Privacy Policy

Notch Fitness ("Notch", "we", "us") is a personal AI workout coach app. This page explains what data we collect, how we use it, how we protect it, and the rights you have over it.

Data we collect

• Account info: your email address, used for sign-in — or, if you sign in with Apple, the identifier Apple provides for your account instead.
• Coaching data: your training plans, chat messages with the coach, logged workout sets (exercise, weight, reps), and any notes you or the coach add about a set or exercise — this is what lets the coach track your progress over time.
• Coach persona settings: the name, tone, and preferences you configure for your coach.
• Fitness profile (optional): if you use the "AI-generated plan" feature, the goal, experience level, and days-per-week you select, plus gender, age, weight, height, and injury or limitation notes if you choose to share them — used only to personalize the generated plan. All of these fields are optional and skippable.
• Subscription status: whether you're on a free trial or a paid subscription and when it renews or expires. This is synced from Apple through RevenueCat so the app knows your access level. We never receive or store your payment card details — Apple processes all payments.
• Push notifications (optional): if you allow notifications, we store a device push token so the coach can reach you while the app is in the background. You can turn this off anytime in your device settings.
• App usage & diagnostics: aggregate product-usage events (e.g. that a workout was started or completed) so we can see how the app is used, and crash/error reports so we can fix bugs. Both are configured to exclude your personal content and device-level identifying details where the tools allow it.
• Consent record: the date and version of our Terms you accepted, so we can show which version you agreed to.

How we use it

Your workout history and messages are sent to our AI provider to generate coaching replies and track your progress. We use this data only to operate the app: to sign you in, store your training data, generate personalized coaching, and maintain your preferences. We don't sell your data, and we don't use it for advertising.

Third parties who process your data

We rely on a small number of service providers, each of which processes your data only as needed to run the app:

• Supabase — stores your account, workout, and coaching data, and manages sign-in. Passwords are never stored in readable form, and every request is scoped so you can only reach your own data.
• OpenRouter and Google Gemini — your workout context and coach messages are sent over an encrypted connection to OpenRouter, which routes them to Google's Gemini model to generate coaching replies. We exclude direct identifiers such as your email from what is sent.
• RevenueCat — manages your subscription and, with Apple, tells the app whether your trial or subscription is active. It receives your account identifier and subscription status, not your payment details.
• PostHog — basic product-usage analytics, linked to an internal account identifier rather than your name or email.
• Sentry — crash and error reporting, configured to exclude personal content and personally-identifying details.
• Apple and Expo — deliver the push notifications you opt into.

Where your data is stored

Your account and workout data are stored on Supabase infrastructure currently hosted in the Asia-Pacific region. Some providers listed above (for example our AI and analytics providers) may process data on servers located in other countries. Wherever your data is processed, the protections described in this policy continue to apply.

Security

We take reasonable technical measures to protect your data. Traffic between the app, our servers, and our providers is encrypted in transit (HTTPS/TLS). Access to your data is enforced by row-level security so each account can reach only its own records, and the keys our services use are scoped to the minimum they need. No system is perfectly secure, but we work to keep these protections current.

Data retention & account deletion

We keep your data for as long as your account exists so the coach can remember your history. You can permanently delete your account and all associated data at any time from Settings in the app. When you delete your account we remove your data from our database and ask our service providers to delete their copies; some providers process erasure asynchronously and may take up to 90 days to purge backups. Aggregate, non-identifying usage statistics that can no longer be linked to you may be retained.

Your rights

You can access and update most of your data directly in the app, and delete all of it from Settings at any time. Depending on where you live, you may also have rights under applicable privacy law — including, for users in Israel, the right to inspect and request correction of your personal information under the Protection of Privacy Law, 5741-1981. To exercise any of these rights, contact us at notch.app.support@gmail.com.

Children's privacy

Notch is not directed at children. You must be at least 16 years old to use the app (see our Terms of Use), and we do not knowingly collect data from anyone under that age. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we'll revise the "Effective" date at the top of this page, and for material changes we'll make the update clear in the app. Continuing to use Notch after an update means you accept the revised policy.

Contact

Questions about this policy or your data: notch.app.support@gmail.com