Privacy Policy

1. Information we collect

• Account details — your username, email, and a securely hashed password.
• Fitness profile — the goal, physique, equipment, experience, lifestyle, and nutrition information you enter so the engine can build your plan. Some of this (e.g. weight, body-fat) may be considered health-related data, which you provide voluntarily.
• Activity — your logged workouts, progress entries, streaks, and a security audit log (sign-ins, password changes, and similar events).

2. How we use your information

We use your information to generate and adapt your workout and nutrition plans, to operate and secure your account, and to show you your own progress. Your plans are produced by a deterministic, rules-based engine — we do not sell your data or use it to train third-party models.

3. How we protect it

Passwords are hashed with bcrypt and never stored in plain text. If you enable two-factor authentication, the secret is encrypted at rest and recovery codes are stored only as hashes. Data is transmitted over encrypted connections (HTTPS). No system is perfectly secure, but we design conservatively and store the minimum we need.

4. Cookies

We use a single essential, http-only session cookie to keep you signed in. It is required for the app to function and is not used for advertising or cross-site tracking. We do not use third-party advertising cookies.

5. Sharing

We do not sell your personal data. We share it only with the infrastructure providers that run the service on our behalf (for example, our database and hosting providers), and only as needed to operate the app — or where required by law.

6. Your rights and controls

• Export — you can download a full copy of your data as JSON from your settings at any time. Credentials are intentionally excluded from the export.
• Deletion — you can request account deletion from your settings. It runs after a 30-day grace period, during which you can cancel and keep your data.
• Access & correction — you can view and update your profile information directly in the app.

7. Data retention

We keep your data for as long as your account is active. When you delete your account and the 30-day grace period passes, your account and associated data are permanently removed.

8. Children

WEDXUI FIT is not intended for children under 16 (or the age of digital consent in your country). We do not knowingly collect data from them.

9. Changes to this policy

We may update this policy as the product evolves. We will revise the “Last updated” date above, and significant changes may be communicated in the app.

10. Contact

Questions about your privacy? Reach us at hello@wedxui.fit. See also our Terms of Service.