Privacy Policy

Overview

PlateUp is a personal workout tracking application for iOS. This policy explains what data we collect, how it is used, and your rights as a user.

---

What We Collect

Data	Purpose
Google or Apple account name and email	Sign-in and account identification
Workout sessions (exercises, sets, reps, weight, dates)	Core app functionality
Profile stats (sex, weight, height, age, body fat %)	Personalised plan and nutrition recommendations
HealthKit data (steps, active calories, resting calories, workout samples)	Health summary display and workout notifications
Subscription status	In-app purchase management via RevenueCat

We do not collect:

• Payment card information (handled entirely by Apple)
• Location data
• Device contacts
• HealthKit data is read-only and never uploaded to our servers

---

How We Use Your Data

• To display your workout history, PRs, and progress charts within the app
• To sync your data across devices when signed in
• To personalise plan and nutrition recommendations based on your profile
• To send local notifications when a workout is detected via Apple Watch
• We do not sell your data
• We do not share your data with third parties (except as described below)
• We do not use your data for advertising

---

Data Storage

Your workout and profile data is stored securely using Google Firebase (Firestore), a cloud database service operated by Google LLC. Data is stored on Google's servers in the United States.

Each user's data is isolated and protected by security rules — no other user or third party can access your workout data.

HealthKit data is accessed locally on your device only and is never transmitted to our servers.

---

Data Retention

Your data is retained for as long as your account is active. If you request account deletion (available in Settings), all associated workout data will be permanently deleted immediately.

---

Your Rights

• Access — all your data is visible within the app
• Export — use the Export CSV button in the History tab
• Delete — use Delete Account in Settings to remove all data immediately
• Correct — you can edit or delete any entry within the app

---

Third-Party Services

• Firebase Authentication (Google LLC) — handles sign-in securely
• Cloud Firestore (Google LLC) — stores workout and profile data
• RevenueCat — manages in-app subscription status. No payment data is shared; all billing is handled by Apple.
• Cloudflare Workers AI — powers the AI coach feature. Messages sent to the coach are processed by Cloudflare's infrastructure.
• Apple HealthKit — read-only access to steps, calories, and workout samples. Data stays on device.

Firebase privacy policy: firebase.google.com/support/privacy

RevenueCat privacy policy: revenuecat.com/privacy

---

Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect data from children under 13.

---

Changes to This Policy

We may update this policy as new features are added. The "Last updated" date at the top of this document will always reflect the most recent revision.

---

Contact

If you have any privacy questions or wish to request data deletion, contact us at:
plateuptraining@gmail.com