Privacy Policy

1. Who We Are

LazyFit Club ("we", "us", "our") is a fitness application available on Android via Google Play. Our app provides home workout tracking, gamification features (XP, streaks, leaderboards), and optional premium content.

For privacy-related questions, contact us at privacy@lazyfitclub.com.

2. Data We Collect

We collect the following categories of personal data:

• Account information: Name, email address, and password (stored as a secure hash). If you use social sign-in (Google or Apple), we receive your name and email from that provider.
• Profile data: Avatar, fitness level, body weight, height, and age (optional fields you provide).
• Workout data: Exercise sessions, duration, calories burned, streak count, XP earned, achievements, and program progress.
• App usage data: Features used, screens visited, and session timestamps — used to improve the app.
• Device identifiers: Advertising ID (used by AdMob for ad personalisation, if permitted). We do not collect your device's precise location.
• Push notification token: Used to deliver workout reminders you opt into.
• Health data (optional): Exercise and calorie data from Google Health Connect, only if you grant permission. See Section 5.

3. How We Use Your Data

We use the data we collect to:

• Provide, operate, and maintain the LazyFit Club app and its features
• Track your workouts, streaks, XP, and progress over time
• Power the leaderboard and social/friends features
• Send workout reminders and in-app notifications (only if you opt in)
• Process premium subscriptions via Google Play
• Deliver and measure advertising to free-tier users (via Google AdMob)
• Analyse aggregate, anonymised usage trends to improve the app
• Respond to support requests

We do not sell your personal data to any third party.

4. Third-Party Services

LazyFit Club integrates the following third-party services. Each has its own privacy policy governing its use of data:

Service	Purpose	Privacy Policy
Google AdMob	Advertising (free users)	policies.google.com/privacy
Google Sign-In	Optional social authentication	policies.google.com/privacy
Google Health Connect	Optional fitness data sync	policies.google.com/privacy
Google Play Billing	In-app purchases & subscriptions	policies.google.com/privacy
Sign in with Apple	Optional social authentication (iOS)	apple.com/legal/privacy

5. Google Health Connect

If you choose to connect Google Health Connect, LazyFit Club will:

• Read: Exercise session data and calorie data, to display your historical activity and improve progress accuracy.
• Write: Workout sessions completed in LazyFit Club, so they appear in your Health Connect summary.

Health Connect data is used only to provide in-app fitness tracking features. We do not share Health Connect data with advertisers, analytics providers, or any third party. Health Connect data is not used for advertising purposes.

You can revoke Health Connect permissions at any time via Android Settings → Apps → Health Connect → App permissions. Revoking permission stops future syncing but does not delete data already saved to your LazyFit Club account; you can delete that via account deletion.

6. Advertising

Free-tier users see ads delivered by Google AdMob. AdMob may use your device's Advertising ID to serve personalised ads based on your interests. You can opt out of ad personalisation at any time:

• Android: Settings → Privacy → Ads → Opt out of Ads Personalisation

Premium subscribers are never shown ads. We do not share your workout data or personal profile with advertisers.

7. Data Sharing & Disclosure

We do not sell your personal data. We may share data in the following limited circumstances:

• Service providers: We use hosting infrastructure to run our backend servers. These providers process data on our behalf under confidentiality obligations.
• Legal requirements: We may disclose data if required by law, court order, or to protect our legal rights.
• Business transfers: In the event of a merger or acquisition, user data may be transferred. We will notify users before data is transferred and subject to a different privacy policy.

Leaderboard data (username and rank) is visible to other app users. All other personal data is private.

8. Data Retention & Deletion

We retain your account data for as long as your account is active. You can delete your account at any time, which permanently removes:

• Your profile (name, email, avatar)
• All workout sessions, streak history, XP, and achievements
• Leaderboard entries and friend connections
• Custom workouts and program progress
• Push notification preferences

Deletion is completed within 30 days. Some anonymised, aggregated statistics (e.g. total workouts completed globally) may be retained without linking to your identity.

To delete your account: open the app → Profile → Settings → Delete Account, or visit lazyfitclub.com/delete-account.

9. Your Rights

Depending on your location, you may have the following rights over your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated data.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data for direct marketing purposes.
• Restriction: Request restriction of processing in certain circumstances.

To exercise any of these rights, email privacy@lazyfitclub.com. We will respond within 30 days. If you are in the EU/EEA, you have the right to lodge a complaint with your local data protection authority (GDPR). California residents have additional rights under CCPA.

10. Children's Privacy

LazyFit Club is not directed at children under the age of 13 (or 16 in the EU/EEA). We do not knowingly collect personal data from children. If you believe a child has provided personal data through our app, please contact us immediately at privacy@lazyfitclub.com and we will delete it.

11. Security

We implement industry-standard security measures to protect your data:

• All data transmission is encrypted using HTTPS/TLS
• Passwords are stored using bcrypt hashing — we never store plaintext passwords
• Authentication tokens (JWT) are stored in secure device storage
• Our servers are hosted on secured infrastructure with access controls

No method of transmission or storage is 100% secure. If you discover a security issue, please report it to privacy@lazyfitclub.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via an in-app notification and update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

For any privacy-related questions, data requests, or concerns, please contact us:

• Email: privacy@lazyfitclub.com
• Website: lazyfitclub.com

We aim to respond to all privacy requests within 5 business days.