Privacy Policy

1. Who we are

Fortis is a workout tracking application operated as an independent product. When this policy says "we", "us", or "Fortis", it refers to the Fortis service and its operator.

For any privacy questions, contact us at: privacy@gymtrack.co

2. What data we collect

We collect the minimum data necessary to provide the service:

• Account data: Your email address and encrypted password when you sign up.
• Workout data: The exercises, sets, weights, reps, and notes you log in the app.
• Body weight logs: Weight entries you choose to record.
• Goals and achievements: Weight goals you set and achievements you unlock.
• Scheduled workouts and rest days: Calendar entries you create.
• Push notification tokens: If you enable push notifications, we store a device token to send you reminders.
• Subscription status: Whether you have an active subscription and when your trial ends.

We do not collect your location, contacts, camera, or any other device data.

3. How we use your data

Your data is used solely to provide and improve the Fortis service:

• To display your workout history, progress charts, and insights
• To detect personal records and award achievements
• To send streak reminder push notifications (only if you opt in)
• To manage your subscription and trial period
• To provide customer support when you contact us

We do not use your data for advertising. We do not sell your data to third parties.

4. Data storage and security

Your data is stored securely using Supabase, a hosted database service. Data is encrypted in transit (HTTPS/TLS) and at rest. Row-level security ensures users can only access their own data.

Payment processing is handled by Stripe. Fortis never sees or stores your full credit card details — Stripe handles all payment data under their own security standards.

5. Data sharing

We share data only with the third-party services required to operate Fortis:

• Supabase — database and authentication
• Stripe — payment processing
• Vercel — hosting and serverless functions

These services are bound by their own privacy policies and data processing agreements. We do not share your data with any other third parties.

6. Your rights

You have the right to:

• Access your data — everything you've logged is visible in the app
• Export your data — contact us and we'll provide a copy
• Correct your data — edit or delete any entry in the app
• Delete your account — go to Insights → Account → Delete account. This permanently deletes all your data immediately.

7. Data retention

We retain your data for as long as your account is active. When you delete your account, all associated data (workouts, goals, body weight entries, push tokens, and profile data) is permanently and immediately deleted from our systems.

8. Children's privacy

Fortis is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with their data, please contact us at privacy@gymtrack.co.

9. Changes to this policy

We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. For significant changes, we'll notify you via email or in-app notification.

10. Contact

For any privacy-related questions or requests, contact us at privacy@gymtrack.co.