Privacy Policy
Who we are
Intense Fit is a training app for high-intensity strength training. This policy covers the web app, the installable PWA and the current Android app. Questions and privacy requests: meunierfilipe@gmail.com.
Account and authentication
To create an account we store your email address, an authentication identity, role grants and basic activity timestamps (signup, last active) that drive reminders. Sign-in is available with email and password or with Google. Signing in with Google gives us your email address and account identifier only.
Training, fitness and readiness data
Everything you log: exercises, weights, reps, time under load, session history, readiness check-ins, goals, progress, generated insights and recommendations. If you choose to import or connect them, we also store health metrics such as heart rate, resting heart rate, HRV, sleep, weight and body composition. This is the core of the product and is kept while your account exists.
Camera, microphone and on-device pose analysis
Form analysis is optional and off until you turn it on. During a workout, pose frames are analysed on your device to estimate cadence, range of motion and rep count; those pose-analysis frames are not sent to our servers. Keeping recordings, microphone audio and cloud sync are three separate opt-ins, all off for new accounts. When you enable them, a clip per set is stored on your device and, with sync on, privately in your account. You can see the live state of each switch and delete every clip from Profile > Camera & recordings, and from Profile > Privacy & data.
Voice weight entry (optional)
Voice weight entry is optional and only runs while you press and hold the voice control during a workout. When you release it, a short WAV clip of what you said is sent, over your authenticated session, to Intense Fit's own transcription endpoint, which forwards it to OpenAI's gpt-4o-mini-transcribe model through Lovable's AI gateway. Only the returned text is used, to fill in the weight or machine field; the response is marked no-store and the clip is never added to your Intense Fit clip library or shown in your recordings. We describe this as processor handling rather than claiming those processors keep nothing: their own retention is governed by their terms, not by us.
Photos and visual uploads
The separate machine-scanner feature sends the frames you capture through Lovable's AI gateway to the configured Google vision model so it can identify equipment; Intense Fit saves the resulting machine details, not the source frame. When you send feedback, you can attach a screenshot of the current app screen; the floating feedback form has this option switched on visibly and you can switch it off before sending. A profile image URL supplied by Google sign-in may also be used as your avatar. These paths are optional and are not part of workout pose analysis.
Live coaching
If you connect with a coach, 1:1 live sessions use LiveKit to carry real-time audio and video between the two participants. Session recording is disabled in the current release, so no call media is stored. If you switch on "Share form tracking", a throttled stream of derived numbers (cadence, range of motion, rep count, form flags) is sent to your coach over the same connection; raw video landmarks are not transmitted. The toggle is off by default and can be turned off mid-call.
Coaching, people and invitations
Coach and training-partner connections, invitations you send or receive, in-app messages and notifications, coach notes and assigned programs, and coach credentials you submit for review. These are visible to the other participant, and credentials are visible to our reviewers.
Gyms and equipment
Gyms you join or create, your personal gym notes, equipment entries, scans and condition reports. Equipment and gym records are shared with other members of that gym so the community graph stays useful; your personal notes are not.
Google Calendar (optional)
If you connect Google Calendar we store the connected Google account email and OAuth access and refresh tokens, and use them to read your events and to create or delete Intense Fit workout events. We request no other Google data. You can disconnect at any time; deleting your account revokes the grant with Google and deletes the tokens.
Push notifications (optional)
Push is optional and never prompts on its own; you switch it on from Settings. If you allow notifications we store the browser push endpoint, its encryption keys, your user agent and your reminder preferences, solely to deliver the reminders you enabled. Delivery runs through OneSignal, which as our push processor assigns and receives a push subscription / device identifier and the technical browser and device information needed to route a message to that install. No advertising identifier is involved. Turning notifications off removes the subscription linkage held by the app.
Transactional email (sign-in, password reset, account notices) is sent to your account address. The weekly journal and product updates are opt-in and every message carries a one-click unsubscribe. We keep delivery logs, unsubscribe tokens and suppression records for bounced or unsubscribed addresses; suppression records outlive account deletion, because their whole purpose is to stop us mailing that address again.
Payments
Pro subscriptions are processed by Stripe. We never see or store your card number. We store subscription status and the Stripe customer/subscription identifiers so we know what you are entitled to.
Analytics and diagnostics
We use the analytics built into our hosting platform (Lovable). It reports page views, referral source, device type and country-level approximate location derived from IP. Server error logs may record an account identifier, request path and technical diagnostic details for a limited period. There are no advertising trackers, no session-replay tracker and no cross-site profiling. We do not sell personal data.
Processors we use
Supabase (managed Postgres, authentication and file storage), Lovable (application hosting, built-in analytics and AI gateway), Resend (email delivery), Stripe (payments), LiveKit (live coaching transport), OneSignal (push notification delivery, only when you enable notifications), OpenAI through Lovable's AI gateway (only for the voice transcription you invoke), and Google (Google sign-in, Calendar, and the current language/vision model used only for AI features you invoke). Each receives only the data needed for its function. We do not make blanket claims about where every one of these processors stores data; our primary database and storage are provisioned in the EU region.
Legal bases
Performance of the contract for account, training and payment data; consent for optional camera, recordings, calendar, push and marketing email, withdrawable at any time; legitimate interests for security, abuse prevention and basic product analytics; legal obligation for accounting records.
Retention
Account and training data are kept while the account exists. Recordings are kept until you delete them or delete the account. Delivery logs and suppression records are kept for deliverability and legal reasons. Encrypted infrastructure backups rotate out within 30 days. Aggregate, non-identifying counts are kept indefinitely.
Security
Traffic is encrypted with TLS. The database and file storage are encrypted at rest. Row-level security policies scope every table to its owner, and privileged operations run only server-side after the request is authenticated. Access to production data is restricted to maintainers.
Your rights and controls
You can export everything as a JSON file, delete device or synced videos, disconnect Calendar, turn recordings, microphone, sync and notifications on or off individually, unsubscribe from email, and delete your account and all cloud data — all from Profile > Privacy & data and Profile > Camera & recordings. You also have the right to access, rectify, restrict, object and complain to your local data protection authority. If you can no longer sign in, see the Delete your account page at /account-deletion or email meunierfilipe@gmail.com.
Not medical care
Intense Fit provides training and recovery guidance, not medical advice, diagnosis or treatment. It is not a medical device. Talk to a qualified clinician before starting a training programme, and stop and seek help if something hurts.
Children
Intense Fit is not intended for users under 18 and we do not knowingly collect data from them.
Changes and contact
We will update this page and its date when the product changes. Questions, deletion or export requests: meunierfilipe@gmail.com.