Privacy Policy for Fitamal

Last updated: September 14, 2026

This Privacy Policy explains how Brock Industries LLC (“we,” “us,” or “our”) collects, uses, and protects your information when you use the Fitamal mobile application (the “App”). By creating an account and using the App, you agree to the practices described here.

If you have questions, contact us at austin@fitamals.com.

1. Who we are

The App is operated by Brock Industries LLC. For the purposes of data protection law, Brock Industries LLC is the data controller for the personal data described in this policy.

2. Information we collect

We only collect information needed to run the App. We do not use third-party analytics or advertising software, and we do not collect your location, contacts, photos, microphone, or advertising identifiers.

2.1 Information you provide

• Account information: your email address and a password. Passwords are stored only in hashed form by our authentication provider; we never see your plain-text password.
• Profile information: your name, gender, height, current weight, goal weight, optional target date, activity level, and your unit preference (imperial or metric).
• Fitness activity: the workouts you log (date, type, distance, duration) and the exercises within them (name, sets, reps, weight). From these we calculate stats such as your personal bests.

Your height, weight, and fitness activity are health- and fitness-related data, which we treat as sensitive and handle with additional care.

2.2 Information about your in-app collection

• The creatures (“Fitamals”) you hatch and when you hatched them.

2.3 AI-assisted features

The App offers two optional features that use an external AI provider (see Section 4):

• Workout analysis. When you choose to run an analysis, we calculate summary statistics from the workouts you logged over the selected period — totals such as number of workouts, training days, sets, reps, total lifted volume, distance and pace, the muscle groups you trained, and your most-performed exercises with your best weight for each — and send those summary statistics to our AI provider to generate written feedback. Your individual workout records are not sent, and neither your name, email, account identifier, height, current weight, nor goal weight is sent.
• Workout generation. When you ask the App to build a workout, only the muscle groups you selected are sent. No personal information is sent.

Both features run only when you choose to use them. The analysis and its underlying statistics are stored with your account so you can see your most recent result, and they are deleted when you delete your account.

2.4 Information collected automatically

• Authentication and technical data: when you sign up, sign in, or refresh your session, our backend provider processes your IP address and timestamps to operate and secure the service. A session token is stored on your device so you stay signed in.

We do not build advertising profiles, and we do not track you across other companies’ apps or websites.

3. How we use your information

We use your information to:

• Create and manage your account and keep you signed in;
• Provide core features: logging workouts, calculating your stats, and hatching and collecting Fitamals;
• Generate the optional AI workout analysis and AI workout suggestions you request;
• Secure your account and prevent abuse;
• Maintain, troubleshoot, and improve the App;
• Comply with our legal obligations.

Legal bases (EEA/UK users): we process your data to perform our contract with you (providing the App), for our legitimate interests (securing and improving the service), to comply with legal obligations, and, where required, with your consent.

4. How your information is shared

We do not sell your personal information, and we do not share it with third parties for their own marketing.

We share information only with service providers that process data on our behalf, under contract, to operate the App:

• Supabase — our backend provider for database hosting, authentication, and file storage. Your account, profile, workout, and collection data are stored with Supabase. See Supabase’s privacy policy at supabase.com/privacy.
• OpenAI — our AI provider, used only for the optional features described in Section 2.3. We send the workout summary statistics (for an analysis) or the muscle groups you picked (for a generated workout) and receive the generated text back. We do not send your name, email, or account identifier, so the data we send is not labeled with your identity. Requests are sent from our server using our own account, not from your device, and under OpenAI’s API terms this data is not used to train their models. See OpenAI’s privacy policy at openai.com/policies/privacy-policy.
• Apple — distributes the App and processes any related app-store interactions under Apple’s own privacy policy.

We may also disclose information if required by law, to protect our rights, or in connection with a business transfer, in each case consistent with this policy.

5. Where your data is stored

Your data is stored on infrastructure operated by our hosting provider, which may be located in the United States or other countries. Where data is transferred internationally, we rely on appropriate safeguards as required by applicable law.

6. Data retention and deletion

We keep your personal data for as long as your account is active.

You can permanently delete your account at any time from inside the App: Profile → Account → Delete Account. Deleting your account permanently removes your profile, all logged workouts and exercises, your weigh-ins, your saved workout analyses, and all hatched Fitamals, and signs you out. We retain only a minimal anonymous record that a deletion occurred (a random identifier and a timestamp, containing no personal information) for security and abuse prevention.

Residual copies may remain in routine backups for a limited period before they expire.

You can also request deletion by emailing austin@fitamals.com.

7. Security

We protect your information using industry-standard measures, including encryption of data in transit (HTTPS/TLS), hashed passwords, server-side access controls that restrict each user to their own data, and on-device storage of your session token. No method of transmission or storage is 100% secure, but we work to protect your information.

8. Your privacy rights

Depending on where you live, you may have some or all of the following rights:

• Access the personal data we hold about you;
• Correct inaccurate data (you can edit much of it directly in the App);
• Delete your data (use in-app account deletion, or contact us);
• Export / portability of your data;
• Object to or restrict certain processing;
• Withdraw consent where processing is based on consent.

EEA/UK (GDPR): you also have the right to lodge a complaint with your local data protection authority.

California (CCPA/CPRA): you have the right to know what we collect, to delete it, to correct it, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information, and we do not discriminate against you for exercising your rights.

To exercise any of these rights, email us at austin@fitamals.com. We will respond as required by applicable law.

9. Children’s privacy

Fitamal is not directed to children under 13 (or the minimum age required in your region), and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us at austin@fitamals.com and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and for material changes we will provide additional notice in the App or by email. Your continued use of the App after an update means you accept the revised policy.

11. Contact us

Brock Industries LLC
Email: austin@fitamals.com