Privacy Policy

Gravitix ("we", "our", or "us") provides a calisthenics training, workout logging, and skill-progression application. This policy explains what information Gravitix collects, why it is used, who processes it, and the choices available to you.

1. Information we collect

Account and identity information
- A Firebase user identifier for every session, including guest sessions.
- If you connect Google or Apple Sign-In: your email address, display name, provider identifier, and sign-in tokens needed to authenticate you.

Training and fitness information
- Onboarding answers, goals, experience level, preferred training days, selected skills, and assessment results.
- Programmes, routines, workout history, sets, repetitions, hold times, readiness, pain flags, notes, achievements, streaks, and progression decisions.
- Optional profile or physical information you choose to enter.

Media
- Photos or videos you choose for workout media features are processed and saved in app-private storage on your device. Gravitix does not upload that media to our servers unless a feature clearly asks you to upload it. Media you share using your device's share sheet is handled by the destination you select.

Payments and subscriptions
- Apple, Google, and RevenueCat process purchases. We receive product identifiers, purchase and renewal status, transaction identifiers, storefront, entitlement status, and related subscription events. We do not receive or store your full payment-card details.

Usage, diagnostics, and device information
- App screens and features used, onboarding and paywall interactions, workout events, session activity, app version, device and operating-system information, approximate region derived from network information, installation/device identifiers, crashes, diagnostics, and performance information.
- We use Firebase Analytics and Crashlytics for product analytics and reliability, and AppsFlyer for installation attribution and campaign measurement.
- We do not use this information to serve third-party targeted advertising. You can turn analytics and diagnostics off at any time in Gravitix under Settings > Preferences > Analytics & diagnostics.

Communications
- Information you send in support, privacy, or feedback requests.

2. How we use information

We use information to:
- create and secure your account;
- generate and operate personalised calisthenics programmes;
- save, synchronise, and display your training progress;
- process and restore purchases and determine Pro access;
- understand onboarding, feature, and workout behaviour so we can improve the Service;
- diagnose crashes, prevent abuse, and protect the Service;
- send service and workout notifications when you enable them;
- respond to support and privacy requests; and
- comply with legal obligations and enforce our terms.

Where required by law, our legal bases include performing our contract with you, your consent, compliance with legal obligations, and our legitimate interests in operating, securing, and improving Gravitix. You may withdraw consent for optional analytics in the app without losing core functionality.

3. Storage and retention

Training and account data is stored in Google Firebase Authentication and Cloud Firestore. App preferences and selected media may also be stored locally on your device. Data is encrypted in transit; our cloud providers also apply encryption at rest.

We keep account and training data while your account is active. When you delete your account, we delete the Firebase account and associated cloud training data and user-file storage, and clear Gravitix's local account data on that device. Deletion is normally immediate but may take up to 30 days to propagate through backups and processor systems. We may retain:
- purchase, tax, fraud-prevention, and transaction records where required by law or platform rules;
- security logs for a limited period; and
- aggregated or de-identified analytics that no longer identifies you.

4. Service providers and disclosures

We do not sell your personal information. We use these processors to operate Gravitix:
- Google Firebase and Google Cloud: authentication, database, cloud functions, push notifications, analytics, crash reporting, storage, and security;
- RevenueCat: subscription and entitlement management;
- AppsFlyer: installation attribution and product/campaign analytics;
- Apple and Google: sign-in, app distribution, in-app purchases, and subscription billing.

These providers process information under their own terms and privacy commitments. We may also disclose information where legally required, to protect users or the Service, with your direction or consent, or as part of a business transaction subject to appropriate safeguards.

5. Your choices and rights

You can:
- update information available in the app;
- disable analytics and diagnostics in Settings > Preferences;
- control push notifications in device settings;
- restore or manage subscriptions through Apple or Google;
- delete your account in Settings > Account > Delete account; and
- request access, correction, portability, restriction, objection, or deletion by emailing contact@gravitix.app.

The account-deletion page at https://gravitix.app/delete-account provides the same instructions. Deleting your Gravitix account does not cancel an Apple or Google subscription; manage that separately in the applicable store.

Depending on where you live, including the EEA, UK, California, and other jurisdictions, you may have additional privacy rights and the right to complain to your local regulator. We will verify and respond to requests as required by applicable law. We do not discriminate against you for exercising privacy rights.

6. International transfers

Our processors may handle information in the United States and other countries. Where required, we rely on recognised safeguards such as standard contractual clauses and provider data-protection terms.

7. Security

We use reasonable administrative and technical safeguards, including authenticated access, per-user database rules, encrypted network transport, platform purchase validation, and application-integrity checks. No system can be guaranteed completely secure.

8. Children

Gravitix is not directed to children under 13, or the higher minimum age required for independent consent where they live. We do not knowingly collect personal information from such children. Contact us if you believe a child has provided information so we can delete it.

9. Changes

We may update this policy as the Service or law changes. We will update the effective date and provide additional notice where required.

10. Contact

Email: contact@gravitix.app
Website: https://gravitix.app