Privacy Policy

Phoenix Digital LLC (“Phoenix,” “we,” “us,” or “our”) operates the BlazeFit Coach mobile application (iOS and Android) and the associated web platform at phoenixcalisthenics.com (collectively, the “Service”). This Privacy Policy explains what information we collect, how we use it, and your choices regarding that information.

By creating an account or using the Service you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

2.1 Account Information

When you sign up we collect your name, email address, and an encrypted password. If you use Apple Sign In or Google Sign In, we receive the name and email associated with that account.

2.2 Profile & Fitness Data

To provide the Service we store data you create or enter, including:

• Workout logs, exercise history, and training plans
• Body measurements (weight, body fat percentage)
• Progress photos you upload
• Meal logs (calories, macronutrients)
• Goals, challenges, and XP / level data
• Messages sent within the app

2.3 Health & Sensor Data (Optional)

With your explicit permission, the app may read data from Apple HealthKit (iOS) or Google Health Connect (Android), including:

• Steps and distance
• Active and total calories burned
• Heart rate
• Weight and body fat
• Sleep analysis
• Exercise / workout sessions

Health data is used solely to display fitness metrics within the app and is never sold, shared with advertisers, or used for purposes unrelated to the Service. You can revoke health data access at any time in your device’s Health settings.

2.4 Device & Usage Information

We automatically collect device type, operating system version, app version, crash reports (via Sentry), and general usage analytics to improve reliability and performance. We do not collect precise GPS location.

2.5 Camera & Photo Library

The app requests camera and photo library access only when you choose to take or upload a progress photo. Photos are stored securely and are visible only to you and your assigned coach.

• Provide, maintain, and improve the Service
• Display your fitness data, progress, and achievements
• Enable communication between coaches and their clients
• Send transactional emails (invitations, password resets)
• Diagnose errors and monitor performance
• Enforce our terms and protect against misuse

We do not sell your personal data. We do not use your data for advertising or ad targeting.

We share information only in the following circumstances:

• Your Coach / Gym: Your profile, workout logs, measurements, and progress photos are visible to the coach(es) of the gym(s) you have joined. Messages are shared with conversation participants.
• Infrastructure Providers: We use Supabase (database, authentication, storage), Resend (email delivery), Sentry (error tracking), and cloud hosting services. These providers process data on our behalf under contractual obligations.
• Legal Requirements: We may disclose information if required by law, court order, or governmental authority.

Your data is stored in secure, encrypted databases hosted by Supabase. Authentication tokens are stored on-device using platform-secure storage (iOS Keychain / Android Keystore via Expo SecureStore). We implement row-level security policies to ensure users can only access data they are authorized to view.

While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure.

We retain your data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention).

• Access & Export: You can view your data within the app at any time.
• Correction: You can update your profile information in the app settings.
• Deletion: You can request full account deletion by contacting us at the email below.
• Health Data: Revoke access at any time via your device’s Health settings (iOS) or Health Connect settings (Android).
• Communications: Transactional emails cannot be opted out of while your account is active, but we do not send marketing emails.

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Effective date” at the top and notify users through the app or by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Phoenix Digital LLC
Email: privacy@phoenixcalisthenics.com