ApexForm Privacy Policy
Last Updated: December 19, 2024
This Privacy Policy describes how ApexForm collects, uses, and protects your personal information when you use our fitness application.
1. Information We Collect
Account Information:
- Name and email address when you create an account
- Profile photo if you choose to upload one
- Authentication information (Google Sign-In, Apple Sign-In)
Fitness Data:
- Your fitness level, gender, and age range
- Equipment preferences and workout history
- Exercise performance data (weights, reps, RPE ratings)
- Workout completion and progress metrics
Device Information:
- Device type, operating system, and app version
- Usage analytics and app performance data
- Crash reports and error logs (anonymized)
Optional Data:
- Health integration data (if you connect Apple Health or similar)
- Motion analysis data (if you use video form checking)
- Biometric data (if you use health tracking features)
2. How We Use Your Information
To Provide Our Service:
- Personalize workout recommendations based on your fitness level
- Track your progress and adjust programming accordingly
- Provide evidence-based weight suggestions and progression
- Sync your data across devices
To Improve Our App:
- Analyze usage patterns to enhance user experience
- Debug technical issues and improve app performance
- Develop new features based on user needs
- Conduct research on fitness programming effectiveness
To Communicate:
- Send important app updates and security notifications
- Provide customer support and respond to inquiries
- Share fitness tips and educational content (with your consent)
Legal Compliance:
- Comply with applicable laws and regulations
- Protect our rights and prevent misuse of our service
- Respond to legal requests and court orders
3. Information Sharing
We DO NOT sell your personal data to third parties.
Limited Sharing:
- Service Providers: We may share data with trusted service providers who help us operate the app (hosting, analytics, customer support)
- Business Transfers: If ApexForm is acquired or merged, your data may be transferred as part of that transaction
- Legal Requirements: We may disclose information if required by law or to protect our rights and users' safety
Aggregated Data:
- We may share anonymized, aggregated statistics about app usage
- Individual users cannot be identified from this data
- This helps us improve the app and contribute to fitness research
With Your Consent:
- We will only share your personal information with third parties if you explicitly consent
- You can withdraw consent at any time through your account settings
4. Data Security
Encryption:
- All data is encrypted in transit using industry-standard TLS
- Sensitive data is encrypted at rest in our secure databases
- Authentication tokens are securely stored and regularly rotated
Access Controls:
- Strict access controls limit who can view your data
- All access is logged and monitored for suspicious activity
- Regular security audits and penetration testing
Data Centers:
- We use reputable cloud providers with strong security measures
- Data is stored in secure, SOC 2 compliant data centers
- Regular backups ensure data availability and integrity
Your Security:
- Use strong, unique passwords for your account
- Enable two-factor authentication if available
- Report any suspicious activity immediately
5. Your Rights and Choices
Access and Portability:
- View all data associated with your account
- Export your workout history and progress data
- Request a copy of your personal information
Correction and Updates:
- Update your profile information at any time
- Correct inaccurate fitness data and metrics
- Modify privacy preferences and data sharing settings
Deletion:
- Delete your account and all associated data
- Request deletion of specific data types
- Data deletion is permanent and cannot be undone
Marketing Communications:
- Opt out of promotional emails and notifications
- Control push notification preferences
- Unsubscribe from fitness tips and educational content
Data Processing:
- Object to certain types of data processing
- Restrict how we use your information
- File complaints with data protection authorities
6. Children's Privacy
Age Requirements:
- ApexForm is intended for users 13 years and older
- Users under 18 should have parental consent before using the app
- We do not knowingly collect data from children under 13
Parental Controls:
- Parents can review and delete their child's account
- Parents can control data sharing and privacy settings
- We will delete any data from users under 13 upon discovery
Educational Use:
- Schools and fitness programs may use ApexForm with proper consent
- Special protections apply for educational accounts
- Parents and guardians maintain control over student data
7. Data Retention
Active Accounts:
- We retain your data while your account is active
- Data is kept to provide personalized fitness recommendations
- You can delete specific data types at any time
Inactive Accounts:
- Accounts inactive for 2+ years may be automatically deleted
- We will notify you before any automatic deletion
- You can reactivate your account to prevent deletion
Deleted Accounts:
- Most data is deleted within 30 days of account deletion
- Some data may be retained for legal or security purposes
- Anonymized data may be retained for research purposes
Legal Requirements:
- We may retain data longer if required by law
- Court orders may require us to preserve specific data
- Security incidents may require extended retention periods
8. International Data Transfers
Global Service:
- ApexForm is available worldwide and data may be processed globally
- We ensure adequate protection regardless of processing location
- Data transfers comply with applicable privacy laws
Safeguards:
- We use standard contractual clauses for international transfers
- Regular assessments ensure continued data protection
- Users in the EU receive additional protections under GDPR
Your Location:
- We may process your data in countries other than your residence
- We maintain the same privacy standards regardless of location
- You can contact us with questions about international transfers
9. Third-Party Integrations
Health Apps:
- Apple Health, Google Fit integration requires separate consent
- We only access data you explicitly authorize
- You can revoke health app permissions at any time
Social Sign-In:
- Google Sign-In and Apple Sign-In follow their respective privacy policies
- We only receive basic profile information (name, email)
- You can disconnect social accounts from your profile
Analytics:
- We use privacy-focused analytics tools to improve the app
- Personal information is not shared with analytics providers
- You can opt out of analytics in your privacy settings
Payment Processing:
- Payment information is processed by secure third-party providers
- We do not store credit card or payment details
- Payment providers have their own privacy policies
10. Changes to This Policy
Policy Updates:
- We may update this Privacy Policy to reflect changes in our practices
- Material changes will be notified through the app or email
- Continued use of the app constitutes acceptance of updates
Notification:
- We will provide 30 days notice for significant changes
- You can review policy changes before they take effect
- You can delete your account if you disagree with changes
Version History:
- Previous versions of this policy are available upon request
- We maintain records of all policy changes and effective dates
- You can contact us with questions about policy changes
11. Contact Information
Data Protection Officer:
Email: privacy@apexform.fit
Response time: Within 72 hours
General Support:
Email: support@apexform.fit
In-app support: Available through Help & Support section
Legal Requests:
Email: legal@apexform.fit
For law enforcement and legal compliance matters
Mailing Address:
ApexForm Data Protection
[Address to be updated]
EU Representative:
[To be designated if serving EU users]
For all privacy-related questions, concerns, or requests, please contact our Data Protection Officer. We are committed to resolving your privacy concerns promptly and transparently.
← Back to Home