Loading...
Manage how PurGrit uses your data. Changes take effect immediately.
PurGrit (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy describes what personal data we collect, how we use it, who we share it with, and the rights you have regarding your information.
When you create an account we collect your email address, display name, and (if using social login) your Google or Apple account identifier. We do not store your Google or Apple password.
We collect the workout sessions you log, including exercise selections, sets, reps, weights, rest periods, and workout duration. This data is used to power progress tracking, personal records, and AI coaching recommendations.
If you choose to enter them, we collect bodyweight, height, and other body composition metrics you voluntarily provide. This information is stored in your profile and never shared with advertisers.
On Android, with your explicit permission, PurGrit may read from and write to Android Health Connect (heart rate, steps, active calories). On iOS, similar permissions apply via HealthKit. You may revoke these permissions at any time through your device settings. Health data is processed on-device and is never uploaded to our servers without your explicit action.
We automatically collect device type, operating system version, app version, IP address (truncated), session duration, and feature interaction events for the purpose of diagnosing issues and improving the Service.
Form-check videos, progress photos, challenge posts, and other content you voluntarily submit are stored in association with your account and, where you choose to share publicly, displayed to other users.
We do not sell your personal data to third parties. We do not use your health or body metrics data for advertising purposes.
Your data is stored in Supabase (a managed PostgreSQL service) on servers located in the United States. Supabase implements encryption at rest (AES-256) and in transit (TLS 1.2+). Workout data you have not synced remains on your device only.
We implement appropriate technical and organisational security measures, including access controls, audit logging, and periodic security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
We retain your personal data for as long as your account is active or as needed to provide the Service. You may request deletion at any time (see Section 6).
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database & Auth | Account, workout data |
| Google OAuth | Social login | Email, display name |
| Apple Sign In | Social login | Email (relayed or real) |
| Android Health Connect | Health data sync | Read/write on device only |
| Stripe | Payment processing | Billing details (PCI-compliant) |
| Analytics Provider (TBD) | Product analytics | Pseudonymous usage events |
| Error Monitoring (TBD) | Crash reporting | Anonymised stack traces |
All third-party processors are contractually bound to process your data only on our behalf and in accordance with applicable privacy law.
We use essential cookies and localStorage tokens to maintain your session and preferences (theme, consent state). We do not use third-party advertising cookies. Where analytics cookies are used, they are only set after you grant consent (see the preference panel above).
Depending on your jurisdiction you may have the following rights:
To exercise any of these rights, email contact@purgrit.app. We will respond within 30 days. For account deletion, you may also go to Account → Settings → Delete Account.
If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your data under the following legal bases:
You have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the UK, or your national DPA in the EEA).
California residents have the right to know what personal information we collect and how it is used, to request deletion, to opt out of the sale of personal information (we do not sell personal information), and to non-discrimination for exercising their rights.
To submit a verifiable consumer request, contact us at contact@purgrit.app.
The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or an in-app banner. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.
Questions, requests, or concerns about this Privacy Policy: