Privacy Policy

Your privacy matters to us. This policy explains what data Strength Is Never a Weakness (“SINW”) collects, how we use it, who we share it with, and what rights you have.

The short version: We collect only what's needed to run SINW. We never sell your data. Your data is shared with service providers solely to deliver functionality within the app (e.g., AI coaching, email delivery). You can request deletion of your data at any time.

1. Data We Collect

Account Information

• Email address (required for signup and communication)
• Display name (optional, set by you)
• Password (hashed, never stored in plain text)

Health & Fitness Data

• Training blocks, workout plans, and exercise logs
• Body measurements (weight, height, body fat percentage) if provided
• Health profile data (date of birth, sex, blood type, VO2max) if provided
• Progress photos if uploaded
• Workout metadata (duration, heart rate, calories, effort ratings)

Usage Data

• Pages visited and features used (for improving the product)
• Device type, browser, and viewport size (collected with feedback submissions)
• AI feature usage logs (model used, response time — no prompt content stored long-term)

2. How We Use Your Data

• To provide the service: Store and display your training data, generate AI coaching insights, sync data across your devices
• To improve SINW: Understand usage patterns, fix bugs, develop new features
• To communicate with you: Send transactional emails (invitations, password resets, feedback replies)
• To ensure security: Detect abuse, enforce our Terms of Service

3. Who We Share Data With

We do not sell, rent, or trade your personal data. We share data only with the following service providers, strictly to operate SINW:

Anthropic (AI Provider)

When you use AI features (block generation, coaching chat, exercise auto-fill, photo analysis), relevant portions of your profile and training data are sent to Anthropic's Claude API to generate responses. Anthropic processes this data under their data policies, which prohibit using API inputs to train models.

Supabase (Infrastructure)

Your data is stored in a PostgreSQL database hosted by Supabase. Supabase provides authentication, database, and file storage services. Data is encrypted at rest and in transit.

Resend (Email)

Transactional emails (invitations, password resets, feedback replies) are sent via Resend. Only the recipient email address and email content are shared.

Vercel (Hosting)

SINW is hosted on Vercel. Standard server logs (IP addresses, request paths) are collected as part of normal web hosting operations.

4. Data Retention

• Account data: Retained while your account is active. Deleted upon account deletion.
• Training data: Retained while your account is active. Deleted upon account deletion.
• Progress photos: Stored in private cloud storage accessible only to you. Deleted upon account deletion.
• AI generation logs: Metadata only (model, timing, success/failure). Retained for operational purposes. No prompt content stored long-term.
• Feedback: Retained until resolved, then archived. Deleted upon account deletion.

5. Your Rights

You have the right to:

• Access your data: View your data within the app at any time
• Correct your data: Update your profile and training data directly in the app
• Delete your data: Request account deletion, which removes all associated data
• Export your data: Request a copy of your data by contacting us
• Withdraw consent: Stop using AI features at any time (your core training data remains unaffected)

To exercise these rights, use the in-app feedback tool or email privacy@strengthisneveraweakness.com. We will respond within 30 days.

6. Security

We take reasonable measures to protect your data, including:

• Encryption in transit (TLS) and at rest
• Row-level security policies on all database tables
• Authentication required for all data access
• Private storage buckets for photos and attachments
• Server-side API key protection (AI credentials never exposed to browsers)

7. Cookies & Tracking

SINW uses essential cookies only — specifically, authentication session cookies required for you to stay logged in. We do not use advertising cookies, analytics trackers, or third-party tracking pixels.

8. Children's Privacy

SINW is not intended for users under the age of 16. We do not knowingly collect data from children. If you believe a child has created an account, please contact us and we will delete it promptly.

9. International Data Transfers

Your data may be processed in the United States, where our service providers are located. By using SINW, you consent to this transfer. We ensure our providers maintain appropriate data protection standards.

10. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you via the platform or by email. The “Last updated” date at the top reflects the most recent revision.

11. Contact

For privacy-related questions or requests, contact us at privacy@strengthisneveraweakness.com or use the in-app feedback tool.