Privacy Policy — Aquafit Coach

Last updated: June 15, 2026

Effective date: [DATE OF LAUNCH]

1. Introduction

Aquafit Coach ("Aquafit Coach", "we", "us", or "our") operates the Aquafit Coach mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our App.

By using Aquafit Coach, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide Directly

Account information: name, email address, and password (stored as a bcrypt hash — we never store your plaintext password).
Profile information: any optional profile details you add (e.g. fitness goals, experience level).
Workout logs: exercises completed, duration, calories burned, and timestamps.

2.2 Information Collected Automatically

Device information: device model, operating system version, app version, unique device identifiers.
Usage analytics: which features you use, session duration, crashes (anonymized).
IP address: used only for server logs and security; never linked to your account permanently.

2.3 Information from Apple Health / Google Health Connect (with your permission)

If you explicitly grant permission:

Read: daily steps, active calories burned, heart rate.
Write: pool workouts and calories you complete inside Aquafit Coach.

This data is read directly from your device's Health store and is used only inside the App. We never upload your Health data to our servers unless you explicitly enable cloud sync (currently not offered — all Health data stays on-device).

2.4 Purchase Information

When you purchase a subscription or in-app product:

We receive a receipt from Apple / Google confirming the transaction. This receipt contains a transaction ID and product ID.
We do NOT receive your credit card number, billing address, or other payment details — those are handled entirely by Apple / Google.

3. How We Use Your Information

We use collected information to:

Provide, maintain, and improve the App.
Sync your workouts and progress across your devices.
Process subscriptions and in-app purchases.
Send transactional emails (password resets, receipts, subscription renewal reminders).
Analyze usage patterns to improve features (anonymized).
Detect and prevent fraud, abuse, and unauthorized access.
Comply with legal obligations.

We do NOT:

Sell your personal information to third parties.
Use your data for advertising.
Share your Health data with anyone.

We may share your information with:

Service providers who help us operate the App (e.g. cloud hosting, email delivery). These providers are contractually bound to protect your data and use it only for the purposes we specify.
Apple / Google, when processing in-app purchases.
Third-party AI services for generating video demonstrations (Emergent LLM services). Only the exercise name/description is sent — never your personal information.
Law enforcement or government authorities if required by law, court order, or to protect the safety of our users.

We may also share aggregated, anonymized data (e.g. "our users completed X workouts this month") for marketing, research, or product improvement.

5. Data Retention

Active account: we retain your data as long as your account is active.
After deletion: when you delete your account (Profile → Danger Zone → Delete account inside the app, or by contacting us), we delete your personal data immediately on our servers, except:
Purchase records, retained for 7 years for tax/legal compliance.
Anonymized usage analytics, retained indefinitely.
Inactive accounts: accounts with no activity for 3 years may be deleted after email notification.

6. Your Rights

Depending on your location, you may have the following rights:

Access — request a copy of the data we hold about you.
Correction — request correction of inaccurate data.
Deletion — you can permanently delete your account and all associated data at any time from Profile → Danger Zone → Delete account inside the app. The deletion is immediate and irreversible. You may also request deletion by email.
Portability — request an export of your data in a machine-readable format.
Opt-out of analytics — disable analytics inside Settings.
Withdraw Health data permissions — revoke permissions in iOS Settings → Privacy → Health.

To exercise these rights, email us at privacy@aquafitcoach.app. We respond within 30 days.

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act. You can: - Know what personal information we collect and how it's used. - Request deletion of your personal information. - Opt out of "sale" of personal information (we don't sell any). - Not be discriminated against for exercising these rights.

Under GDPR, you have all the rights listed above plus the right to lodge a complaint with your local data protection authority. Our legal basis for processing: - Contract: providing the App you signed up for. - Consent: Health data syncing, marketing emails. - Legitimate interest: security, fraud prevention, product improvement.

7. Security

We take reasonable measures to protect your information:

Passwords are hashed with bcrypt (industry standard).
Data in transit is encrypted with TLS 1.2+.
Authentication uses signed JWT tokens.
Servers are hosted in secured data centers with access controls.
Health data stays on-device — never transmitted.

No security measure is perfect. If a data breach occurs, we will notify affected users within 72 hours as required by law.

8. Children's Privacy

Aquafit Coach is not intended for children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

9. International Data Transfers

Your information may be transferred to and stored on servers located outside your country of residence. We use standard contractual clauses and other legal mechanisms to protect your data during international transfers.

10. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you via the App or by email at least 30 days before the changes take effect.

The "Last updated" date at the top of this policy indicates when it was last revised.

11. Contact Us

For privacy questions, complaints, or to exercise your rights:

Email: privacy@aquafitcoach.app Postal: [Your Legal Name and Address]

If you're not satisfied with our response, you may contact your local data protection authority.

This privacy policy is provided as a template. Please have it reviewed by a lawyer familiar with your jurisdiction before publishing publicly. The template is designed to satisfy Apple App Store, Google Play Store, GDPR (EU), CCPA (California), and general international privacy law requirements as of 2026.