Privacy Policy

1. Who We Are

This Privacy Policy explains how Reece's Sandbox LLC ("we," "us," or "our"), the operator of Reece's Fitness Tracker, collects, uses, stores, and shares information when you use the Reece's Fitness Tracker mobile application (the "App").

Reece's Fitness Tracker is a personal health and fitness tracking app. It lets you log nutrition, body weight and other measurements, workouts, and custom metrics, and it stores that information in your account so you can access it across sessions and devices. It also offers an optional paid "Premium" subscription, shows advertisements in the free version, and includes an optional AI workout-routine generator.

Contact: info@reecessandbox.com
Website: https://reecesfitness.com

2. Scope

This Policy applies to the Reece's Fitness Tracker App and the account and backend services used to operate it. It does not apply to any third-party services, websites, or apps that you may access through the share or export features of the App (for example, when you export a file and send it to another app). Those are governed by their own privacy policies.

3. Information We Collect

We collect only the information needed to provide the App's features. You provide most of it directly by creating an account and logging your data.

3.1 Account information

• Email address (used to create and sign in to your account).
• Password (handled by our authentication provider; we do not store your password in readable form).
• A unique account identifier assigned to your account.

3.2 Profile and goal information

• Your name and username (if you choose to provide them).
• Height and body weight.
• Date of birth and biological sex (used, together with height, weight, and activity level, to estimate your calorie needs).
• Activity level and your fitness goal (for example: lose weight, maintain, or gain muscle).
• Daily calorie target and macronutrient (protein, carbohydrate, fat) targets.

3.3 Health and fitness data you create in the App

Because Reece's Fitness Tracker is a health and fitness app, much of the information you enter is health-related. This includes:

• Nutrition / food logs: foods you log, including descriptions, calories, and macronutrients, together with the date and meal they belong to.
• Saved / favorite foods you store for quick logging.
• Body measurements: body weight and, if you record them, other measurements such as body-fat percentage, with optional notes and the date of each entry.
• Workouts: workout names, dates, durations, the exercises performed, and sets (including repetitions and weight lifted) and any notes.
• Workout routines (templates) you save.
• Custom exercises you create.
• Custom trackers ("metrics") that you define, including their names, units, colors, and the values and dates you record.
• App settings associated with your account.

3.4 Subscription and purchase information

If you buy a Premium subscription, the purchase is processed by the Apple App Store or Google Play, not by us. Our subscription provider (RevenueCat) receives your account identifier and transaction/receipt information from the store so we can determine and maintain your Premium status. We do not receive or store your full payment card number; payment details are handled by the app store.

3.5 Advertising information

The free version of the App shows advertisements served by Google AdMob. We request non-personalized ads. Even so, the ad provider may process limited information (such as device identifiers, IP address, and ad-interaction signals) to deliver and measure ads and to prevent fraud, under its own policies. See Section 6 for details and your choices.

3.6 Information stored only on your device

Some data is stored locally on your device and is not sent to our servers except as part of your account data described above:

• Your sign-in session tokens, stored in the device's secure keychain / keystore.
• App preferences such as theme/appearance, measurement units, dashboard layout, nutrition preferences, navigation/tab preferences, reminder settings, and any workout currently in progress.
• If you enable reminders, the App schedules local notifications on your device; these are handled by your device and do not by themselves send data to us.

3.7 Technical information processed to operate and protect the service

Our hosting and platform providers (see Section 10) may automatically process limited technical information, such as IP address and basic request logs, as part of delivering the service. When you sign in, sign up, or reset your password, our bot-protection provider (Cloudflare Turnstile) processes technical signals (such as IP address and device/browser characteristics) to verify that you are a human and not an automated script.

3.8 Information we do NOT collect

• We do not collect precise device location.
• We do not access your contacts, photo library, or microphone for data collection.
• We do not read from or write to Apple Health or Google Fit.
• We do not use third-party behavioral-analytics or cross-app tracking SDKs, and we do not track you across other companies' apps or websites.

4. How We Use Your Information

We use the information above to:

• Create and secure your account and keep you signed in.
• Provide the App's core features: storing and displaying your logs, measurements, workouts, routines, trackers, goals, and progress charts.
• Sync your data so it is available when you reopen the App or sign in on another device.
• Calculate and display summaries such as calorie totals, macro progress, and trends from the data you enter.
• Provide and manage Premium subscriptions and entitlements.
• Generate AI workout routines when you use that feature (see Section 5).
• Show advertisements in the free version (see Section 6).
• Save your settings and preferences.
• Respond to your requests and provide support.
• Protect the App and its users from fraud, abuse, and security threats, enforce our Terms, and comply with legal obligations.

