Privacy Policy

---

# Privacy Policy

**Last Updated:** December 2025

**Effective Date:** December 2025

## 1. Introduction

Coachie ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, web application, and services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

## 2. Information We Collect

### 2.1 Information You Provide Directly

#### Account Information
- Name
- Email address
- Username (for social features and @mentions)
- Authentication credentials (stored securely via Firebase Authentication)

#### Profile Information
- Age
- Gender
- Height (in cm or inches)
- Current weight and goal weight
- Activity level
- Fitness goals
- Dietary preferences (e.g., balanced, vegetarian, vegan, keto)
- Preferred cooking methods (e.g., BBQ, sous vide, pressure cook)
- Meal times and preferences
- Number of meals and snacks per day
- Unit preferences (imperial vs. metric)

#### Health and Fitness Data
- **Meal Logs:** Food items, quantities, calories, macronutrients (protein, carbs, fat), micronutrients, meal photos
- **Workout Logs:** Exercise type, duration, intensity, calories burned
- **Sleep Logs:** Sleep duration, quality, bedtime, wake time
- **Water Intake:** Daily water consumption
- **Weight Tracking:** Weight measurements over time
- **Menstrual Cycle Data:** Period start dates, cycle length, period length, symptoms, flow intensity, pain levels, mood during cycle
- **Mood Logs:** Daily mood tracking and notes
- **Supplement Logs:** Supplement names, dosages, timing, photos
- **Habits:** Custom habits and completion tracking
- **Daily Scores:** Calculated readiness scores, energy scores, and category scores

#### Content You Create
- Recipes (saved meals, custom recipes)
- Weekly meal blueprints and shopping lists
- Forum posts and comments
- Messages sent to friends
- Circle posts and interactions
- AI chat conversations
- Meal photos and supplement photos

#### Social Data
- Friends list and friend requests
- Circle memberships
- Messages and conversations
- Forum participation
- Social interactions (likes, comments, shares)

### 2.2 Automatically Collected Information

#### Device Information
- Device type and model
- Operating system and version
- Unique device identifiers
- Mobile network information
- IP address

#### Usage Data
- App features used
- Time spent in app
- Interaction patterns
- Feature preferences
- Error logs and crash reports

#### Push Notification Data
- Firebase Cloud Messaging (FCM) tokens
- Notification preferences and settings
- Delivery status

### 2.3 Third-Party Data Sources

#### Google Fit (Optional)
If you choose to connect your Google Fit account, we may access:
- Activity data
- Workout information
- Step counts
- Heart rate data (if available)

#### Health Connect (Android - Optional)
If you grant permission, we may access:
- Health and fitness data from connected apps
- Activity data
- Nutrition data
- Sleep data

**Note:** You control which data is shared with Coachie through your device's permission settings. You can revoke access at any time.

## 3. How We Use Your Information

We use the information we collect to:

### 3.1 Service Provision
- Create and manage your account
- Provide personalized meal plans and recommendations
- Generate weekly blueprints and shopping lists
- Track your health and fitness progress
- Calculate daily scores and insights
- Enable social features (friends, circles, forums, messaging)
- Provide AI-powered coaching and recommendations

### 3.2 AI-Powered Features
- **Meal Recommendations:** Analyze your preferences and goals to suggest meals
- **Photo Detection:** Use AI to identify foods and supplements from photos
- **Smart Coach:** Generate personalized daily insights and briefs
- **Chat Assistant:** Provide AI-powered fitness and nutrition advice
- **Recipe Analysis:** Analyze recipes for nutritional information
- **Monthly Insights:** Generate personalized monthly progress reports

### 3.3 Communication
- Send push notifications (meal reminders, goal updates, social interactions)
- Send morning, afternoon, and evening briefs
- Respond to your inquiries and support requests
- Send important service updates and policy changes

### 3.4 Service Improvement
- Analyze usage patterns to improve features
- Fix bugs and technical issues
- Develop new features
- Conduct research and analytics (in anonymized, aggregated form)

