Privacy Policy
Last updated: August 2, 2026
This Privacy Policy explains how Your Bro Rob Fitness ("YBR", "we", "us") collects, uses, stores and protects information when you use our app, websites and coaching services (collectively, the "Service"). This page is maintained by YBR to answer common privacy questions about the Service. It does not replace independent legal review.
1. Information we collect
- Account data: name, email, password (hashed), authentication provider.
- Fitness profile: age, sex, height, weight, body composition, goals, experience level, training days, equipment, injuries, dietary restrictions, allergies, food preferences.
- Activity data: workouts logged, sets and reps, check-ins, habits, nutrition logs, progress photos, measurements, streaks, achievements.
- Coaching interactions: messages with the AI coach, form-check videos, call bookings.
- Device & usage: device type, OS, app version, crash logs, anonymized analytics, push-notification tokens.
- Billing: web payments are processed by Stripe; in-app subscriptions on iOS and Android are processed by Apple and Google and validated through RevenueCat. We store your Ad-Free subscription and one-time coaching payment status and, for card payments, the last four digits / brand of your card — never the full card number.
2. How we use it
- Provide, personalize and improve workouts, nutrition plans and AI coaching.
- Operate accountability, push notifications, achievements and leaderboards you opt into.
- Process payments, prevent fraud, handle refunds and tax compliance.
- Send service emails (receipts, security alerts, account changes).
- Send marketing emails only if you opt in. You can opt out anytime.
3. Sharing
We do not sell your personal data. We share data only with:
- Google AdSense, which serves ads in the free version of the app and may set cookies or similar identifiers to measure and personalise those ads. Ads and ad cookies only load after you allow them in Settings, and never for Ad-Free members.
- Payment and subscription processors (Stripe for web payments; Apple, Google and RevenueCat for in-app purchases) to take payment and validate subscriptions.
- Cloud infrastructure (Lovable Cloud / Supabase, Cloudflare) for hosting & storage.
- AI providers strictly to generate coaching responses on your behalf.
- Authorities when required by law.
4. Storage & security
Data is stored on managed cloud infrastructure with encryption in transit (TLS) and at rest. Row-Level Security restricts every user record to its owner. Progress photos and form-check videos are stored in private buckets and signed URLs.
5. Retention
We keep your data for the life of your account plus up to 12 months for tax, fraud and legal reasons. Coaching messages and AI logs are kept for up to 24 months for safety review and product improvement.
6. Your rights
- Access, export or correct your data — email support.
- Delete your account and personal data — see Account Deletion. Some data may be retained for legal, accounting or fraud-prevention reasons.
- Withdraw consent for marketing emails or push notifications in Settings.
- GDPR / UK GDPR / CCPA rights: you can request access, portability, rectification, deletion and object to processing by contacting us.
7. Children
The Service is intended for adults 18 and over. We do not knowingly collect personal data from children under 13 (or under 16 in the EU).
8. International transfers
Data may be processed in the United States and European Union. Where required we rely on Standard Contractual Clauses or equivalent safeguards.
9. Changes
We will post material changes on this page and update the "Last updated" date. Continued use after changes means you accept the updated policy.
10. Contact
Privacy questions, data requests or complaints: privacy@yourbrorob.com.
