Privacy Policy

CoupleFit is a two-person app. You pair with one partner, you each set the same weekly workout goal, and you photograph your workouts so the other person can see them. Almost everything the app stores exists to make that shared week work.

• Your workout photos are deleted automatically 24 hours after they are uploaded. You do not have to do anything.
• We do not run ads and we do not sell or rent your personal data. There are no advertising identifiers, ad networks or data brokers involved.
• We do not collect location, and we do not touch Apple Health or HealthKit.
• Your partner sees your shared week by design. That is the product, and it is described in full in section 6.
• Deleting your account in the app really deletes it — permanently, and it cannot be undone.

The rest of this page sets out the detail. If anything here is unclear, email couplefitapp@gmail.com.

CoupleFit (“CoupleFit”, “we” or “us”) publishes the CoupleFit iPhone app and is the data controller for the personal data described in this policy. That means we decide what is collected and why, and we are responsible for looking after it.

Email is our contact channel for privacy: couplefitapp@gmail.com. It reaches a person, and it is the same address used for the rights requests in section 11.

This is the complete list. If something is not on it, CoupleFit does not collect it.

Account identity

You create an account with Sign in with Apple or with Google Sign-In. We receive your name and email address from whichever you choose. If you use Sign in with Apple and ask Apple to hide your email, we receive a private relay address instead of your real one, and the app works exactly the same way.

Profile photo

Optional, and chosen by you. If you set one, it is stored with your account and shown to your partner.

Workout photos

Every workout you log is a photo you take in the app. It is shared with the partner you are paired with, and it is automatically deleted 24 hours after it is uploaded.

Fitness activity

Your weekly goal (a number from one to seven days), which days you logged a workout, your current streak, and the optional stake you and your partner agree on for the week.

Partner connection

The link between your account and your partner’s. Once two people are paired, the information above becomes visible to the other partner. That is the purpose of the product rather than a side effect, and section 6 spells out exactly what they see.

Push notification token

A device token, so we can notify you when your partner logs a workout. It identifies a device for delivery, not you personally.

Invite codes

A short code used to connect two accounts. Invite codes are short-lived, they expire, and they are used for nothing else.

Stated plainly, because it matters:

• No advertising identifiers, no third-party ad networks, and no data brokers. CoupleFit does not show you ads and does not participate in any advertising ecosystem.
• No location data. Not precise, not approximate, not at any point.
• No health or HealthKit data. CoupleFit does not read from or write to Apple Health. It does not know your heart rate, your steps, your weight or anything like it.
• No behavioural analytics and no session-recording SDKs. We do not track how you move around the app or replay your sessions.
• We never sell or rent personal data. Not to advertisers, not to brokers, not to anyone.

Each item we collect maps to one purpose. Where the GDPR applies, the legal basis is given in brackets.

• Account identity — to create your account, sign you in and let your partner recognise you. [Performance of a contract.]
• Profile photo — to show your partner who they are paired with. [Consent, which you give by choosing to add one.]
• Workout photos — to show your partner that you trained, for the 24 hours the photo exists. [Performance of a contract.]
• Fitness activity — to run the shared week: the goal, the days logged, the streak and the stake. [Performance of a contract.]
• Partner connection and invite codes — to pair two accounts and keep them paired. [Performance of a contract.]
• Push notification token — to tell you when your partner logs a workout. [Consent, which iOS asks you for and which you can withdraw at any time in Settings.]

Pairing is the point of CoupleFit, so it is worth being explicit. Once you are connected to a partner, the information described in section 3 is visible to them: your name, your profile photo if you set one, your weekly goal, which days you logged a workout, your current streak, the stake you agreed on together, and your workout photos for the 24 hours they exist before deletion.

This sharing is symmetrical — you see the same about them — and it is not optional while you are paired. If you no longer want to share, remove your partner in the app. Removing a partner clears the shared week and ends the streak for both of you.

We do not run our own servers. CoupleFit is built on Google Firebase, which acts as our data processor: Google stores and processes data on our instructions and for no purposes of its own. Specifically we use Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Messaging and Cloud Functions.

When subscriptions launch, they will be sold as an Apple In-App Purchase and handled by Apple, with subscription status managed through RevenueCat. Your payment card details never reach CoupleFit — we do not see them, receive them or store them.

Beyond these processors, we do not share your personal data with anyone.

Your data is stored in the United States, in Google’s us-central1 region.

If you use CoupleFit from outside the United States, using the app means your personal data is transferred to and stored there.

Transfers of personal data originating in the EEA or the UK are covered by the Standard Contractual Clauses adopted by the European Commission, together with the UK International Data Transfer Addendum. Both form part of Google’s Cloud Data Processing Addendum, which governs our use of Firebase.

