Privacy Policy & Data Rights

1. Introduction

STRKYR Fitness ("STRKYR", "we", "us", or "our") provides strength training, workout tracking, coach-athlete collaboration, and analytics tools. This Privacy Policy details our data collection, processing, and protection standards in accordance with the European Union / United Kingdom General Data Protection Regulation (GDPR), the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), the Washington My Health My Data Act, and applicable US state privacy laws.

2. Categories of Information We Collect

• Account & Identity Data: Name, email address, profile avatar image, phone number (optional), and user role (Trainer or Client) provided directly or via Google OAuth.
• Workout & Fitness Activity Data: Logged exercises, weight (lbs/kg), reps, sets, RPE notes, coach workout assignments, session timestamps, and estimated 1-Rep Max (1RM) calculations.
• Nutritional & Supplement Preferences: Calorie/macro goals, supplement regimens, and hydration notes entered voluntarily by athletes or coaches.
• Payment & Subscription Data: Subscription status and plan tier processed securely via Stripe or Google Play Billing. STRKYR never stores raw payment card numbers.
• Technical Logs: IP address, device type, browser telemetry, and performance metrics utilized exclusively for error diagnosis and platform stability.

3. Lawful Basis for Processing (GDPR Article 6 & 9)

We process your data under the following legal bases:

• Contractual Necessity: To deliver workout logging, coach-client program assignments, and analytics services as agreed in our Terms of Service.
• Explicit Consent (Special Category / Health Data): You explicitly consent to the logging and calculation of your physical exercise metrics. You may revoke consent at any time by deleting your account.
• Legitimate Interests: To maintain system security, prevent fraud, and optimize database responsiveness.

4. US State Privacy Rights (CCPA / CPRA & State Health Acts)

Under the California Consumer Privacy Act (CCPA/CPRA), Washington My Health My Data Act, Nevada SB 370, Virginia VCDPA, and Colorado CPA:

• Right to Know & Access: You can request disclosure of specific categories of personal and health data collected.
• Right to Delete: You can permanently erase all personal and fitness data held in our systems.
• Right to Correct: You can rectify inaccurate personal or client information directly in your profile settings.
• No Selling / Sharing of Personal Information: We do NOT sell personal data or share consumer health data with advertising networks.
• Non-Discrimination: Exercising your privacy rights will never result in denied service, degraded features, or differing pricing.

5. GDPR Rights (EU & UK Residents)

EU and UK users possess comprehensive rights under Articles 12–23 of the GDPR:

• Right of Access (Art. 15) & Portability (Art. 20): Download an exact machine-readable JSON copy of all workouts, client records, and profile details via Profile → Download My Data.
• Right to Rectification (Art. 16): Modify inaccurate profile details instantly in your settings.
• Right to Erasure / "Right to be Forgotten" (Art. 17): Instant and permanent deletion of your account and all associated client workout trees.
• Right to Restriction & Objection (Art. 18/21): Opt out of non-essential communications and analytics.

6. How to Exercise Your Privacy Rights

We provide automated self-service controls directly within the application:

7. Data Protection Officer & Contact

If you have any questions regarding your data rights, GDPR compliance, or data processing, please contact our Data Protection representative directly: