and profile photo on file; your subscription/entitlement records; and which catalog phases you'd started.
• Not affected: your on-device training log — it's stored only on your phone, this request never touches it, and deleting your account doesn't delete the app.
• Retention: deletion happens promptly on request; we don't hold account data any longer than needed to process it, and Apple/Google/RevenueCat retain their own purchase records per their own policies, independent of this request.