Privacy Policy

1. Information We Collect

Account Data

• Email address, first name, last name
• Age, biological sex, height, weight, and fitness goals
• Profile photo (optional)
• Authentication credentials (stored securely via Supabase Auth)

Fitness & Health Data

• Workout logs (exercises, sets, reps, weight, RPE, duration)
• Personal records (PRs) and estimated one-rep max calculations
• Body metrics: weight history, body fat %, body measurements
• Progress photos (private, encrypted — visible only to you, or your coach if you've granted access)
• Nutrition logs: food entries, macro/calorie data, water intake

AI Interaction Data

• Conversations with the AI coach, including your questions and AI responses
• Fitness context sent to the AI (recent workouts, PRs, nutrition summaries, goals)
• AI-generated workout programs and meal plans you save

Social & Squad Data

• Squad memberships, posts, and activity in squad feeds
• Challenge participation and leaderboard data
• Hype (like) interactions on squad content

Coach–Client Data (Coach Tier)

• As a Coach: your clients' fitness data, workout history, and progress metrics — accessible only with client consent
• As a Client: your coach can view workout logs, body metrics, program compliance, and progress photos you have shared

Device & Technical Data

• IP address, device type, OS version, app version
• Crash reports and usage analytics
• Push notification tokens (if notifications enabled)

Payment Data

Subscription payments are processed by Stripe, Inc. We do not store your full credit card number. See Stripe's Privacy Policy.

2. How We Use Your Information

• Provide, maintain, and improve the SquadLift app
• Generate personalized AI coaching recommendations, workout programs, and meal plans
• Track your fitness progress and display analytics, charts, and PRs
• Enable squad social features (feed, challenges, leaderboards)
• Process subscription payments and manage your account tier
• Send push notifications you have enabled
• Detect and prevent fraud, abuse, or policy violations
• Comply with legal obligations

3. AI & Automated Processing

SquadLift uses Claude AI by Anthropic, PBC to power the AI personal trainer, program generator, and meal planning features.

When you interact with the AI coach or request a generated program, we send a structured summary of your fitness context to the Claude API. This may include: your goals, recent workout summaries, current PRs, body weight, nutrition targets, and the text of your conversation. We do not send progress photos, payment information, or raw personal identifiers (name/email) to the AI API.

4. Data Sharing & Sub-Processors

We do not share your data with advertisers, data brokers, or any other third parties.

5. Health Data — Special Notice

SquadLift collects fitness and wellness data. SquadLift is a consumer wellness application — it is not a covered entity under HIPAA. Your fitness data in SquadLift is not Protected Health Information (PHI) under HIPAA.

Kevin Carroll, DO is the developer of SquadLift. His role here is as an app developer, not as your physician. SquadLift does not create a doctor-patient relationship. Do not use SquadLift to make medical decisions. Consult a licensed physician before starting any fitness or nutrition program.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

7. Your Rights

• Access: Request a copy of the data we hold about you
• Deletion: Delete your account and all associated data via Profile → Settings → Account → Delete Account, or by emailing us
• Portability: Request your data in a machine-readable format
• Correction: Update inaccurate information via your profile settings
• Opt-out: Disable push notifications at any time via device settings

California residents have additional rights under CCPA. EU/UK residents have rights under GDPR. To exercise any right, email 7thenterprisesolutions+support@gmail.com.

8. Security

We use industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest via Supabase, and strict access controls. No system is 100% secure — if you suspect a breach, contact us immediately.

9. Children's Privacy

SquadLift is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Policy periodically. We will notify you of material changes via in-app notification or email. Your continued use after changes take effect constitutes acceptance.

11. Contact Us

7th Enterprise Solutions LLC
9234 Kingston Pike #403, Knoxville, TN 37922
Email: 7thenterprisesolutions+support@gmail.com