Privacy Policy

• Account: name, email, and (for password sign-ups) a securely hashed password. Google sign-in shares only your email and name.
• Fitness & health data you enter: age, gender, height, weight and weight history, goals, activity level, injuries or dietary restrictions, workouts, and meals — including photos you take to log food.
• Usage: water and step counts, streaks, and in-app messages between you and your coach or community.
• Coaches/gyms: business details you add to your listing (name, contact, certifications, photos).
• Technical: a login timestamp and count, and error diagnostics (without your personal identifiers) so we can fix crashes.

We do not sell your data, and we don't use it for advertising.

To run the app: build your workout and meal plans, analyze the food you log, track progress and streaks, let your coach see the data you share with them, send account and reminder notifications, and process coach subscription payments. That's it.

We use a small number of trusted service providers, only to run the app:

• Groq — AI analysis of meals and generation of workout/diet plans. Meal text and photos you submit are processed to return nutrition estimates.
• Stripe — payment processing for coach subscriptions (we never see or store full card details).
• Google — optional sign-in.
• MongoDB Atlas — encrypted database hosting.
• Email & error monitoring providers — to send verification/reset emails and to capture crash reports (with personal identifiers stripped).

If you connect with a coach or gym, the fitness data tied to that membership is visible to that coach so they can train you. We may also disclose data if required by law.

Data is stored in an encrypted database and transmitted over HTTPS/TLS. Passwords are hashed, never stored in plain text. Access to production systems is restricted. No system is perfectly secure, but we take reasonable, industry-standard measures to protect your information.

• Access & correction: view and edit your profile and data anytime in the app.
• Deletion: permanently delete your account and all associated data from Help & Support → Delete account. This is immediate and irreversible.
• Leaving a gym: you can leave a coach/gym at any time; your data stays with you and stops being visible to that coach.

Depending on where you live (e.g. the EU/UK under GDPR, or California under CCPA), you may have additional rights to access, port, or restrict processing of your data — email us and we'll help.

We keep your data while your account is active. When you delete your account, your personal data is removed from our primary systems immediately; residual copies in encrypted backups age out on the backup cycle.

MuscleTrace isn't intended for children under 13 (or the minimum age in your country). We don't knowingly collect data from them.

If we make material changes to this policy we'll update the date above and, where appropriate, notify you in the app.

Questions or requests about your data? Email muscletrace@gmail.com.