### 3.5 Legal Compliance
- Comply with applicable laws and regulations
- Respond to legal requests and court orders
- Protect our rights and prevent fraud

## 4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on:

### 4.1 Contract Performance
Processing necessary to provide the Service you requested, including:
- Account creation and management
- Meal plan generation
- Health tracking
- Social features

### 4.2 Consent
For optional features and data processing, including:
- Analytics and usage tracking
- Marketing communications (if applicable)
- Third-party data integrations (Google Fit, Health Connect)
- Special category health data (see below)

### 4.3 Legitimate Interest
For:
- Service improvement and development
- Security and fraud prevention
- Network and information security
- Business operations

### 4.4 Special Category Data (Health/Menstrual Data)

Health data, including menstrual cycle information, is considered "special category data" under GDPR Article 9. We process this data based on:

- **Explicit Consent:** You provide explicit consent when you enable health tracking features
- **Health Purposes:** Processing necessary for health-related purposes with appropriate safeguards

You can withdraw your consent at any time by:
- Disabling health tracking features in Settings
- Deleting specific health logs
- Deleting your account

## 5. Data Sharing and Disclosure

### 5.1 Third-Party Service Providers

We share data with trusted third-party service providers who help us operate our Service:

#### Google Firebase
- **Purpose:** Cloud infrastructure, authentication, database, storage, push notifications
- **Data Shared:** All user data necessary for app functionality
- **Privacy Policy:** [Firebase Privacy Policy](https://firebase.google.com/support/privacy)
- **Location:** United States (with appropriate safeguards)

#### OpenAI
- **Purpose:** AI-powered meal recommendations, photo detection, chat responses, insights generation
- **Data Shared:** Meal photos, health logs, preferences, chat messages (for AI processing)
- **Privacy Policy:** [OpenAI Privacy Policy](https://openai.com/policies/privacy-policy)
- **Location:** United States
- **Note:** OpenAI does not use your data to train their models for our Service

#### Google Gemini (Google Generative AI)
- **Purpose:** AI-powered features for free tier users (cost-effective alternative)
- **Data Shared:** Health logs, preferences, chat messages (for AI processing)
- **Privacy Policy:** [Google Privacy Policy](https://policies.google.com/privacy)
- **Location:** United States

#### Google Play Services
- **Purpose:** App distribution, in-app purchases, subscription management
- **Data Shared:** Purchase history, subscription status
- **Privacy Policy:** [Google Play Privacy Policy](https://policies.google.com/privacy)
- **Location:** United States

### 5.2 Data Processing Agreements

We have Data Processing Agreements (DPAs) with our third-party service providers to ensure they handle your data in accordance with applicable privacy laws.

### 5.3 Legal Requirements

We may disclose your information if:
- Required by law or legal process
- Necessary to respond to government requests
- Necessary to protect our rights, privacy, safety, or property
- Necessary to prevent fraud or security threats

### 5.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your data may be transferred to the acquiring entity. We will notify you of any such change in ownership.

### 5.5 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

## 6. Data Security

We implement appropriate technical and organizational measures to protect your data:

### 6.1 Technical Safeguards
- **Encryption:** Data encrypted in transit (TLS/SSL) and at rest
- **Authentication:** Secure authentication via Firebase Authentication
- **Access Controls:** Role-based access controls and authentication requirements
- **Secure Storage:** Data stored in secure Firebase databases with access rules
- **Regular Updates:** Security patches and updates applied regularly

### 6.2 Organizational Safeguards
- **Access Limitation:** Only authorized personnel have access to user data
- **Training:** Staff trained on data protection and privacy
- **Incident Response:** Procedures in place for security incidents

### 6.3 Your Role in Security
- Use a strong, unique password
- Do not share your account credentials
- Log out when using shared devices
- Keep your device and app updated

**Note:** While we implement strong security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

## 7. Data Retention

### 7.1 Active Users
We retain your data while your account is active and you are using the Service.

### 7.2 Inactive Users
If your account is inactive for 3 years, we may delete your data after providing notice.

### 7.3 Deleted Accounts
When you delete your account:
- Your data is permanently deleted within 30 days
- This includes: profile, health logs, recipes, social data, messages, and all associated content
- Some data may be retained in backups for up to 90 days before permanent deletion
- Aggregated, anonymized data may be retained for analytics purposes

### 7.4 Legal Requirements
We may retain certain data longer if required by law or for legitimate business purposes (e.g., fraud prevention, legal disputes).