Workout photos

Deleted automatically 24 hours after upload. This happens on its own. You do not need to ask, and there is no archive kept behind the scenes.

Account data

Your identity, profile photo, weekly goal, logged days, streak and stake are kept until you delete your account. Your push notification token is kept while your account exists so notifications can reach you. Invite codes expire on their own.

Deleting your account

You can delete your account from within the app. Doing so permanently removes the account, its profile photo, its workout photos and its shared history. This cannot be undone, and we cannot restore a deleted account for you afterwards.

Removing a partner

Removing your partner clears the shared week and ends the streak. It does not delete either account.

CoupleFit runs entirely on Google Firebase and relies on that platform’s security, including encryption of data in transit and at rest. Access to your data is controlled by Firebase Authentication and by Firestore and Cloud Storage security rules, so that a pair’s data stays with that pair.

The 24-hour deletion of workout photos is itself a privacy measure: the less that is stored, the less there is to lose.

No online service can be completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you and the relevant regulator where the law requires it.

Wherever you live, you can ask us to do the following with your personal data.

• Access — get a copy of what we hold about you, and an explanation of what it is used for.
• Correction — have inaccurate or incomplete information fixed. Your name and profile photo can be changed directly in the app.
• Deletion — have your data erased. The fastest route is to delete your account in the app, which removes it permanently.
• Portability — receive the data you gave us in a structured, commonly used, machine-readable format, or have it sent to another provider where that is technically feasible.
• Objection — object to our processing of your data.
• Withdrawal of consent — withdraw a consent you gave us. Turn off notifications in iOS Settings to withdraw consent for push, or remove your profile photo in the app. Withdrawing consent does not affect processing that already happened.

How to exercise them

Deletion and correction are quickest in the app. For everything else, email couplefitapp@gmail.com from the address on your account and tell us which right you are exercising. We may need to verify who you are before we act, which for a private relay address may mean writing back to the same relay.

We respond within the time the law allows — one month under the GDPR, and 45 days under the CCPA, each extendable where the law permits and we tell you why. Exercising any of these rights is free.

The UK GDPR and the EU GDPR give you the rights listed in section 11, and the following applies specifically to you.

• Controller. CoupleFit is the controller of your personal data, and couplefitapp@gmail.com is the contact point for it.
• Legal bases. Set out per purpose in section 5.
• International transfers. Your data is stored in the United States, as described in section 8.
• Automated decision-making. We do not carry out automated decision-making that produces legal or similarly significant effects, and we do not profile you.
• Complaints. You can lodge a complaint with your local data protection supervisory authority. In the UK that is the Information Commissioner’s Office. We would rather you came to us first at couplefitapp@gmail.com so we can put it right.

The California Consumer Privacy Act, as amended by the CPRA, gives California residents specific rights. Here is how CoupleFit maps onto it.

Categories of personal information we collect

• Identifiers — your name, your email address (which may be an Apple private relay address), your account identifier and your push notification token.
• Visual information — your optional profile photo, and your workout photos for the 24 hours before they are deleted.
• Other information you provide — your weekly goal, the days you logged a workout, your streak and your agreed stake.

We collect this directly from you, and from Apple or Google when you sign in. We use it for the purposes in section 5, and we disclose it only to the service providers in section 7. We keep it for the periods in section 9.

Sale and sharing

We do not sell personal information, and we do not share it for cross-context behavioural advertising as those terms are defined by the CCPA. We have not done so in the preceding twelve months, including for consumers we know to be under 16. We do not use or disclose sensitive personal information for any purpose that would give you a right to limit that use.

Your California rights

• The right to know what we collect, use and disclose.
• The right to delete the personal information we hold about you.
• The right to correct inaccurate personal information.
• The right to opt out of sale or sharing — which is already the position here, since we do neither.
• The right to limit the use of sensitive personal information — again already the position, since we do not use it that way.
• The right not to be discriminated against for exercising any of these rights. We will not deny you the app, charge you a different price, or give you a lower standard of service because you asked us to honour a privacy right.

Exercise any of them by emailing couplefitapp@gmail.com, or by deleting your account in the app. You may use an authorised agent; we may ask for proof of their authority and verify your identity directly.

CoupleFit is not intended for anyone under 13, or under 16 in the European Economic Area. We do not knowingly collect personal data from children below those ages.

If you believe a child has given us personal data, email couplefitapp@gmail.com and we will delete the account and its data.

We may update this policy as the app changes. When we do, we update the Last updated date at the top of this page. Where a change materially affects how we handle your personal data, we will tell you directly before it takes effect, in the way the law requires.

If you keep using CoupleFit after an updated policy takes effect, that updated policy is the one that applies to you.

Questions, requests or complaints about privacy all go to the same place:

• Email — couplefitapp@gmail.com
• Publisher and data controller — CoupleFit