Privacy Policy

Information we collect

We may collect the following:

• Account information — your email address and password (stored in hashed form by our authentication provider), whether your email is verified, and an account identifier used as the key for your records.
• Profile & health information — your name, and any of the following you choose to provide: gender, date of birth, height, weight, phone number, and profile picture. Height, weight, date of birth and injury information are health-related data, and we treat them accordingly (see “Legal bases” below).
• Training & fitness data — your workout history, logged sets, reps and loads, personal records, fitness levels, equipment preferences, injury flags, rest days, and challenge attempts. This is what powers your personalised, adaptive sessions.
• Photos and video you upload — if you enter a challenge, the video of your attempt and its generated thumbnail, plus any profile picture you set. We access your device’s camera, microphone and photo library only to let you record or choose this content; we store only the resulting file you submit.
• Social & interaction data — who you follow, accounts you block, reactions and votes you cast, and behavioural signals such as replacing or avoiding particular exercises, which we use to tailor your sessions.
• Device & diagnostic data — device type, operating system, a push-notification registration token for your device, and crash and error reports. Crash reports may include your account identifier and details of the request that failed.
• Apple Health (iOS only, optional) — if you allow it, we read the distance and duration of a run you have already recorded in Apple Health so you don’t have to retype it. This is read-only, and the values reach us only as part of your own workout log.

We do not collect your location. The app requests no location permission and contains no geolocation tracking. We also do not collect your contacts, browsing history outside the app, or financial information, and we use no advertising identifiers.

How we use your information

• To provide, personalise, and improve our services and your training.
• To generate adaptive workouts and surface relevant challenges.
• To operate the social features — showing your activity to people who follow you, and letting you follow, react to, and block others.
• To host challenge videos, display them to other participants for verification, and rank results on leaderboards.
• To diagnose crashes and errors so we can fix them.
• To communicate with you and send updates you have asked for.
• To analyse usage and trends so we can optimise the Platform.
• To keep the Platform secure and to comply with our legal obligations.

What other people can see

FullAthlete has social and competitive features, so some of what you do is visible to other users. Specifically:

• Your display name and profile picture are shown to other users who can see your activity.
• People who follow you can see activity you log — for example that you completed a given exercise — in their feed, and can react to it.
• If you enter a challenge, your submitted video, your result, and your position on that challenge’s leaderboard are visible to other participants, who may vote to verify your attempt.

You control this by choosing whether to enter challenges and by blocking accounts you don’t want to interact with. Content you have shared into a challenge may remain visible in that challenge after you delete your account, in a form that does not identify you.

How we share information

We do not sell your personal information. We share it only:

• With other users, as described in “What other people can see” above.
• With the service providers who run our infrastructure, acting only on our instructions and not for their own purposes:
  • Google Firebase — account sign-in, profile storage, and push notifications.
  • DigitalOcean — application hosting, our database, and storage of uploaded video and images.
  • Bugsnag (SmartBear) — server-side error reporting.
  • Sentry — app crash and error reporting.
• With law enforcement or government agencies where required by applicable law.
• In connection with a merger, acquisition, or sale of assets, where your information may be transferred as part of that transaction.

We do not sell your personal information, we do not share it with advertisers, and we do not track you across other companies’ apps or websites.

International transfers. Some of these providers process data outside your country — in particular, our crash reporting with Sentry is hosted in the United States. Where we transfer personal information out of the UK or European Economic Area, we rely on the safeguards permitted under applicable data protection law, such as standard contractual clauses.

Legal bases for using your information

If you are in the UK or European Economic Area, we rely on the following legal bases:

• Performance of a contract — to provide the account, training and challenge features you sign up for.
• Your explicit consent — for health-related information such as your height, weight, date of birth and injury details, which count as a special category of data. You give this consent when you choose to provide those details, and you can withdraw it at any time by removing them or deleting your account.
• Our legitimate interests — to keep the Platform secure, fix crashes, and understand how the app is used so we can improve it.
• Legal obligation — where the law requires us to retain or disclose information.

How long we keep your information

We keep your information for as long as your account exists. There is no fixed expiry period. When you delete your account, we erase your data — your profile, workout history and progress, uploaded video and images, and your authentication record — from our database, our file storage, and our authentication provider. The only thing that remains is content you contributed to a shared challenge, in a form that does not identify you.

You can delete your account from within the app, or request deletion at fullathlete.com/account-deletion.

Security

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, or disclosure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights

You have the right to access a copy of your personal information, correct it if it is wrong, delete it, receive it in a portable format, object to or restrict how we use it, and withdraw any consent you have given. Withdrawing consent does not affect anything we did before you withdrew it.

You can manage much of this from within the app — your profile details are editable, and account deletion is available in-app and at fullathlete.com/account-deletion. For anything else, contact us at contact@fullathlete.com.

If you are in the UK or European Economic Area and think we have handled your information improperly, you also have the right to complain to your local data protection authority.

Children’s privacy

The Platform is not intended for anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us information, please contact us so we can remove it.

Changes to this policy

We may update this Privacy Policy to reflect changes in our practices. When we do, we will revise the “Last updated” date above. We encourage you to review this page periodically.

Contact us

Questions or concerns about your privacy? Reach us at contact@fullathlete.com.