AMFIT

Privacy Policy

Last updated: June 16, 2025

This Privacy Policy describes what data AM.FIT collects, how it is used and protected. We take your privacy seriously and handle your data in accordance with common personal data protection standards.

1. What Data We Collect

Account data:

  • Email address — used for authentication, notifications, and support. This is the only required personal identifier.
  • Name and phone number — optional, provided by the user in profile settings.

Service usage data:

  • Workout history (dates, types, duration);
  • Exercise ratings (likes, dislikes, favorites) — for algorithm personalization;
  • Equipment settings and zone preferences.

Support request data:

  • Message content submitted via the contact form;
  • Attached files (at the user's discretion).

Technical data:

  • Session data (Supabase Auth cookies);
  • Basic browser technical data for proper service operation;
  • Camera data (gesture control) is processed strictly locally on your device, without recording or transmission to servers.

We do not collect payment card data — it is processed directly by payment providers.

2. How We Use Your Data

  • Authentication & security: for account login and protection against unauthorized access.
  • Personalization: the workout generation algorithm uses your exercise ratings and preferences.
  • Support: to respond to your inquiries via the contact form.
  • Notifications: only for matters directly related to your account or subscription.
  • Platform analytics: in anonymized form to improve the service.

We do not sell your data to third parties and do not use it for advertising without your explicit consent.

3. Data Storage

Data is stored on Supabase servers (PostgreSQL) in cloud infrastructure. Data is protected by encryption in transit (HTTPS/TLS) and at rest.

Workout history is stored for 30 days for free users (then automatically deleted), or indefinitely for Premium users.

4. Telegram Notifications

When a support request is submitted, we receive a Telegram bot notification for quick response. The notification contains the topic, the fact of the request, as well as your name and email address for feedback purposes. This data is intended solely for internal AM.FIT team use and is not shared with third parties.

5. Your Rights

  • Access: request information about what data is stored about you.
  • Correction: update personal data through profile settings.
  • Deletion: request complete deletion of your account and associated data via the contact form.
  • Portability: receive a copy of your data in machine-readable format.
  • Withdrawal: stop using the service at any time.

6. Cookies

We use only functional cookies necessary for authentication (Supabase session tokens). We do not use advertising or tracking cookies.

7. Third-Party Services

  • Supabase — database, authentication, file storage;
  • Vercel — platform hosting and deployment;
  • Stripe / LiqPay — payment processing (card data is not shared with us);
  • Telegram API — internal team notifications.

8. Policy Changes

We may update this Policy. We will notify you of material changes via email. The current version is always available on this page.

9. Contact

For privacy and data protection questions, please contact us via the contact form.