Data Safety
Summary
Intense Fit collects only what is needed to run your training, recovery and coaching features. We do not sell data and we run no advertising trackers. Most collection categories below are optional and off until you switch them on. You can export or delete everything from Profile > Privacy & data.
Location — approximate (collected, required for basic hosting analytics)
Country-level approximate location derived from IP address by our hosting platform's built-in analytics. Purpose: analytics. Precise location is never collected, and no GPS permission is requested.
Personal info — name (collected, optional)
An optional display name, and a coach display name if you publish a coach profile. Purpose: app functionality, account management. Coach display names are visible to other users by design.
Personal info — email address (collected, required)
Required to create an account. Purpose: account management, app functionality, transactional email, and — only if you opt in — the weekly journal.
Personal info — user IDs (collected, required)
An account identifier, and a Stripe customer identifier if you subscribe. Purpose: app functionality, account management.
Personal info — other (collected, optional)
Coach credential details you submit for review (credential type, issuer, number, jurisdiction, expiry and supporting evidence), onboarding questionnaire answers, feedback and testimonials. Purpose: app functionality and, for credentials, fraud prevention and safety.
Financial info — purchase history (collected, optional)
If you subscribe, we retain subscription status and Stripe customer/subscription identifiers. Card numbers are handled by Stripe and are never seen or stored by Intense Fit. Purpose: app functionality.
Health and fitness — fitness info (collected, required for the core product)
Workout logs you create: exercises, weights, reps, time under load, session dates, readiness check-ins, goals and derived progress. Optional additions: heart rate, resting heart rate, HRV, sleep, weight and body composition, only if you import or connect them. Purpose: app functionality, personalisation.
Messages — other in-app messages (collected, optional)
Coach chat messages, coach notes, invitation messages and in-app notifications. Purpose: app functionality. Visible to the other participant in the conversation.
Photos and videos — videos (collected, optional, off by default)
Set recordings. New accounts start with recording and cloud sync switched off. When you enable recording, clips are stored on your device; when you also enable sync, they are stored privately in your account. Purpose: app functionality. Not visible to other users. Deletable at any time from Profile > Camera & recordings.
Audio — voice or sound recordings (collected, optional, off by default)
Microphone audio inside set recordings, and live coaching call audio. The microphone switch is off for new accounts. Live coaching audio is transported in real time to the other participant; call recording is disabled in this release, so no call media is stored. Purpose: app functionality.
Calendar — calendar events (collected, optional)
Only if you connect Google Calendar. We store the connected Google account email and OAuth tokens, and read your events and create or delete Intense Fit workout events. Purpose: app functionality. Disconnecting, or deleting your account, revokes the grant and deletes the tokens.
App activity — app interactions (collected, required)
Screen and funnel events needed to run and improve the product, plus last-active timestamps used for reminders. Events are recorded without advertising identifiers. Purpose: analytics, app functionality.
App info and performance — crash logs and diagnostics
We do not operate a third-party crash reporting SDK in this release. Server-side error logs may incidentally record an account identifier and the failing request path for a limited period. Purpose: app functionality and stability.
Device or other IDs (collected, required)
An authenticated session token in browser storage, and — if you enable notifications — a push endpoint identifier with its encryption keys and user agent string. No advertising ID, no device fingerprinting. Purpose: app functionality.
Contacts, SMS, files, browsing history, precise location, installed apps
Not collected.
Data sharing
We do not sell data and we do not share data for advertising. Data is transferred to the vendors that run the service on our behalf under contract, and only for that purpose: Supabase (database, authentication, file storage), Lovable (hosting and built-in analytics), Resend (email delivery), Stripe (payments), LiveKit (live coaching transport), Google (only when you sign in with Google or connect Calendar). Where you start a live coaching session or accept a coach, the audio, video and derived form signals you choose to share are transferred to that person at your initiation. We describe these as service-provider processing and user-initiated transfers rather than claiming nothing leaves the app.
Data is encrypted in transit
Yes. All traffic between the app and our backend uses HTTPS / TLS.
Data is encrypted at rest
Yes. The managed Postgres database and the file storage buckets are encrypted at rest by the provider.
Users can request data deletion
Yes. Profile > Privacy & data > Delete account, or https://intensefit.co/account-deletion, or email meunierfilipe@gmail.com. Personal data is removed within 30 days; backups purge on rotation. Shared gym, equipment and organisation records are kept with your authorship reference removed, and email suppression records are kept so we can never mail the address again.
Users can request data export
Yes. Profile > Privacy & data > Export my data returns an immediate JSON download, or email meunierfilipe@gmail.com. OAuth tokens, push keys and passwords are deliberately excluded from the export.
Independent security review
The app follows the OWASP Mobile Top 10 checklist. No third-party penetration test has been published yet.
Children and families
Intense Fit is not intended for users under 18 and is not part of the Designed for Families programme.
Android wrapper permissions
The Play wrapper does not request native CAMERA, RECORD_AUDIO, POST_NOTIFICATIONS, location or Health Connect permissions. Camera and microphone access, when you enable form analysis, recording or a live call, is granted through the website permission prompt and can be declined without losing workout logging.
Not medical care
Training and recovery guidance in Intense Fit is not medical advice, diagnosis or treatment, and the app is not a medical device.
Contact
Privacy questions, deletion requests, data exports: meunierfilipe@gmail.com.