Privacy Policy

Effective Date: October 17, 2026 | Last Updated: October 17, 2026

At Workout Pro ("we", "our", or "us"), your privacy, personal information, and health data security are our highest priority. This Privacy Policy details how we collect, utilize, process, and safeguard your data when you use the Workout Pro mobile application, backend API, and associated web services.

1. Information We Collect

We collect information to provide personalized fitness tracking, AI computer vision, and workout analytics:

Account Information: Name, email address, password hash, age/date of birth, gender, and profile preferences.
Physical & Health Metrics: Body weight, height, target fitness goals (e.g. lose weight, muscle gain), resting heart rate, active pulse taps, and estimated daily calorie burn.
Nutrition & Hydration Logs: Logged meal choices, calorie/macro breakdowns, daily water intake logs, and hydration reminder settings.
Workout Activity: Completed exercise sessions, sets, repetitions, weights lifted, and routine favorites.

2. Device Permissions & Sensitive Data

        Important Permissions Disclosure (Google Play & App Store Compliance):
        Camera Permission: Required solely to allow users to scan gym equipment (to identify machinery using AI) and capture progress photos. We do not access your camera in the background or when the app is closed.
Photos & Storage Permission: Required to allow you to select previous progress pictures from your gallery for AI body composition analysis and timeline comparison.
Notifications: Used strictly to deliver workout reminders, daily hydration check-ins, and vital coach notifications that you configure.

      

3. Third-Party Services & Analytics

We work with trusted third-party cloud infrastructure providers:

Google Analytics & Firebase: We utilize Firebase Cloud Messaging (FCM) to deliver push notifications, and Google Analytics for Firebase to analyze aggregated app stability, user engagement, and crash diagnostics.
OpenAI API: Images submitted for Gym Equipment Vision Scanning or Physique Composition Feedback are securely sent to OpenAI's inference API for instant analysis. These images are not used to train public machine learning models.

4. Data Retention & Permanent Account Deletion

You have the complete legal right to request the deletion of your account and all associated personal data at any time in compliance with Google Play Developer policies, the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

To permanently delete your account and erase all workout logs, body photos, and user metrics from our production databases, you can:

Visit our dedicated online deletion portal: https://workoutpro.app/data-deletion
Submit a deletion request via our Contact Page
Delete directly inside the mobile app via Settings → Delete Account

Upon submission, your account and all associated biometric and media records are permanently deleted within 48 to 72 hours.

5. Security of Your Information

All network traffic between the Workout Pro mobile application and our servers is encrypted using industry-standard Transport Layer Security (TLS/HTTPS). User passwords are cryptographically hashed using salted bcrypt, and authentication sessions are guarded using rotating JWT tokens.

6. Contact Us

If you have questions, feedback, or privacy-related concerns, please contact our Data Protection team at:
Email: support@workoutpro.app
Online Portal: https://workoutpro.app/contact