Privacy Policy — FitQuad

1. Introduction

FitQuad ("we", "our", "us") provides a gym management and fitness coaching mobile application (the "App") that connects members, coaches, gym operators, and administrators. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By creating an account or using the App, you agree to the practices described in this policy.

2. Information We Collect

2.1 Account Information

Name, email address, and password (or Google / Apple sign-in identifiers)
Role (member, coach, or admin) and gym/branch assignment
Profile photo (optional)

2.2 Health & Fitness Data

Weight, height, age, sleep hours, water intake, and fitness goals
Workout plans, exercise logs, and check-in history
Nutrition plans, logged meals, and macro tracking data
InBody body-composition scans (body fat %, muscle mass, BMI, etc.)
Progress photos you choose to upload
Step count, heart rate, and activity data from Apple Health / Google Fit (only if you grant permission)

2.3 Location & Gym Activity

The gym/branch you select or are pre-registered to
QR check-in scans (date, time, and gym location of each scan)
Gym membership IDs used to link an on-site subscription to your app account

2.4 Communications

Messages exchanged with coaches (text, plan attachments, InBody/analytics attachments)
Community posts and reactions you choose to share

2.5 AI Coach Data (Google Gemini)

FitQuad's AI Coach feature (chat, InBody scan insights, and AI-generated workout/nutrition plans) is powered by Google Gemini, a third-party AI service. Before this feature is used for the first time, the App asks for your explicit consent and discloses exactly what is shared. If you decline, AI features are simply disabled — every other part of the App continues to work normally.

When you use an AI feature, the following may be sent to Google Gemini for processing:

Your first name only (never your email address, phone number, or password)
Fitness goal, current weight, height, and (if provided) age
Weekly gym check-in / attendance pattern
Smartwatch / Apple Health / Google Fit data you've connected (steps, heart rate, sleep, calories burned)
Your active workout and nutrition plan summaries
InBody body-composition scan data — only when you explicitly attach it to a message or question
The text of your chat messages and any custom prompt you type when generating a plan

Google's use of this data is governed by the Google Privacy Policy and Gemini API Additional Terms of Service, which apply equivalent data-protection safeguards to the personal data described above. We do not send Gemini any data beyond what is listed here.

2.5 Purchases & Payments

Subscription plan, billing status, and order history
Payment transactions are processed by Paymob, a third-party payment processor. We do not store your full card details — only the transaction reference and status are retained.

2.6 Device & Usage Data

Push notification tokens (Firebase Cloud Messaging) for reminders and announcements
Basic device information (OS version, app version) for crash diagnostics

3. How We Use Your Information

To create and manage your account and provide core App features
To generate personalised AI workout and nutrition recommendations
To track your progress, streaks, XP, and gamification badges
To connect you with coaches and partner gyms you choose to interact with
To process subscription payments and gym membership check-ins
To send reminders (water, sleep), announcements, and coach messages via push notification
To improve app performance, fix bugs, and develop new features

4. Who We Share Data With

Recipient	Purpose
Your coach (if hired)	Workout/nutrition plans, InBody data, and chat messages you send them
Your partner gym	Check-in records, membership status, and contact details for on-site registration
Google (Gemini API)	First name, fitness/health profile data, and chat/prompt text — only after you consent, and only to generate AI responses and plans (see Section 2.5)
Paymob	Payment processing for subscriptions and marketplace orders
Firebase (Google)	Push notification delivery and crash analytics

We do not sell your personal data to third parties.

5. Data Retention

We retain your account and activity data for as long as your account is active. If you delete your account, your personal data is removed or anonymised within 30 days, except where retention is required by law (e.g. payment records).

6. Your Rights & Choices

Access & correction — update your profile, weight, goals, and preferences anytime in the App
Health data permissions — Apple Health / Google Fit access can be revoked at any time in your device settings
Notifications — water and sleep reminders can be disabled in Notification Preferences
AI consent — you choose whether to allow Gemini AI features the first time you use one; declining disables only those features
Account deletion — delete your account and personal data anytime from Profile → Delete Account, or by contacting us at the email below
Message deletion — you can delete your own sent messages from chat threads

7. Data Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS) for all API traffic, token-based authentication (Laravel Sanctum), and access controls restricting staff access to personal data on a need-to-know basis.

8. Children's Privacy

FitQuad is intended for users aged 16 and older. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, please contact us so we can remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via an in-app announcement or notification. Continued use of the App after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us:

Email: support@quadrocloud.net

App: FitQuad — net.quadrocloud.fitquad