Last updated: December 2024
1. Introduction
Welcome to FitGenius ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and share information about you when you use our fitness training application available at fitgenious.net (the "Service").
2. Information We Collect
Information You Provide to Us
When you create an account through Google OAuth, we collect:
- Name: Your first and last name as provided by your Google account
- Email Address: Your email address associated with your Google account
- Google User ID: A unique identifier from Google to maintain your session
Information Automatically Collected
When you use our Service, we automatically collect:
- Usage Data: Pages visited, features used, and time spent on the application
- Device Information: Browser type, operating system, and device type
- IP Address: For security and analytics purposes
- Cookies: Session cookies to maintain your authentication status
3. How We Use Your Information
We use the information we collect to:
- Provide and maintain our Service
- Authenticate your identity and manage your account
- Personalize your fitness experience
- Communicate with you about service updates
- Improve our Service and develop new features
- Ensure security and prevent fraud
- Comply with legal obligations
4. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:
- Service Providers: With AWS for hosting and Google for authentication services
- Legal Requirements: If required by law or to protect our rights
- Business Transfers: In connection with a merger, sale, or acquisition
- With Your Consent: When you explicitly agree to sharing
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- HTTPS encryption for all data transmissions
- Secure authentication through Google OAuth 2.0
- Regular security assessments and updates
- Limited access to personal data on a need-to-know basis
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time by contacting us.
7. Your Rights (GDPR Compliance)
If you are a resident of the European Economic Area (EEA), you have certain data protection rights:
- Access: Request a copy of your personal information
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data
- Portability: Request transfer of your data to another service
- Objection: Object to processing of your data
- Restriction: Request restriction of processing
To exercise these rights, please contact us at egtzori@gmail.com
8. California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to:
- Know what personal information is collected
- Know whether personal information is sold or disclosed
- Say no to the sale of personal information
- Access your personal information
- Request deletion of your personal information
- Not be discriminated against for exercising privacy rights
9. Children's Privacy
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
11. Third-Party Links
Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
13. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Email: egtzori@gmail.com
- Website: https://fitgenious.net
- Data Protection Officer: egtzori@gmail.com
14. Legal Basis for Processing (GDPR)
We process your personal information under the following legal bases:
- Consent: When you sign up through Google OAuth
- Contract: To provide the services you requested
- Legitimate Interests: To improve our services and ensure security
- Legal Obligation: To comply with applicable laws