1. Introduction
StretchStrong ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web and mobile applications (the "Service").
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, password (encrypted)
- Profile Information: Sport/activity, activity level, fitness goals, date of birth
- Health Information: Previous injuries, current pain areas, flexibility assessments, exercise completion data
- Assessment Data: Responses to injury risk assessments, movement analysis data
- Payment Information: Processed securely through third-party payment processors (we do not store credit card numbers)
2.2 Information Collected Automatically
- Usage Data: Features used, pages viewed, time spent, exercise sessions completed
- Device Information: Device type, operating system, browser type, screen resolution
- Analytics Data: App performance metrics, crash reports, general usage patterns
2.3 Camera Data (Movement Assessment)
When you use the AI Movement Assessment feature, your device's camera captures real-time video for pose analysis. This data is:
- Processed locally on your device whenever possible
- Never stored or transmitted without your explicit consent
- Used solely for providing movement feedback during the assessment
- Immediately discarded after the assessment session ends
3. How We Use Your Information
| Purpose |
Data Used |
| Provide personalized injury prevention protocols |
Profile, assessment, health data |
| Track your progress and streak data |
Exercise completion, session data |
| Generate risk assessments |
Sport, injury history, assessment responses |
| Improve our protocols and service |
Aggregated, anonymized usage data |
| Send notifications and reminders |
Email, notification preferences |
| Process subscriptions |
Payment and account data |
4. Data Storage and Security
We use industry-standard security measures to protect your data:
- Encryption: All data is encrypted in transit (TLS/SSL) and at rest
- Firebase Security: We use Google Firebase with security rules to restrict data access
- Authentication: Passwords are hashed using industry-standard algorithms
- Access Controls: Only authorized personnel can access user data, and only when necessary for support
5. Data Sharing
We do not sell your personal information. We may share data with:
- Service Providers: Firebase (Google) for authentication and database, payment processors for subscriptions
- Analytics: Aggregated, anonymized data for service improvement
- Legal Requirements: When required by law, court order, or to protect our rights
We will never share your health or assessment data with insurance companies, employers, or advertisers.
6. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and associated data
- Portability: Export your data in a standard format
- Opt-out: Unsubscribe from marketing communications at any time
- Withdraw Consent: Revoke previously granted permissions
To exercise these rights, contact us at [email protected] or through your account settings.
7. Data Retention
We retain your data for as long as your account is active. Upon account deletion:
- Personal data is deleted within 30 days
- Anonymized, aggregated data may be retained for analytics
- Backup copies are purged within 90 days
8. Children's Privacy
StretchStrong is designed for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are under 18, please use the Service under the guidance of a parent or guardian. If we learn that we have collected data from a child under 13, we will delete it promptly.
9. Third-Party Services
Our Service integrates with third-party services that have their own privacy policies:
- Google Firebase: Authentication, database, hosting
- Apple HealthKit: Health data sync (optional, user-initiated)
- Google Fit: Activity data sync (optional, user-initiated)
We encourage you to review the privacy policies of these services.
10. International Data Transfers
Your data may be processed in the United States where our servers are located. By using the Service, you consent to the transfer of your data to the United States, which may have different data protection laws than your jurisdiction.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. The "Last updated" date at the top indicates when the policy was last revised.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Email: [email protected]
Website: https://stretchstrong.fit