Privacy Policy

1. Who we are

From Couch to Fit ("the app", "we", "us") is a gentle movement-tracking application operated by Maria Orfanelli ("the operator"). This policy covers the mobile app and the website at this domain. For any privacy question, contact maria.orfanelli@gmail.com.

2. Information we collect

Information you give us

• Account details — your name and email address when you create an account or sign in with Google.
• Activity & wellbeing data — workouts you record or log (type, duration, distance, pace), notes, moods, experiments, objectives, and AI training plans.
• Precise location & routes — while you actively record a GPS activity, we process your device's location to draw your route and calculate distance and pace. This is sensitive data and is only processed while you are recording.

Information collected automatically

• Device & diagnostic data — app version, device model, operating system, crash reports, and similar technical information used to keep the app working.
• Usage data (usage monitoring) — basic, aggregated interactions such as which features are used, to understand how the app is performing and how to improve it.
• Local storage / cookies — on the website, small items used to keep the site working and to remember your cookie choice (see the Cookie Policy).

Information you send to AI features

When you ask the app to build a training plan, we send the objective you entered and a small summary of your recent training (e.g. weekly distance, typical pace) to our AI provider to generate the plan. We do not send your name, email, or precise location for this purpose.

3. How we use your information

• To provide the core service — recording activities, drawing maps, tracking experiments and plans, and showing your progress.
• To generate personalized training plans and recommendations.
• To operate, secure, debug, and improve the app (usage monitoring and diagnostics).
• To communicate with you about your account or important changes.
• To comply with legal obligations and enforce our Terms.

4. Legal bases (GDPR / LGPD)

Where the GDPR (EU/UK) or LGPD (Brazil) applies, we rely on: consent (e.g. precise location, and any future advertising); performance of a contract (providing the features you request); and legitimate interests (keeping the app secure and improving it), balanced against your rights. You can withdraw consent at any time.

5. Sharing & third parties

We do not sell your personal information. We share it only with service providers who help us run the app, under agreements that limit their use of it:

• Supabase — authentication and cloud database (account and, where synced, activity data).
• Google — Google Sign-In (authentication) and Google Maps (map rendering).
• DeepSeek — generates AI training plans from the objective and training summary you submit.
• Expo / EAS — app build and delivery infrastructure.
• Authorities — where required by law, or to protect rights, safety, and security.

6. Advertising, social media & usage monitoring

Today, the app contains no third-party advertising, no social-media tracking pixels, and no cross-app tracking. This section describes what would happen if we introduce them, so you know in advance:

• Advertising — if we add ads, we will disclose our advertising partners, and any personalized advertising or use of your device advertising identifier will be turned on only with your consent, with an easy way to opt out.
• Social media — features that let you share an activity use your device's own share sheet; we do not post on your behalf. If we later add social logins or embedded social content, those providers' own privacy policies will also apply.
• Usage monitoring / analytics — we may use privacy-respecting analytics to understand feature usage and crashes. Where required, non-essential analytics will be subject to your consent.

We will update this policy and, where required, ask for your consent before activating any of the above.

7. Cookies & local storage

The website uses only essential local storage (including remembering your cookie choice). The app stores your session and your data on your device using local storage. Full details are in our Cookie Policy.

8. Data retention

We keep your account and activity data for as long as your account exists. Locally stored data remains on your device until you delete it or uninstall the app. You can delete individual activities in the app, or ask us to delete your account and associated data (see your rights).

9. Security

We use reputable providers and reasonable technical measures (such as encrypted connections and access controls) to protect your information. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

10. International transfers

Our providers may process data in countries outside your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

11. Your rights

Depending on where you live (GDPR, UK GDPR, LGPD, CCPA/CPRA and similar laws), you may have the right to: access your data; correct it; delete it; restrict or object to processing; port your data; withdraw consent; and, under CCPA/CPRA, to know, delete, and opt out of any "sale" or "sharing" of personal information (we do not sell personal information). We will not discriminate against you for exercising these rights. To make a request, email maria.orfanelli@gmail.com.

12. Children

The app is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data. If you believe a child has provided us information, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. We will change the "last updated" date above and, for significant changes, provide a more prominent notice.

14. Contact

Questions or requests: maria.orfanelli@gmail.com.