Workout Crew Privacy Policy

Last Updated: January 21, 2025

We are committed to protecting your privacy. This policy explains how Workout Crew ("App," "we," "us," or "our") collects, uses, and discloses your information.

1. INFORMATION WE COLLECT

We collect information that identifies, relates to, describes, or is capable of being associated with you ("Personal Data").

• Account Data: Email address, display name, and authentication method (Google/Apple ID).
• Content Data: Workout check-in photos, weekly goals, and accountability conditions/stakes.
• Usage Data: Progress tracking data (streaks, check-in history), device identifiers, IP address, and push notification tokens.

2. HOW WE USE YOUR DATA (LEGAL BASIS)

We use your data for the following purposes:

• (Contractual Necessity) To provide and maintain the core accountability service with your partner.
• (Legitimate Interest) To monitor app usage, improve features, and prevent fraudulent activity.
• (Consent) To send you push notifications (you may opt-out).

3. SHARING OF YOUR INFORMATION

We do not sell your Personal Data. We share it only with:

• Your Accountability Partner: Your name, weekly goal, content data (photos), and progress are visible to your partner.
• Service Providers: Third parties like Firebase (hosting/database), Expo (notifications), and Apple/Google (sign-in services) to operate and maintain the App. These parties are contractually obligated to protect your data.
• Legal Compliance: If required by law, subpoena, or a government request.

4. YOUR DATA PROTECTION RIGHTS

You have the right to request access to, correction of, or deletion of your Personal Data.

• Deletion: You can permanently delete your account and all associated data in the Profile screen. We process deletion requests within 30 days.
• Opt-Out: You can disable push notifications at any time in the App's settings.

Specific Rights (GDPR/CCPA)

• EU/UK Users (GDPR): You have the right to data portability, restriction of processing, and to lodge a complaint with a supervisory authority.
• California Users (CCPA): You have the right to know what data we collect, request deletion, and opt-out of data sales (note: we do not sell your data).

5. DATA RETENTION AND SECURITY

We retain your Personal Data for as long as your account is active or as needed to provide you with the App. Upon account deletion, all data is permanently removed within 30 days. We use industry-standard encryption and security measures to protect your data.

6. INTERNATIONAL TRANSFERS

Your data may be stored and processed in the United States or any other country where our service providers operate. We use recognized legal transfer mechanisms (e.g., Standard Contractual Clauses) for transfers of EU/UK data.

7. CONTACT US

For any privacy-related questions or to submit a data subject request, please email our Data Protection Contact at:
contact.iworkedout@gmail.com

We will respond to GDPR requests within 30 days and CCPA requests within 45 days.