Privacy Policy

Level Up Fitness ("the app", "we") is a personal fitness tracker for logging weight, steps, ab exercises, and walking/running sessions. This policy explains what data the app handles, why, and the choices you have. We keep data collection to the minimum needed to run the features you use. The app shows a full-screen ad after you finish a workout, plus an optional ad you can choose to watch to go ad-free for a day, via Google AdMob (see Advertising below); we use no other third-party analytics or tracking.

1. Information we collect

Account information

• Email address and an authentication credential (password), used to create and secure your account.

Health & fitness data you log

• Body weight entries and your weight goal.
• Daily step counts and ab-exercise (rep) counts.
• Walking and running sessions, including duration, distance, pace, and, when you record a route, GPS location coordinates and elevation.
• Milestones, streaks, and weekly goals derived from the above.

Location

• Precise (GPS) location is accessed only while you have an active tracking session running, via a foreground service with a visible notification. It is used to draw your route and compute distance/pace. The app does not access your location in the background outside of an active session, and does not use geofencing or continuous location sharing.

Device sensors

• The device step-counter (pedometer), used to tally steps during activity, where available.

Social features (only if you use them)

• A display name you choose. It does not have to be your real name, and nobody can search for it.
• The date you become eligible for social features. You enter your date of birth once to confirm you are 16 or over; we store only the resulting eligibility date, not your date of birth.
• Your connections (who you are connected with), the invite codes you create, and whether you have accepted the social terms.
• Anyone you block, and any report you send us, which keeps the reason you wrote so we can act on it.

Aside from the advertising identifier used by AdMob (see "Advertising"), we do not collect your contacts, photos, or browsing history.

2. How your data is stored and shared

• On your device: data is stored locally so the app works offline.
• Backend sync (Supabase): your data is synced to your private account on Supabase, which provides our hosted database and authentication. Access is restricted to your authenticated account.
• Map tiles (CARTO): when a map is displayed, the map-tile provider (CARTO) receives the map area being viewed in order to serve the tiles.
• Health Connect (optional): if you turn it on, completed workouts, including distance, duration, route, heart rate, steps, calories and elevation, are written to Health Connect on your own device so other health apps you use can read them. This is off unless you enable it, we never read anything from Health Connect, and nothing written there is sent to us or used for advertising. You can revoke it at any time in Health Connect settings, or turn it off in the app.
• Hosting (GitHub Pages): the web version of the app is served as static files from GitHub Pages.

Friends (optional)

The app has no public profiles, no search and no feed of strangers. The only way to connect with somebody is for one of you to create a single-use invite code and send it to the other. Codes expire after 7 days and can be revoked at any time.

• Nothing is shared until you switch it on. Every sharing option starts off. There are three, and each is a separate choice: training stats (distance, duration, pace, calories, elevation and steps), routes (the map of where you went) and heart rate (the average and maximum for a session).
• Only your connections can see it, never the public, never other users, and never anyone you have blocked. What you share applies to all of your connections, not to one of them.
• Routes show where you have been. A route usually starts and ends where you live, so sharing one tells your friends something about where you are. It is off unless you turn it on, we say this next to the switch as well as here, and turning it off stops it for every route, including ones already shared.
• Never shared: your session notes, your weight, your ab counts, your email address, and your daily step totals outside a session. Session notes stay private even when training stats are on.
• You can stop at any time. Turning a switch off stops the sharing from that moment, and disconnecting from somebody removes their access entirely. Neither is a request to us: it takes effect in the database when you make it.
• We do not use anything shared between friends for advertising, and we do not share it with AdMob or any other third party.

Advertising (Google AdMob)

• The app shows a full-screen ad only after you finish a workout (never mid-session, no pop-ups), plus an optional ad you can choose to watch from your Profile to go ad-free for a day, served by Google AdMob. To serve and measure ads, AdMob may collect your device's advertising identifier and limited device/usage information. See how Google uses information from apps that use its services.
• Where required (e.g. in the EEA/UK), you'll see a consent prompt on first launch: ads are personalized only if you consent, and non-personalized otherwise. You can change this choice at any time.
• We do not share the fitness data you log (weight, steps, workouts, routes) with AdMob.

3. Data transfer & security

• All network communication uses encryption in transit (HTTPS/TLS).
• Backend access is protected by per-user row-level security so you can only read and write your own data.
• No payment information is collected by the app.

4. Data retention & deletion

Your data is retained while your account exists. You can delete your account and all associated data at any time, see our Account & Data Deletion page. When you delete your account, your data is removed from the backend; any residual copies in routine backups are purged within 30 days.

Deleting your account also removes your display name, your connections, your invite codes and your blocks, which ends any sharing with friends. Reports you have sent are kept without your account identifier, so that a report about somebody else remains actionable after you leave.

You can also export your data at any time from the app (Profile → Data → Export).

5. Children

Level Up Fitness is intended for a general audience and is not directed at children under 13. We do not knowingly collect data from children under 13.

The social features are 16 or over, a higher bar than the rest of the app, because they involve sharing health data with other people. You confirm your age once before any of it becomes available; if you are under 16 the app tells you the date you become eligible and nothing social is created for your account until then.

6. Your rights

• Access / export your data from within the app.
• Delete your account and data (in-app, on the web, or by request, see the deletion page).
• Contact us with any privacy question at the address below.

7. Changes to this policy

If this policy changes materially, we will update the "Last updated" date above and, where appropriate, notify you in the app.

8. Contact

Questions or requests: levelupfitnessmail@gmail.com