Privacy Policy

1. Introduction

Welcome to Stryv ("Company", "we", "us", or "our"). We respect your privacy and are committed to protecting your personal data. This privacy policy informs you about how we look after your personal data when you visit our website ("Website") or use our mobile application ("App"), collectively referred to as "Service", and tells you about your privacy rights and how the law protects you.

This privacy policy applies to all users of our Service globally. However, if you reside in the European Economic Area (EEA), United Kingdom, or California, additional rights may be available to you, as detailed in this policy.

Please read this privacy policy carefully before using our Service. By using our Service, you're agreeing to the collection and use of information in accordance with this policy.

2. Information We Collect

We may collect, use, store and transfer different kinds of personal data about you, including:

• Identity Data: Includes first name, last name, username or similar identifier, and date of birth.
• Contact Data: Includes email address and telephone numbers.
• Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website or app.
• Usage Data: Includes information about how you use our website, products and services.
• Health and Fitness Data: Includes information about your workouts, physical metrics, performance measurements, goals, and progress collected through the app. We treat this data with the highest level of confidentiality and in compliance with applicable health data regulations.
• User Content: Includes photos, videos, or other content you upload or provide when using the Service.
• Marketing and Communications Data: Includes your preferences in receiving marketing from us and our third parties and your communication preferences.

Information Collected Automatically

When you use our Service, we automatically collect certain information, including:

• Device information (such as your mobile device ID, model and manufacturer)
• Log information (such as IP address, access times and dates)
• App activity information (such as features used, content viewed)
• Device sensor data (such as motion data if you allow access)
• Cookies and similar tracking technologies

HealthKit and Google Fit Integration

With your explicit consent, our app may integrate with Apple HealthKit (iOS) and Google Fit (Android) to access and sync your health and fitness data. This integration allows us to:

• Read your workout data, step counts, and other fitness metrics
• Write workout data back to your health app
• Access heart rate, weight, and other health measurements (with your permission)
• Provide more personalized fitness recommendations based on your health data

You can control this integration through your device's privacy settings. You may revoke access to HealthKit or Google Fit at any time through your device settings, and we will immediately stop accessing this data.

Data accessed through HealthKit and Google Fit is processed in accordance with Apple's and Google's respective privacy policies, in addition to this privacy policy.

Sensitive Data and Special Categories

Our Service may collect and process sensitive personal data, including health and fitness information. We handle this data with the highest level of care and in compliance with applicable regulations:

• Health Data: We collect fitness metrics, workout data, and health-related information to provide personalized fitness recommendations
• Biometric Data: With your consent, we may process biometric data such as heart rate, weight, and body measurements
• Physical Activity: We track your exercise routines, performance metrics, and fitness goals
• Medical Information: We do not collect or process medical diagnoses, treatments, or other clinical information

We process sensitive data only with your explicit consent and use it solely to provide our fitness services. You may withdraw your consent at any time through the app settings or by contacting us.

We implement additional security measures for sensitive data, including encryption at rest and in transit, restricted access controls, and regular security audits.

Data Minimization and Purpose Limitation

We follow the principle of data minimization, collecting only the personal data that is necessary for the specific purposes for which it is processed. We do not collect or process personal data beyond what is required to provide our fitness services.

• We only collect data that is directly relevant to providing personalized fitness recommendations
• We do not collect unnecessary personal information or data unrelated to our service
• We regularly review our data collection practices to ensure we only collect what is needed
• We delete or anonymize data that is no longer necessary for our stated purposes

If you believe we are collecting more data than necessary, please contact us to discuss your concerns.

Wearable Devices and Sensor Data

Our Service may integrate with wearable devices and sensors to provide enhanced fitness tracking and analysis. This may include:

• Fitness Trackers and Smartwatches: Heart rate, step count, sleep data, and activity metrics
• Smartphone Sensors: Accelerometer, gyroscope, and GPS data for movement analysis
• Camera and Video: Form analysis and exercise technique feedback
• Microphone: Voice commands and audio feedback (if enabled)
• Environmental Sensors: Location data for outdoor workout tracking

We process sensor data only with your explicit consent and use it solely to provide fitness services. You can control sensor access through:

• Device privacy settings and app permissions
• In-app privacy controls and feature toggles
• Contacting us to disable specific sensor integrations

Sensor data is processed locally when possible and transmitted securely when cloud processing is required for AI analysis.

