1. Introduction
Welcome to Kickbox Bootcamp ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you understand how we collect, use, and safeguard your personal information.
This Privacy Policy applies to the Kickbox Bootcamp mobile application (the "App") available on Google Play Store.
2. Information We Collect
We collect the following types of information:
Account Information:
- Email address (for account creation and login)
- Display name (optional)
- Authentication tokens (for secure login)
Fitness Data:
- Workout history (exercises completed, duration, dates)
- Workout preferences and settings
- Saved favorite workouts
- Exercise customizations (rep counts, frequency preferences)
Device Information:
- Device type and model
- Operating system version
- App version
Payment Information:
- Subscription status and plan type
- Purchase history (managed by Google Play)
Note: We do not directly collect or store credit card numbers or payment details. All payment processing is handled securely by Google Play.
3. How We Use Your Information
We use your information to:
- Provide and maintain the App's functionality
- Sync your workout data across devices
- Process and manage your subscription
- Send important service updates and notifications
- Improve our services based on usage patterns
- Respond to your support requests
4. Data Storage and Security
Your data is stored securely using industry-standard practices:
- Cloud Storage: We use Supabase, a secure backend platform with PostgreSQL database, hosted on encrypted servers.
- Encryption: All data is encrypted in transit using TLS/SSL and at rest using AES-256 encryption.
- Access Control: Row-level security ensures you can only access your own data.
- Local Storage: Sensitive data stored on your device uses encrypted storage.
5. Data Sharing
We do not sell your personal information. We may share data with:
- Supabase: Our backend infrastructure provider that hosts your data securely.
- Google Play: For subscription management and billing.
- Legal Requirements: When required by law or to protect our rights.
6. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correct: Update or correct inaccurate data
- Delete: Request deletion of your account and all associated data
- Export: Download your workout history in JSON format
- Opt-out: Unsubscribe from marketing communications
7. Data Retention
We retain your data for as long as your account is active. After account deletion:
- Your personal data is deleted within 30 days
- Anonymized usage statistics may be retained for analytics
- Backup copies are purged within 90 days
8. Children's Privacy
Kickbox Bootcamp is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child, please contact us immediately.
9. Third-Party Services
Our App uses the following third-party services:
- Supabase: Authentication and database (Privacy Policy)
- Google Play Services: App distribution and billing (Privacy Policy)
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the new policy in the App
- Updating the "Last Updated" date
- Sending an email notification for major changes
11. Contact Us
If you have questions about this Privacy Policy or your data, contact us at:
12. California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information (we do not sell data)
- Right to non-discrimination for exercising your rights
13. European Users (GDPR)
If you are in the European Economic Area, you have additional rights under GDPR:
- Right to data portability
- Right to restrict processing
- Right to object to processing
- Right to lodge a complaint with a supervisory authority
Our legal basis for processing your data is your consent (for account creation) and contract performance (for providing the service).