Privacy Policy

"Personal information" means any information relating to an identified or identifiable person, including your name, email address, body measurements, photographs and health data.

"Sensitive information" means personal information about your health, body or menstrual cycle. Flex only collects sensitive information you choose to give it.

"Processing" means any operation performed on personal information, such as collecting, storing, using, sharing or deleting it.

We collect the following information in order to run and improve the Service:

• Onboarding answers: your name, your goal, where you train and what equipment you have, how many days a week you can train, your experience, your eating style and your protein or calorie preference.
• Body data you enter: weight, height and the check-in measurements (waist, hips, thigh) you choose to log.
• Progress photos, only if you give consent in the app. They are uploaded to our storage so Flex can show you the pair across twelve weeks.
• Meal photos you scan, and the meals, water and protein you log by hand.
• Health data from Apple Health (steps and sleep), read only with your permission, so the home screen can show your day.
• Cycle dates, only if you turn cycle awareness on.
• Messages you send to the coach chat and the answers it gives.
• Account and device data: a random anonymous identifier, your Apple ID email if you sign in with Apple, your device model and iOS version, app version and crash reports.
• Subscription status from the App Store, so we know whether your plan is active.
• Friend codes and the invite links you create or open.

We use the information for the following purposes:

• To build and adapt your training plan and your protein target.
• To show your progress: sessions done, weight logged, measurements and the photo pair.
• To answer your questions in the coach chat with context about your plan.
• To send reminders you have opted into, in the app's voice, on your training days.
• To restore your subscription and your data if you reinstall the app or change phone.
• To fix crashes, understand which features are used and improve the Service.
• To measure where new members come from, so we can spend on the right channels.
• To comply with law, enforce our Terms and protect the Service from abuse.

The website uses only the cookies needed to serve the page. The app does not use cookies. Attribution (which campaign brought you to the App Store) is measured through Apple's own privacy framework and our attribution partner, and you can decline tracking in the iOS prompt.

We do not sell your personal information. We share it only with the processors that run parts of the Service, each bound by its own terms and privacy policy, and only the data each one needs:

• Apple: App Store purchases and subscriptions, Sign in with Apple, Apple Health, push notifications.
• RevenueCat: subscription status and entitlements.
• AppsFlyer: install attribution and deep links.
• Sentry: crash reports and error logs, tagged with your anonymous identifier.
• Amazon Web Services: hosting and storage of your data, photos and the exercise library.
• Google (Gemini): reading meal photos and progress-photo pairs to produce the numbers and lines Flex shows you. Your photos are not used to train Google's models.
• MongoDB Atlas: the database that stores your account.

Your data is stored on servers operated by the providers above. Data is encrypted in transit and at rest, access is limited to the people who need it to run the Service, and backups are kept so your progress is not lost.

No system is perfectly secure. If we learn of a breach affecting your data we will tell you and the relevant authorities as the law requires.

Meal photos are kept for up to 14 days so the reading can be checked, then deleted. The meal itself stays in your log.

Progress photos are kept until you delete them in the app or delete your account. You can withdraw photo consent at any time in Settings, which stops uploads and removes the stored photos.

Depending on where you live you may have some or all of the following rights, and we honour them for everyone:

• Access: ask for a copy of the personal information we hold about you.
• Correction: fix anything that is wrong, most of it directly in the app.
• Deletion: delete your account and data from Settings, or ask us to.
• Portability: receive your data in a machine-readable form.
• Objection and restriction: ask us to stop a particular use of your data.
• Withdraw consent: for photos, Health data, cycle awareness and reminders, at any time, in the app.

We keep your personal information for as long as your account exists and as long as needed for the purposes above. When you delete your account, your data is deleted or anonymised within 30 days, except where the law requires us to keep records longer.

Reminders and the week recap are local notifications you turn on in the app and can turn off in iOS Settings. If you give us your email we may send product updates; every email has an unsubscribe link.

We may process your information to protect the Service, to detect and prevent abuse, and to meet legal obligations, respond to lawful requests and enforce our Terms.

Flex uses AI models to read meal photos, to read progress-photo pairs and to answer the coach chat. Your training programs are templates written by people, not generated by AI. AI answers can be wrong; they are not medical or nutritional advice.

To the extent permitted by law, we are not liable for loss or damage arising from your use of the Service or from the acts of the third-party providers named above, beyond what our Terms of Use provide.

Your data may be stored and processed in the United States and other countries where our providers operate. Where the law requires it, we use approved safeguards for those transfers.

Flex is for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has given us personal information, contact us and we will delete it.

We may update this policy as the Service, the law or our providers change. Material changes are announced in the app, with the date of the last update shown at the top of this page.

This policy is governed by the laws of [jurisdiction to be confirmed]. Any dispute will be brought before the courts of [venue to be confirmed].

Questions, requests to exercise your rights or reports of a privacy concern: caliaiapp.il@gmail.com. We answer within 30 days.