Privacy Policy

Flat & Strong (“we”, “us”, or “our”), operated by Absolvis, provides a personalized fitness and workout planning service through our mobile application and website at flatandstrong.com (together, the “Service”).

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have. It applies to both our Android and iOS apps and our website.

We collect the following categories of information:

Account information

When you create an account or sign in with Google, we receive your name, email address and profile photo from your Google account. If you register with an email and password, we store your email and a securely hashed password.

Fitness & profile data

To build your personalized plan, you may provide details such as your age, gender, height, weight, fitness goals, training experience, availability and schedule preferences. As you use the Service we also record your workout activity, completed sessions, progress and related fitness history.

Photos you choose to upload

If you set a profile picture or otherwise upload an image, we access the specific photo you select from your device. We do not access your photo library beyond the image you choose.

Device & usage information

We automatically collect technical data such as device model, operating system version, app version, language settings, general (non-precise) location inferred from your IP address, and diagnostic information used to keep the Service reliable and secure.

Authentication data

We store authentication tokens securely on your device (using the platform’s encrypted secure storage) to keep you signed in. We do not store your Google password.

We use your information to:

• Create and manage your account and authenticate you;
• Generate and adapt your personalized workout plans and fitness recommendations;
• Track your progress and display your training history;
• Send you service-related communications and reminders about your sessions;
• Operate, maintain, secure, debug and improve the Service and prevent fraud or abuse;
• Comply with legal obligations.

Where the EU/UK General Data Protection Regulation (GDPR) applies, we process your data on the basis of: performance of our contract with you (to provide the Service); your consent (which you may withdraw at any time); our legitimate interests (to secure and improve the Service); and compliance with legal obligations.

We do not sell your personal information. We share it only with:

• Service providers who process data on our behalf under contract — for example cloud hosting, authentication and infrastructure providers — solely to operate the Service;
• Google, when you choose to sign in with Google, in accordance with Google’s own privacy policy;
• Legal & safety recipients, where disclosure is required by law, regulation, legal process, or to protect the rights, safety and security of our users and the Service;
• Business transfers, in connection with a merger, acquisition or sale of assets, subject to this Policy.

We retain your personal and fitness data for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain certain information to comply with legal obligations, resolve disputes or enforce our agreements.

We use technical and organizational measures to protect your information, including encryption of data in transit, encrypted on-device storage of authentication tokens, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live, you may have the right to access, correct, update, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can exercise these rights from within the app or by contacting us at flatandstrong@absolvis.com.

You can request deletion of your account and associated personal data at any time:

• In the app, open your profile settings and choose to delete your account; or
• Email us at flatandstrong@absolvis.com from the address associated with your account.

Upon a verified request we will delete your account and personal and fitness data, subject to the limited legal retention exceptions described in Section 6.

The Service is not directed to children under the age of 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

The Service relies on the following third parties, each governed by its own privacy policy:

• Google Sign-In — authentication (Google Privacy Policy).
• Cloud hosting & infrastructure — storage and delivery of the Service.

Your information may be processed and stored in countries other than your own, where data protection laws may differ. Where required, we put in place appropriate safeguards for such transfers.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you within the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

If you have questions or requests regarding this Privacy Policy or your data, contact us at flatandstrong@absolvis.com.