3. How We Use Your Information

We use your personal data only when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation.
• Where you have given consent to the processing of your personal data for one or more specific purposes.

Specifically, we use your information to:

• Register you as a new user and create your profile.
• Provide and personalize our service (e.g., generating workout plans, analyzing your form).
• Process your subscription and payment transactions.
• Manage our relationship with you, including notifying you about changes to our terms or privacy policy.
• Provide customer support and respond to your inquiries.
• Improve our website, app, products/services, marketing, or customer relationships through analysis and feedback.
• Monitor the usage of our service and ensure its stability, security, and proper functioning.
• Detect, prevent and address technical issues, fraud, or other illegal activities.
• Send you marketing communications (when you have opted-in to receive them).
• Comply with legal obligations and enforce our terms.

AI Processing and Generated Content

Our Service uses artificial intelligence to provide personalized fitness recommendations, workout plans, and form analysis. When you use AI-powered features, we may process your data as follows:

• Your fitness data, workout history, and preferences are processed by AI algorithms to generate personalized recommendations
• Video content you upload for form analysis is processed by AI to provide feedback and suggestions
• AI-generated content is created based on your input data and may be stored to improve our algorithms
• We do not use your personal data to train third-party AI models without your explicit consent

AI-generated content is provided for informational purposes only and should not replace professional medical advice. We are not responsible for any decisions made based on AI-generated recommendations.

4. Data Sharing and Disclosures

We may share your personal data with the following categories of recipients:

• Service Providers: Third-party vendors who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, and customer service.
• Business Partners: Companies with whom we partner to offer joint promotional offers or related products and services.
• Affiliates: Companies related by common ownership or control.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy.
• With Your Consent: In other cases where we seek your consent to share your information with third parties.

We do not sell your personal information as defined under applicable privacy laws.

RevenueCat SDK

We use RevenueCat SDK to manage subscription purchases and billing. RevenueCat may collect and process the following information:

• Purchase history and subscription status
• Device identifiers and app usage data
• Payment information (processed securely through app stores)
• Analytics data to improve subscription management

RevenueCat processes this data in accordance with their privacy policy and our instructions. You can learn more about RevenueCat's data practices at https://www.revenuecat.com/privacy.

Firebase and Analytics Services

We use Google Firebase and other analytics services to understand how users interact with our app and to improve our services. These services may collect:

• App usage statistics and crash reports
• Device information and performance metrics
• User engagement data and feature usage
• Technical logs and error information

Firebase and other analytics providers process this data in accordance with their respective privacy policies. You can learn more about Google's data practices at https://policies.google.com/privacy.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, whether we can achieve those purposes through other means, and applicable legal requirements.

In some circumstances, we may anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

6. Data Security

We have implemented appropriate technical and organizational security measures designed to protect your personal data from accidental loss, unauthorized access, use, alteration, or disclosure. These measures include encryption of sensitive data, regular security assessments, and restricted access to personal information.

We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

However, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

7. International Data Transfers

Our operations are primarily based in the United States. If you are accessing our Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our servers are located or where our service providers operate.

If you are located in the European Economic Area (EEA), the United Kingdom, or other regions with laws governing data collection and use that may differ from U.S. law, please note that we may transfer information, including personal data, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction.

When transferring data from the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or other legal mechanisms to ensure the adequate protection of your data.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and to hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.

We use the following types of cookies:

• Essential Cookies: Required for the operation of our Service.
• Analytical/Performance Cookies: Allow us to recognize and count the number of visitors and to see how visitors move around our Service.
• Functionality Cookies: Used to recognize you when you return to our Service.
• Targeting Cookies: Record your visit to our Service, the pages you have visited and the links you have followed to deliver more relevant advertisements.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Advertising and Tracking Transparency

We are committed to transparency regarding any advertising or tracking technologies used in our Service. Currently, we do not use third-party advertising networks or behavioral tracking for marketing purposes.

