Masked Fitness ("Masked Fitness", "we", "us") provides private online fitness coaching through the Masked Fitness app and masked.fitness. This policy explains what we collect, why we use it, who processes it, and the choices available to you.
1. Information we collect
• Account details: Firebase user ID, email address, sign-in provider, and any name you choose to provide.
• Coaching information: assessment answers, workout preferences, progress notes, workout history, sleep-tip progress, and chat messages.
• Progress media: photos or videos you choose to upload, including the file path, type, and upload time.
• Purchases: subscription status and entitlement information supplied by Apple, Google Play, or RevenueCat. Payment-card details are handled by the relevant store or payment provider.
• Support information: contact-form details and messages when you choose to contact us.
• Technical information: authentication, security, crash and diagnostic information needed to operate and protect the service.
2. Sensitive fitness information and permissions
Fitness, body-progress, health-related answers, photos, videos, and messages can be sensitive. We use them only to deliver, personalize, secure, and support your coaching experience. The app requests camera, photo-library, and microphone access only when a feature needs it; you can deny a permission, although the related feature may not work.
Masked Fitness is coaching and general wellness software, not a medical device or emergency service. Do not use it for diagnosis or urgent medical care.
3. Why we use information
• To create and secure your account and authenticate you with email, Google, or Apple.
• To create coaching plans, review progress, provide check-ins, answer messages, and operate member features.
• To process subscriptions, check entitlement status, and provide customer support.
• To maintain reliability, prevent abuse, investigate security incidents, and improve the service.
• To meet legal, accounting, or enforcement obligations when required.
4. Service providers and sharing
We do not sell your personal information or use your fitness information for advertising. We share information only with providers needed to run the service or when legally required, including:
• Firebase and Google services for authentication, Firestore data, hosting-related services, and diagnostics.
• Amazon Web Services S3 and CloudFront for the storage and delivery of uploaded progress media.
• RevenueCat and Apple or Google Play for subscription entitlement and store billing operations.
• Our coaching/support operators when needed to provide the service you requested.
5. Retention and account deletion
We keep information while your account is active and for as long as reasonably needed for the purposes above, security, dispute handling, backups, or legal obligations. You can start deletion in the app from Profile → Privacy & account → Delete account, or use the public deletion page.
Open account deletion page
A completed deletion request removes the Firebase Auth account, account-linked Firestore records, and uploaded S3 media that is referenced by those records. Apple, Google Play, RevenueCat, and financial or legally required records may have separate retention rules; cancel store subscriptions separately through the store.
6. Your choices and rights
You can access or update much of your account information in the app, control device permissions, sign out, and request deletion. Depending on where you live, you may also have rights to access, correct, restrict, object to, or receive a copy of personal information. Contact us through the support page to exercise a right or ask a privacy question.
7. Security and international processing
We use account authentication, access controls, encrypted network connections, and managed cloud services intended to protect information. No online service can guarantee absolute security. Our providers may process information in countries other than your own, subject to their safeguards and applicable law.
8. Children and policy changes
Masked Fitness is not directed to children under 13, and we do not knowingly collect their personal information. We may update this policy when the service or law changes. The effective date at the top of this page identifies the current version.
Privacy contact: use the Masked Fitness support page at masked.fitness/contact-me.