We do not sell your personal information, and we do not use your health and fitness data for advertising.

5. AI Features and AI Disclosure

Premium includes an optional AI Routine Builder, an artificial-intelligence feature. When you use it, the options you select (your goal, target muscle groups, intensity, and session duration) and the names of the exercises in your library, including any custom exercises you have created, are sent to our third-party AI provider, DeepSeek, which generates a suggested routine.

We do NOT send your name, email address, account identifier, body measurements, nutrition logs, or other health data to the AI provider. The AI provider processes the request under its own privacy policy: https://www.deepseek.com/privacy

AI disclosure: Routines from the AI Routine Builder are generated automatically by the third-party AI model from the inputs above. They are not written, reviewed, or approved by a human trainer, coach, or healthcare professional, and automated AI output can be inaccurate, incomplete, or unsuitable for you. AI-generated routines are suggestions only and are not medical, health, or professional fitness advice. Always review a routine and use your own judgment, and consult a qualified professional before acting on it (see Section 17).

6. Advertising and Your Choices

The free version of the App displays advertisements served by Google AdMob. We configure the App to request non-personalized ads, which are targeted using contextual information (such as the general content shown) rather than your past behavior. To serve, cap, measure, and protect ads from fraud, Google may still process limited data such as device identifiers and IP address. Google's use of data is described at:

• How Google uses information from sites or apps that use its services: https://policies.google.com/technologies/partner-sites
• Google Privacy Policy: https://policies.google.com/privacy

You can limit ad personalization at the device level using your device's settings (for example, "Limit Ad Tracking" / resetting or removing your advertising identifier on iOS, or "Opt out of Ads Personalization" on Android). Subscribing to Premium removes advertisements entirely.

7. Legal Bases for Processing (where GDPR / UK GDPR applies)

Where applicable law requires a legal basis, we rely on:

• Performance of a contract: to provide the App and the account and subscription features you request.
• Consent: for processing the health and fitness data you choose to enter, and for sending any optional reminders. You can withdraw consent by deleting your data and/or your account (see Section 13).
• Legitimate interests: to keep the service secure and functioning, prevent abuse, and (for the free version) support the App through advertising.
• Legal obligation: where we must process data to comply with the law.

8. How Your Information Is Stored and Protected

• Your account data is stored in a cloud database operated through our backend provider, Supabase (see Section 10). Data is transmitted between the App and the backend over encrypted connections (HTTPS/TLS).
• Access to your data is restricted to your authenticated account through database access controls; privileged operations run server-side and are not exposed to other users.
• Your sign-in session tokens are stored on your device using the operating system's secure storage (keychain on iOS, keystore on Android).

Exports are not encrypted: If you use the export feature to create a CSV file of your data, that file contains your personal health information in plain text and is not encrypted. Once you share or save an exported file, it leaves the App's protection and is handled by whatever app, service, or person you send it to. Only share exports with apps and people you trust.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a data breach affects your personal information, we will notify you and the relevant authorities where and as required by applicable law.

9. How We Share Information

We share information only as described here:

• Service providers (processors): We use the third-party providers listed in Section 10 to host and operate the App, manage subscriptions, serve ads, generate AI routines, and protect against bots. They process data on our behalf or under their own policies to deliver these functions.
• At your direction: When you export data and share it through your device's share sheet, you choose the recipient app or service.
• Legal and safety: We may disclose information if required by law, legal process, or government request, or to protect the rights, property, or safety of users, the public, or us.
• Business transfers: If the App or its assets are transferred to another party, your information may be transferred as part of that transaction, subject to this Policy.

We do not sell your personal information.

10. Third-Party Services We Use

• Supabase handles authentication and the cloud database, where your account and logged data are stored. Privacy: https://supabase.com/privacy
• RevenueCat manages Premium subscriptions and entitlements. Privacy: https://www.revenuecat.com/privacy
• Google AdMob serves advertisements in the free version. Privacy: https://policies.google.com/privacy
• DeepSeek is the third-party AI used by the optional AI Routine Builder. Privacy: https://www.deepseek.com/privacy
• Cloudflare Turnstile handles bot-protection on sign-in, sign-up, and password reset. Privacy: https://www.cloudflare.com/privacypolicy/
• Expo / Expo Application Services (EAS) is used to build and deliver the App. Privacy: https://expo.dev/privacy
• Apple App Store and Google Play distribute the App and process purchases and limited information related to downloads, payments, and crash reporting under their own policies. Apple: https://www.apple.com/legal/privacy/ · Google: https://policies.google.com/privacy

11. Data Retention

We retain your account and logged data for as long as your account exists or as needed to provide the App. When you delete data using the in-app tools, it is removed from our active database. If you delete your account (or ask us to), we will delete your personal data, except where we are required or permitted by law to retain certain information (for example, to comply with legal obligations, keep records of transactions, or resolve disputes). Backups maintained by our providers may persist for a limited period before being overwritten.

