Privacy Policy — The Fitness Garage

Effective date: 2026-10-09 · Version: 2026-10-09

Summary (not a substitute for the full text): we collect what we need to train and coach you, including health data, and only with your consent; your coach sees what is needed to coach you; we do not sell your data or use it for advertising; AI providers process it on our behalf without training their models; you can access, correct and delete your data and your account from the app.

1. Who is responsible for your data

The Fitness Garage, LLC ("TFG", "we"), 1429 Nicholas Lane, Little Elm, TX 75068, USA, info@the-fitness-garage.com, is responsible for the processing of your personal data in the TFG apps for iPhone and Android, the coach tools, the TITAN assistant and our website (the "Services"). This policy is also our Privacy Notice (Aviso de Privacidad) for people in Mexico and our Consumer Health Data Privacy Policy for people in the U.S. states that require one.

2. Data we collect

• 2.1. Account and profile: name, email, phone, password (stored only as a secure hash), date of birth, sex, height, weight, country, language, photo, goals and preferences.
• 2.2. Health and fitness data (sensitive data): health questionnaire, medical history, injuries, conditions and medications you choose to tell us; body measurements; progress photos; workouts, sets and weights; nutrition logs, meal plans and water; check-ins; sleep, steps, heart rate and other metrics from your devices.
• 2.3. Data from health apps and devices — only with your permission: Apple Health (HealthKit) on iPhone; Health Connect and Samsung Health on Android (for example: steps, sleep, active calories, exercise, distance, heart rate, heart-rate variability, oxygen saturation and respiratory rate). We may also write workouts you complete in TFG back to those apps if you allow it.
• 2.4. Location — only with your permission: precise location while you record an outdoor run or walk with the screen open, to draw your route and calculate distance and pace; and approximate location to show the local weather. We do not track your location in the background or sell it.
• 2.5. Camera, microphone and photos — only with your permission: to take progress or food photos, scan menus and talk to TITAN. Wake-word detection runs on your device.
• 2.6. Content and communications: messages with your coach and with TITAN, voice notes, photos and comments.
• 2.7. Purchases: plan, price, dates and status of your subscriptions. Payments are processed by Apple, Google Play or Stripe; we do not store full card numbers.
• 2.8. Technical data: device model, operating system, app version, language, time zone, push-notification token, IP address and error logs. We do not use third-party advertising trackers in the apps.
• 2.9. Coach data: for coaches, also professional profile, certifications, availability, plans, prices, connected payment account and (if you connect it) Google Calendar, as described in Section 12.

3. Why we use your data

• 3.1. Primary purposes (needed for the Services): to create and manage your account; to personalize and deliver training, nutrition and coaching; to show your information to your coach; to run TITAN; to process purchases, renewals, cancellations and refunds; to send you service notifications (sessions, messages, reminders, renewal notices); to provide support; to keep the Services secure and prevent fraud; and to comply with the law.
• 3.2. Secondary purposes (optional): to send you news, offers and content about TFG; to invite you to surveys; and to create aggregated, de-identified statistics to improve the Services. You can refuse or withdraw consent for secondary purposes at any time by writing to info@the-fitness-garage.com or using the unsubscribe option, without affecting the Services.
• 3.3. Health data is used only to provide the Services you request. We never use it for advertising, we never sell it, and we never use it to decide your eligibility for insurance, credit or employment.

4. Your consent

We ask for your express consent before collecting your health data, in a box separate from the acceptance of the Terms, and we ask for the permission of your device before accessing Apple Health, Health Connect, Samsung Health, location, camera or microphone. You can withdraw consent at any time (Section 8); some features will stop working.

5. Who sees and receives your data

• 5.1. Your coach. When you join a coach (by code, invitation or purchase), that coach and the team members they authorize see the information needed to coach you: profile, goals, health questionnaire and medical history, measurements, progress photos, workouts, nutrition, check-ins and messages. Coaches are bound by confidentiality and may only use your data to coach you. If you stop working with a coach, they stop seeing your new data.
• 5.2. Service providers acting on our behalf, under contract: Amazon Web Services (hosting and storage, United States); Apple and Google (purchases, notifications and the health platforms you connect); Stripe (payments); AI providers OpenAI, Anthropic and Google (to run TITAN; they do not use your data to train their models and do not use it for their own purposes); email, mapping and weather providers.
• 5.3. Authorities, when required by law or to protect the rights, safety or property of people or of TFG.
• 5.4. Successors, in case of a merger, acquisition or sale of assets, under this same policy.
• 5.5. We do not sell personal data and we do not share it for cross-context behavioral advertising. Under Mexican law, transfers to service providers acting on our behalf and to companies under common control do not require your consent; any other transfer that requires it will be made only with your consent.