If we implement advertising features in the future, we will:

• Provide clear notice about any advertising or tracking technologies
• Obtain explicit consent before implementing behavioral tracking
• Never use health or fitness data for advertising purposes
• Provide easy opt-out mechanisms for all tracking features
• Update this privacy policy with detailed information about any new tracking practices

We will never sell your health data or use it for advertising purposes without your explicit consent.

9. Children's Privacy

Our Service is not directed to anyone under the age of 16 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 16. If you are a parent or guardian and you are aware that your Child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers.

10. Your Legal Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access: The right to request copies of your personal data.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: The right to request restriction of processing of your personal data.
• Right to Data Portability: The right to request the transfer of your personal data to you or a third party.
• Right to Object: The right to object to processing of your personal data for direct marketing or based on legitimate interests.
• Right to Withdraw Consent: The right to withdraw consent at any time where we rely on consent to process your personal data.

Additional Rights for California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide additional rights, including:

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete certain personal information
• The right to opt out of the "sale" or "sharing" of personal information
• The right to non-discrimination for exercising your rights
• The right to limit the use of sensitive personal information

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We may need to verify your identity before responding to your request.

Account Deletion and Data Removal

You may delete your account and request the removal of your personal data at any time. When you delete your account:

• Your account will be permanently deactivated within 24 hours
• Your personal data will be deleted from our active systems within 30 days
• Any active subscriptions will be cancelled (though you may continue to have access until the end of your billing period)
• We may retain certain information for legal, regulatory, or legitimate business purposes as required by law
• Anonymized, aggregated data that does not identify you personally may be retained for analytics purposes

To delete your account, you can:

• Use the account deletion feature in the app settings
• Contact us directly at stryvcontact@gmail.com
• Submit a data deletion request through our support channels

We will confirm your account deletion request and provide you with a timeline for data removal. You may be required to verify your identity before we process your deletion request.

Opt-Out Rights and Marketing Communications

You have the right to opt out of certain data processing activities and marketing communications:

• Marketing Communications: You can opt out of marketing emails and push notifications at any time through the app settings or by contacting us
• Analytics and Tracking: You can opt out of analytics tracking through your device settings or by contacting us
• Data Processing: You can withdraw consent for specific data processing activities while maintaining access to core app features
• Third-Party Sharing: You can opt out of data sharing with third-party service providers (except where required for core functionality)

To exercise your opt-out rights, you can:

• Use the privacy settings in the app
• Contact us directly at stryvcontact@gmail.com
• Follow the unsubscribe link in any marketing emails
• Adjust your device settings for push notifications and tracking

We will process your opt-out request within 30 days and confirm the changes to your preferences.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. For material changes, we may provide more prominent notice or obtain consent as required by law.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at:
Email: stryvcontact@gmail.com

Data Protection Officer (DPO)

For users in the European Union, you may also contact our Data Protection Officer for privacy-related inquiries:
Email: dpo@stryv.com

Our DPO is responsible for ensuring compliance with GDPR and other applicable data protection laws. You may contact the DPO directly for:

• Questions about your data protection rights
• Concerns about how we process your personal data
• Requests for data access, correction, or deletion
• Complaints about our data processing practices

Right to File a Complaint

You have the right to file a complaint with the relevant data protection authority if you believe we have not addressed your privacy concerns adequately.

For EU/EEA Users: You may lodge a complaint with your local data protection authority. You can find your authority at https://edpb.europa.eu/about-edpb/board/members_en.

For California Residents: You may file a complaint with the California Privacy Protection Agency at https://cppa.ca.gov.

For Other Users: You may contact your local consumer protection or privacy regulatory authority.

We encourage you to contact us first to resolve any privacy concerns before filing a complaint with authorities. We are committed to addressing all privacy-related issues promptly and transparently.