12. International Data Transfers

Our service providers may store and process your information in the United States and other countries that may have data-protection laws different from those in your country. Where required, we rely on appropriate safeguards for such transfers. By using the App, you understand your information may be transferred to and processed in these locations.

13. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, export, restrict, or delete your personal information. The App provides built-in tools, and you can also contact us.

• Access / view: You can view all of your logged data within the App.
• Edit / correct: You can edit or update your profile, goals, logs, measurements, workouts, and trackers in the App.
• Export: Premium subscribers can export food logs, weight data, and workouts as CSV files for a date range in Settings → My Data. If you do not have Premium, you can still request a copy of your data by emailing us at info@reecessandbox.com.
• Delete your data: In Settings → My Data, "Delete All User Data" permanently removes your food logs, body measurements, workouts, and custom exercises while keeping your account and profile active so you can keep using the App.
• Delete your account: In Settings → Account, you can permanently delete your account and all associated data.

To exercise rights that are not available directly in the App, email us at info@reecessandbox.com. We may need to verify your identity (for example, by confirming control of the account's email address) before acting on a request. We will respond within the timeframe required by applicable law, and we will not discriminate against you for exercising your rights.

If you are in the EEA or UK and believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.

14. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use it, to request access to or deletion of your personal information, to correct inaccurate information, and to not be discriminated against for exercising these rights. The categories of personal information we collect are described in Section 3, the purposes in Section 4, and the recipients in Sections 9 and 10.

We do not "sell" your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under the CPRA. Because we neither sell nor share your personal information, there is nothing to opt out of, and opt-out preference signals such as Global Privacy Control (GPC) do not change how we handle your data. To exercise your rights, use the in-app tools or contact us at info@reecessandbox.com.

15. Consumer Health Data (Washington, Nevada, Connecticut, and Similar Laws)

Because Reece's Fitness Tracker is a fitness app, some of the information you enter is "consumer health data" under state consumer-health-privacy laws such as Washington's My Health My Data Act, Nevada's SB 370, and Connecticut's health-data provisions. These laws can apply regardless of our size. This section applies to you if you live in a state with such a law.

The consumer health data we handle is the health and fitness information you choose to enter, described in Section 3.3 (for example, nutrition logs, body weight and other body measurements, and workouts), together with the profile and goal information in Section 3.2 that relates to your physical condition.

Consent: We collect this data only when you choose to enter it, in order to provide the feature you are using, such as logging a meal, recording a weight, or saving a workout. We do not collect consumer health data in the background, and we do not use it for advertising.

No sale: We do not sell your consumer health data, and we do not offer it for sale, in exchange for anything of value.

Sharing: We share consumer health data only with the service providers listed in Section 10 that process it on our behalf to operate the App, such as our backend provider that stores your account data. We do not send it to the AI provider; see Section 5 for what the AI Routine Builder does and does not share.

Your rights: You have the right to know what consumer health data we collect, to access it, to withdraw your consent, and to have it deleted. You can view and edit this data in the App, delete it using Settings → My Data, and delete your account in Settings → Account. Withdrawing consent means you can stop entering this data and delete what you have already entered. To make a request the in-app tools do not cover, email us at info@reecessandbox.com.

16. Children's Privacy

The App is not directed to children under 13 (or the higher minimum age of digital consent that may apply in your country, such as 16 in parts of the EEA), and we do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, contact us at info@reecessandbox.com and we will delete it.

17. Health Data Disclaimer

Reece's Fitness Tracker is a tracking tool, not a medical device, and it does not provide medical advice, diagnosis, or treatment. The information in the App, including any AI-generated routines, is for personal informational purposes only. Always consult a qualified healthcare professional before making decisions about diet, exercise, or your health.

18. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide notice within the App. Your continued use of the App after an update means you accept the revised Policy.

19. Contact Us and Governing Law

If you have questions, requests, or concerns about this Privacy Policy or your information, contact:

Reece's Sandbox LLC (Reece's Fitness Tracker)
Email: info@reecessandbox.com
Website: https://reecesfitness.com

Governing law: This Policy is governed by the laws of the State of Missouri, United States, without regard to its conflict-of-laws rules, except where mandatory local consumer or data-protection laws apply to you.