Privacy Policy
Who we are
Intense Fit is a training app for high-intensity strength training. This policy covers the web app, the installable PWA and the Android app (1.0.11). Questions and privacy requests: meunierfilipe@gmail.com.
Account and authentication
To create an account we store your email address, an authentication identity, role grants and basic activity timestamps (signup, last active) that drive reminders. Sign-in is available with email and password or with Google. Signing in with Google gives us your email address and account identifier only.
Training, fitness and readiness data
Everything you log: exercises, weights, reps, time under load, session history, readiness check-ins, goals, progress, generated insights and recommendations. If you choose to import or connect them, we also store health metrics such as heart rate, resting heart rate, HRV, sleep, weight and body composition. This is the core of the product and is kept while your account exists.
Camera, microphone and on-device pose analysis
Form analysis is optional and off until you turn it on. When the camera is on, video frames are analysed on your device to estimate cadence, range of motion and rep count; frames are not streamed to us for analysis. Keeping recordings, microphone audio and cloud sync are three separate opt-ins, all off for new accounts. When you enable them, a clip per set is stored on your device and, with sync on, privately in your account. You can see the live state of each switch and delete every clip from Profile > Camera & recordings, and from Profile > Privacy & data.
Live coaching
If you connect with a coach, 1:1 live sessions use LiveKit to carry real-time audio and video between the two participants. Session recording is disabled in the current release, so no call media is stored. If you switch on "Share form tracking", a throttled stream of derived numbers (cadence, range of motion, rep count, form flags) is sent to your coach over the same connection; raw video landmarks are not transmitted. The toggle is off by default and can be turned off mid-call.
Coaching, people and invitations
Coach and training-partner connections, invitations you send or receive, in-app messages and notifications, coach notes and assigned programs, and coach credentials you submit for review. These are visible to the other participant, and credentials are visible to our reviewers.
Gyms and equipment
Gyms you join or create, your personal gym notes, equipment entries, scans and condition reports. Equipment and gym records are shared with other members of that gym so the community graph stays useful; your personal notes are not.
Google Calendar (optional)
If you connect Google Calendar we store the connected Google account email and OAuth access and refresh tokens, and use them to read your events and to create or delete Intense Fit workout events. We request no other Google data. You can disconnect at any time; deleting your account revokes the grant with Google and deletes the tokens.
Push notifications (optional)
If you allow notifications we store the browser push endpoint, its encryption keys, your user agent and your reminder preferences, solely to deliver the reminders you enabled. Turning notifications off removes the subscription.
Transactional email (sign-in, password reset, account notices) is sent to your account address. The weekly journal and product updates are opt-in and every message carries a one-click unsubscribe. We keep delivery logs, unsubscribe tokens and suppression records for bounced or unsubscribed addresses; suppression records outlive account deletion, because their whole purpose is to stop us mailing that address again.
Payments
Pro subscriptions are processed by Stripe. We never see or store your card number. We store subscription status and the Stripe customer/subscription identifiers so we know what you are entitled to.
Analytics and diagnostics
We use the analytics built into our hosting platform (Lovable). It reports page views, referral source, device type and country-level approximate location derived from IP. There are no advertising trackers and no cross-site profiling. We do not sell personal data.
Processors we use
Supabase (managed Postgres, authentication and file storage), Lovable (application hosting and analytics), Resend (email delivery), Stripe (payments), LiveKit (live coaching transport), Google (only if you sign in with Google or connect Calendar). Each receives only the data needed for its function. We do not make blanket claims about where every one of these processors stores data; our primary database and storage are provisioned in the EU region.
Legal bases
Performance of the contract for account, training and payment data; consent for optional camera, recordings, calendar, push and marketing email, withdrawable at any time; legitimate interests for security, abuse prevention and basic product analytics; legal obligation for accounting records.
Retention
Account and training data are kept while the account exists. Recordings are kept until you delete them or delete the account. Delivery logs and suppression records are kept for deliverability and legal reasons. Encrypted infrastructure backups rotate out within 30 days. Aggregate, non-identifying counts are kept indefinitely.
Security
Traffic is encrypted with TLS. The database and file storage are encrypted at rest. Row-level security policies scope every table to its owner, and privileged operations run only server-side after the request is authenticated. Access to production data is restricted to maintainers.
Your rights and controls
You can export everything as a JSON file, delete device or synced videos, disconnect Calendar, turn recordings, microphone, sync and notifications on or off individually, unsubscribe from email, and delete your account and all cloud data — all from Profile > Privacy & data and Profile > Camera & recordings. You also have the right to access, rectify, restrict, object and complain to your local data protection authority. If you can no longer sign in, see the Delete your account page at /account-deletion or email meunierfilipe@gmail.com.
Not medical care
Intense Fit provides training and recovery guidance, not medical advice, diagnosis or treatment. It is not a medical device. Talk to a qualified clinician before starting a training programme, and stop and seek help if something hurts.
Children
Intense Fit is not intended for users under 18 and we do not knowingly collect data from them.
Changes and contact
We will update this page and its date when the product changes. Questions, deletion or export requests: meunierfilipe@gmail.com.