6. Retention

We keep your data while your account is active. When you delete your account, we delete or de-identify your data from our active systems within thirty (30) days; backup copies are deleted on their regular cycle (normally within ninety (90) days). We keep for longer only what the law requires (for example, tax and billing records) or what is needed to resolve disputes, prevent fraud or defend legal claims, with restricted access.

7. Security

We use administrative, technical and physical safeguards: encryption in transit, hashed passwords, access controls by role, audit logs and backups. No system is 100% secure; if a security breach significantly affects your rights, we will notify you as required by law.

8. Your rights

• 8.1. In the app you can view and correct your profile, delete photos and records, disconnect health apps, turn off permissions and delete your account (Profile/Settings → Delete account).
• 8.2. Mexico (ARCO rights): you may request Access, Rectification, Cancellation or Opposition regarding your data, limit its use or disclosure, and revoke your consent, by writing to info@the-fitness-garage.com with your name, the email of your account, a description of the request and, if applicable, a document that proves your identity. We will reply within twenty (20) business days and, if it applies, carry it out within the following fifteen (15) business days. You may also go to the competent data protection authority.
• 8.3. United States: depending on your state (for example, California, Texas, Washington, Nevada, Colorado, Virginia or Connecticut), you may have the right to know and access your data, receive a copy, correct it, delete it, limit the use of sensitive data, withdraw consent for health data, obtain the list of third parties with which we share it, and appeal our decision. We do not discriminate against you for exercising your rights. We will respond within the term required by law (normally 45 days). An authorized agent may act for you with proof of authorization.
• 8.4. Other countries: you may exercise the rights your local law grants you by writing to the same address.

9. Apple Health, Health Connect and Samsung Health

Data we receive from these platforms is used only to provide the features of the app you use, is not used for advertising or marketing, is not sold, is not transferred to data brokers and is not used to determine creditworthiness. It is shared only with your coach (Section 5.1) and with the service providers needed to provide the feature. TFG's use of data received from Health Connect complies with the Health Connect Permissions policy, including its Limited Use requirements. You can revoke access at any time in the settings of your phone or of the health app.

10. Children

The Services are only for people 18 or older. We do not knowingly collect data from minors; if we learn that we have, we delete it and close the account.

11. TITAN (artificial intelligence)

To answer you, TITAN sends to AI providers the message, voice or photo you submit and the context of your profile and training that is needed. Providers process it only to generate the answer, under contract, without training their models. AI output is informational and is not medical advice (see the Terms of Use).

12. Google Calendar (coaches)

Coaches may connect their Google account so the platform can schedule their sessions. With permission, we access the Google email address and the Google Calendar events scope, only to: (a) create events with a Google Meet link for the appointments booked with their clients, inviting the client; and (b) delete those events if the appointment is cancelled. We do not read other events, we do not store copies of events unrelated to TFG, and we never use Google user data for advertising. Coaches can disconnect Google at any time in the coach tools (My agenda → Google connected → Disconnect) or at https://myaccount.google.com/permissions. TFG's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

13. International transfers

TFG is based in the United States and our providers may process data in the United States and other countries. When you use the Services from Mexico or another country, your data is transferred to the United States under contracts that require providers to protect it as described here.

14. Website

Our website measures visits without cookies and without third-party trackers. If we ever add advertising measurement tools on the website, we will update this policy first and, when required, ask for your consent; they will never receive health data.

15. Changes

We may update this policy. For material changes we will notify you in the app or by email before they take effect and, when required, ask you to accept again. The version and date at the top tell you which version applies.

16. Contact

The Fitness Garage, LLC — Personal data department · 1429 Nicholas Lane, Little Elm, TX 75068, USA · info@the-fitness-garage.com