DPO Fitness Privacy Policy

Version 1.1, effective 2026-10-12.

In short: we collect what the app needs to build and progress your program. We never sell your data, never use it for advertising, and never track you across other apps or websites. DPO Fitness does not use App Tracking Transparency because it does no tracking. Health-adjacent data gets the stricter rules in Health and fitness data.

Data collected

• Account (email or Apple ID): your email address, or, if you sign in with your Apple ID through Sign in with Apple, Apple's user identifier for you plus the name and email you choose to share. If you choose Hide My Email, we receive Apple's private relay address, not your real email. Collected at sign-up.
• Profile, from onboarding: age, weight, equipment, lifting history, goals and pain flags by body region. You type or pick each one.
• Acknowledgment: the version of the disclaimer and pain-stop rule you accepted, and when.
• Session logs and ratings: the exercises you do, sets, reps and loads, changes from the prescription, skipped exercises, Effort and Control ratings, notes, pain events, and the progression proposals you confirm or decline. You enter them during workouts.
• Coach messages: what you write to the coach, its replies and your weekly reviews, collected only if you turn the coach on. We also count your messages and their size (coach_usage), without their content.
• Analytics events: a small set of product events (for example "session logged", "paywall reached", "share card sent"), tied to an opaque id and carrying no health-adjacent data. The app sends them automatically as you use it.
• Feedback: what you send through the in-app feedback control, and, during the beta, feedback you give us directly, with its date and channel.
• Purchases: once a paid tier launches, your subscription status and purchase history, which Apple and RevenueCat report. We never receive card details.
• Technical data: IP address and request details in our servers' logs, the app version, and crash reports and feedback you choose to send through TestFlight.

Purpose

We use this data to:

• create your account and keep you signed in;
• generate your program from your profile and progress it from your ratings;
• hold an exercise when you flag pain;
• run the AI coach, if you turn it on;
• sync your data across reinstalls and devices;
• measure whether the beta works (counts of sessions and events, never health-adjacent fields);
• handle subscriptions after the beta;
• answer you and fix problems.

We do not use your data for advertising or marketing, and we do not sell it.

Health and fitness data

Age, weight, pain flags, ratings, session logs, notes, coach messages and anything derived from them follow our health-data handling rule. In summary, this data is:

• never used for advertising, marketing or data mining, and never sold;
• shared only with the processors named below;
• never stored in iCloud (the app's local database is excluded from iCloud backup; your data is restored from our servers instead);
• sent to the AI coach only after you opt in, and then only the minimum it needs;
• kept out of analytics events, share cards (unless you type it into a card's note), server logs and error reports;
• covered by account deletion and data export.

AI coach and third-party AI

The coach uses a large language model provided by Anthropic. The coach is off until you turn it on. The screen where you turn it on names Anthropic and lists what is sent. You can turn it off in Settings at any time. The app, your program and your logs work without it.

When the coach is on, each request to Anthropic contains your message, the conversation so far, and, for the period the request covers, your exercises and prescriptions, ratings, notes, proposals and pain events. It never contains your email, Apple ID, name, device identifiers or account id. Age and weight are not sent.

Anthropic's API does not retain prompts or outputs by default, except for designated "Covered Models", which require 30-day retention, and content its safety systems flag, which it may keep for up to 2 years. It does not use API data to train models without permission (Anthropic, "API and data retention", https://platform.claude.com/docs/en/manage-claude/api-and-data-retention, read 2026-09-28; Commercial Terms, https://www.anthropic.com/legal/commercial-terms, read 2026-09-28).

Storage location (Supabase region)

Your data is stored in Supabase's us-east-2 (East US, Ohio) region, in the United States. A copy of your own data also lives on your iPhone, in the app's local database, which is excluded from iCloud backup. The coach and other server functions run on Supabase's platform.

Processors

Each processor below provides the same or equal protection of your data as this policy states and as Apple's App Review Guidelines require. Each is bound by its terms or data processing addendum to use the data only to provide its service to us.

We have not chosen an analytics provider yet. We will name it here before the app sends any analytics events.

The app uses no third-party crash-reporting service. If we add one, we will name it here before it receives any data.

Apple provides Sign in with Apple, TestFlight and the App Store under its own privacy policy.

Retention

In-app account deletion

Settings > Delete account removes your sign-in account and every row keyed to it in our database: profile, logs, ratings, notes, proposals, pain events, coach messages, weekly reviews, usage counts and events. The copy on your iPhone is deleted with the app's data. At the processors:

• Supabase deletes the rows now, and backups roll off within the backup window;
• Anthropic holds nothing to delete unless a Covered Model or a safety flag applied (see above);
• RevenueCat gets a request to delete your customer record;
• the analytics provider deletes events keyed to your id, if it keeps them outside Supabase.

Deleting the app without deleting your account keeps your data on our servers so you can sign back in. An active subscription (after the beta) is cancelled in your Apple account settings, not by deleting your DPO Fitness account.

Data export

Settings > Export my data creates a file with your profile, program, every session and rating, proposals and coach messages, and hands it to the iOS share sheet so you can save or send it. It sits next to Delete account.

Your choices and consent

• Coach: turn it on or off in Settings. Turning it off stops all requests to Anthropic.
• Profile: change your equipment and pain flags in Settings at any time.
• Deletion and export: in Settings, as above.
• Anything else, such as a question about your data or a request we cannot handle in the app: email privacy@dpofitness.com. We answer within 30 days.
• Do Not Track: we do not track you across other websites or apps, and no third party collects data about your activity across sites through DPO Fitness, so a Do Not Track signal changes nothing.

Waitlist emails (website)

On dpofitness.com you can join a waitlist by entering your email. We use it only to tell you about the beta and the app's launch. It is stored by Cloudflare, never sold or shared for marketing, and kept until you unsubscribe (every email carries a link) or for 24 months.

Consumer health data (state laws)

This section is also published as its own page, our Consumer Health Data Privacy Policy, under Washington's My Health My Data Act, Nevada's SB 370 and Connecticut's consumer health data law.

• Consumer health data we collect: age, weight, pain flags and pain events, Effort and Control ratings, session logs, notes, coach messages and weekly reviews. We use it to build and progress your program, hold exercises on pain, and run the coach.
• Sources: you, through the app.
• Shared: with Supabase (storage) and, only after your separate opt-in, with Anthropic (coach requests).
• Never: sold, used for advertising, or shared for any other purpose.
• Your rights: confirm whether we hold your data, access it, withdraw consent, delete it, and appeal a refusal. Use the app's export and delete controls or email privacy@dpofitness.com.

Children

DPO Fitness is for adults 18 and older. It is not directed to children, and we do not knowingly collect data from anyone under 18. If we learn we have, we delete the account and its data.

Changes to this policy

We show the new version in the app with its effective date before it applies. If a change affects how we use or share your data, we ask for your consent first. Each version is dated.

Contact

Ari Garboos, privacy@dpofitness.com. Effective 2026-10-12.