Privacy policy

Data you choose to provide

• Account identifiers, including email address and an internal account ID.
• Goals, training experience, equipment, limitations, schedules, and onboarding answers.
• Workouts, exercises, sets, repetitions, load, effort, duration, notes, and progress records.
• Readiness, sleep, soreness, recovery, mood, nutrition, body-measurement, and coaching context.
• Facts you separately consent to let James remember, together with consent and use receipts.

Optional Health Connect data

On Android, TransformFit requests only the Health Connect categories used by visible features: heart rate, resting heart rate, heart-rate variability, sleep, and exercise/workout records. Access is optional. You can deny or revoke it in Android settings and continue with manual logging.

How data is used

Deterministic product engines calculate readiness, training plans, progression, and other numeric outputs. James may use supported outputs and the context you submit to explain a next choice. TransformFit does not let a language model silently change workout numbers.

Storage and service providers

Workout state and preferences may be stored locally on your device. Authenticated account data is processed by Supabase for identity, database, and server functions. Selected plan or coaching context may be sent from a protected server function to OpenRouter for narrative generation. Release requests require zero-data-retention routing; if an eligible provider is unavailable, TransformFit uses a deterministic response instead. OpenRouter still processes request metadata such as token count and latency.

Security and sharing

Network traffic uses HTTPS. Account-owned database tables use row-level access controls. Server credentials are not included in the app. We disclose data to the providers above only to operate the requested feature, or when law requires it. We do not sell or rent personal data.

Retention and deletion

Account data remains while the account is active or until it is deleted. A confirmed account deletion removes the Supabase Auth user and account-owned server records through database cascades. A pseudonymous integrity receipt remains without the plain account ID, workout content, health content, or coaching text. It records one-way hashes, operation type, result integrity, and timestamps so deletion can be proven and duplicate requests cannot be replayed. That receipt currently has no scheduled expiration.

Local data on a device remains under device control and can be removed by clearing app data or uninstalling the app. Provider backups expire under provider-managed schedules and are not used to recreate a deleted account.

Your choices

You can decline notifications and health access, revoke system permissions, review or disable James memory, export account data as JSON and CSV, and request account deletion. Store subscription cancellation is separate from deleting a TransformFit account.

Contact

Use the public TransformFit support page. Do not send passwords or health details in a support message.