Privacy notice

Data controller

The controller of your personal data is axofit. We designate the email [email protected] as the means to receive notices.

Personal data we collect

We only collect the data we need to build your routines and run your account. We group it like this:

• Identification and contact: email address, name (optional), your Apple or Google account identifier when you sign in with them, language and time zone.
• Training profile: goal, level, sex, birth year, weight, height, days and minutes per week, muscles you want to prioritize, the places where you train and the equipment each one has.
• Data related to your health, which the law considers sensitive (article 3, section VI): the areas or muscles you tell us you want to avoid because of discomfort or injuries.
• Technical data: phone model and system version, notification token, IP address (masked in analytics) and app usage logs.
• Subscription data shared with us by the App Store or Google Play: transaction identifier, status and dates. We never receive your card details.
• On the axofit.app website: the email you leave on the waitlist.

Consent

By creating your account and using the service you consent to the processing of your personal data for the purposes in this notice.

For data related to your health we need your express consent. The app asks for it when you enter the areas you want to avoid, and that field is optional: if you leave it empty, your routine works just the same.

What we use your data for (primary purposes)

These purposes are necessary to provide the service:

• Create and manage your account.
• Build and adjust your routines based on your profile, your equipment and your history.
• Store your workouts, personal records and the recovery state of your muscles.
• Sync your information across your devices.
• Verify your subscription with the App Store or Google Play.
• Send you transactional emails: password resets, the end-of-trial notice and the waitlist confirmation.
• Support you when you write to us.
• Protect the service and prevent abuse.

Secondary purposes

These purposes are not necessary for the service and you can refuse them at any time without affecting your account:

• Reminding you by notification or email that your free trial is about to end. Turn it off from Profile in the app.
• Telling you about the app's launch if you joined the waitlist. Apart from the confirmation email, it's the only thing we send to the list, and every email has a link to leave it.
• Aggregated usage analytics to improve the product. You can object by writing to [email protected].

Transfers and processors

We don't sell your data or share it with advertisers.

We use providers that process data on our behalf, under contract and only to provide their service to us:

• DigitalOcean: hosting and storage (United States).
• Resend: email delivery (United States).
• Sentry: error reporting for the app and the server (United States), without your training profile.
• Expo: push notification delivery (United States).

Apple and Google process your payments and your sign in with them under their own privacy notices. We don't receive your card details.

We would only make other transfers in the cases article 37 of the law allows without your consent, for example when a competent authority orders it.

Apple Health and Google Fit

In this version, the app does not read or write data from Apple Health or Google Fit.

Minors

axofit is for people aged 18 or older. We do not knowingly collect data from minors. If you are a parent or guardian and believe a minor created an account, write to [email protected] and we will delete it.

Your ARCO rights and how to revoke consent

You have the right to access, rectify and cancel your data, or to object to its processing (ARCO rights). You can also revoke your consent and limit the use or disclosure of your data.

To exercise them, write to [email protected] with your name, your account email and the right you want to exercise. We reply within 20 business days at most, as article 32 of the law requires.

• Rectification: edit your profile from the app at any time.
• Cancellation: delete your account from Profile in the app.
• Objection: turn off reminders from Profile in the app.
• A copy of your data: ask for it by email and we send it to you as JSON.

Retention and deletion

We keep your data while your account exists. When you delete it we immediately erase your account, profile, gyms, exercise preferences, workouts, records, devices and sessions.

• Usage analytics are kept without your account identifier.
• Backups are deleted within 30 days at most.
• Logs of App Store and Google Play notifications are kept for up to 90 days.

Cookies and similar technologies on axofit.app

The website only uses a session cookie and first-party visit cookies for aggregated analytics. We use no advertising cookies and no third-party trackers.

You can block or delete cookies from your browser settings. The app uses no cookies.

Security

We protect your data with encryption in transit (TLS), storage encrypted by our provider and passwords stored as a hash, never in plain text. Only the people who run the service have access, and only when they need it.

Changes to this notice

We publish the current version at https://axofit.app/en/privacy with its update date. If we make an important change we will tell you in the app or by email.

Authority

If you believe your right to the protection of your personal data was violated, you can go to Mexico's data protection authority, the INAI, at www.inai.org.mx.

Contact

For any question about this notice write to [email protected].