Privacy Policy.

1. Introduction

At Eat & Lift, we respect the integrity of your personal data. This policy outlines how our platform collects, uses, processes, stores, retains, and protects your information when you engage with our application and web interface. This policy also describes your rights regarding your data, including how to request deletion.

2. Information We Collect

To facilitate metabolic tracking and workout logging, we gather the following data:

• Identity Data: Basic profile credentials (e.g., name, email address) to secure your account.
• Physical Profile: Self-reported physical dimensions (height, weight, age) and fitness goals.
• Activity Telemetry: Workout logs, load metrics, volume configuration, and set history.
• Metabolic Logs: Caloric inputs, macronutrient structures, and meal logging details.
• Hardware Sync (Health Connect / HealthKit): With your explicit permission, health and wellness data (e.g., sleep duration, step count) synced from native device integrations like Android Health Connect or Apple HealthKit. This data is read only when you actively grant permission and is used solely to enhance your in-app experience.

3. How We Use Your Information

Your parameters are processed to generate personal optimization algorithms. We utilize your data to:

• Recalculate daily metabolic output and caloric guidelines.
• Chart performance history, volume progression, and mechanical load charts.
• Optimize backend service performance, troubleshoot issues, and prevent security anomalies.

Health Connect Limited Use Disclosure: The use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements. Specifically, data obtained from Health Connect is used only to provide or improve health-related features visible to the user, is not used for advertising or marketing purposes, is not sold or shared with third parties (except as necessary for app functionality with user consent or for legal compliance), and is handled in accordance with all applicable Health Connect data policies.

4. How We Share Your Information

We do not sell or monetize your personal data or physical logging history. Your data remains secure within our database architecture, except in the following limited circumstances:

• To comply with legal mandates, regulatory demands, or court orders.
• With verified third-party infrastructure partners who process database transactions on our behalf under strict confidentiality agreements.

5. Your Privacy Rights & Data Deletion

You retain absolute control over your profile. At any time, you can access your profile settings in-app or visit our website to:

• Access and export your complete performance and nutrition history.
• Request correction of any inaccurate personal data by contacting us.
• Request deletion of your profile directly within the app settings or via our Data Deletion Request Page. Upon triggering account deletion, all personal parameters and tracking metrics are permanently purged from our active databases within 30 days. See Section 6 for full data retention details.

6. Data Retention Policy

We retain your personal data only for as long as is reasonably necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, and enforce our agreements. Below is a detailed breakdown of our retention practices for each category of data:

• Identity Data (name, email, account credentials): Retained for as long as your account remains active. Upon account deletion, this data is permanently erased from our active databases within 30 days.
• Physical Profile (height, weight, age, fitness goals): Retained for as long as your account remains active. This data is permanently deleted within 30 days of account deletion.
• Activity Telemetry (workout logs, load metrics, set history): Retained for as long as your account remains active to provide historical performance analytics. Permanently deleted within 30 days of account deletion.
• Metabolic Logs (caloric inputs, macronutrient data, meal logs): Retained for as long as your account remains active. Permanently deleted within 30 days of account deletion.
• Health Connect / HealthKit Data (sleep, steps, health metrics): Data synced from Health Connect or HealthKit is used solely for in-app display and calculations during your active session. We do not store Health Connect or HealthKit data on our servers beyond what is necessary for your active session. Upon account deletion, any cached Health Connect or HealthKit data is immediately purged.
• Usage Analytics and Logs: Anonymized, aggregated usage analytics (e.g., app performance metrics, crash logs) may be retained for up to 12 months for service improvement purposes. These logs do not contain personally identifiable information.

Backup and Archive Data

Our systems perform periodic encrypted backups for disaster recovery purposes. When you delete your account, your data is purged from all active databases within 30 days. Any residual data that may exist in encrypted backup archives is automatically overwritten within 90 days as backup cycles rotate. Backup data is encrypted at rest and is not accessible for any purpose other than disaster recovery.

Inactive Accounts

If your account remains inactive (no login or app usage) for a continuous period of 24 months, we may send you a notification requesting you to confirm whether you wish to keep your account. If we receive no response within 30 days of the notification, we reserve the right to delete your account and all associated data in accordance with the deletion timelines described above.

Legal Retention Obligations

Notwithstanding the above, we may retain certain limited data (such as transaction records or communications related to disputes) for longer periods where required by applicable law, regulation, or legal proceedings. Such data will be securely stored and accessed only for the specific legal purpose and will be deleted once the legal obligation has been fulfilled.

7. Data Security

All payload transfers are encrypted via TLS protocols. Data storage uses industry-standard encryption, hashing, and security systems to prevent unauthorized access, disclosure, or destruction of your personal information. We implement access controls to ensure that only authorized personnel can access personal data, and only for legitimate business purposes.

8. Children's Privacy

Our services are not intended for or directed at children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to securely delete such information promptly.

9. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by updating the "Last updated" date at the top of this policy and, where required, through in-app notifications.

10. Contact Us

For any queries, concerns, or requests regarding this privacy policy or your personal data, contact us at: support@eatliftclub.com