## 8. Your Rights

### 8.1 GDPR Rights (European Economic Area Users)

If you are located in the EEA, you have the following rights:

#### Right of Access (Article 15)
- Request a copy of all personal data we hold about you
- Understand how we process your data

#### Right to Rectification (Article 16)
- Correct inaccurate or incomplete data
- Update your profile information

#### Right to Erasure / "Right to be Forgotten" (Article 17)
- Request deletion of your account and all associated data
- Use the "Delete Account" feature in Settings

#### Right to Restrict Processing (Article 18)
- Request that we limit how we use your data
- Continue storing data but limit processing

#### Right to Data Portability (Article 20)
- Export your data in a machine-readable format (JSON)
- Transfer your data to another service
- Use the "Export My Data" feature in Settings

#### Right to Object (Article 21)
- Object to processing based on legitimate interests
- Object to direct marketing (if applicable)

#### Right to Withdraw Consent (Article 7)
- Withdraw consent for optional features at any time
- This does not affect processing based on other legal bases

### 8.2 CCPA Rights (California Users)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

#### Right to Know
- Know what personal information we collect
- Know how we use and share your personal information
- Request a copy of your personal information

#### Right to Delete
- Request deletion of your personal information
- Use the "Delete Account" feature in Settings

#### Right to Opt-Out
- Opt-out of the sale of personal information
- **Note:** We do not sell your personal information

#### Right to Non-Discrimination
- Not be discriminated against for exercising your privacy rights
- We will not deny services or charge different prices

### 8.3 How to Exercise Your Rights

#### In-App Features
- **Data Export:** Go to Settings → Privacy → "Export My Data"
- Receive a JSON file with all your data within 30 days
- **Account Deletion:** Go to Settings → Privacy → "Delete Account"
- Permanently delete your account and all data within 30 days

#### Contact Us
For other privacy requests or questions:
- **Email:** [INSERT PRIVACY EMAIL]
- **Response Time:** We will respond within 30 days (as required by GDPR/CCPA)

#### Verification
We may need to verify your identity before processing certain requests to protect your privacy and security.

## 9. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States, where our service providers are located.

### 9.1 Safeguards
We ensure appropriate safeguards are in place for international transfers:
- **Standard Contractual Clauses (SCCs):** Used with our service providers
- **Adequacy Decisions:** Where applicable, we rely on adequacy decisions
- **DPAs:** Data Processing Agreements with all service providers

### 9.2 Your Rights
You have the right to request information about the safeguards we have in place for international transfers.

## 10. Children's Privacy

Our Service is **not intended for users under 13 years of age** (or 16 in the EEA). We do not knowingly collect personal information from children under 13 (or 16 in the EEA).

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 13 (or 16 in the EEA), we will delete that information promptly.

## 11. Cookies and Tracking Technologies

### 11.1 Cookies
Our web application may use cookies and similar tracking technologies to:
- Maintain your session
- Remember your preferences
- Analyze usage patterns

### 11.2 Managing Cookies
You can control cookies through your browser settings. However, disabling cookies may affect Service functionality.

## 12. Third-Party Links and Services

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

## 13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:
- Changes in our practices
- Legal or regulatory requirements
- Service updates

### 13.1 Notification of Changes
- **Material Changes:** We will notify you through:
- In-app notification
- Email (if you have provided one)
- Updated "Last Updated" date at the top of this policy
- **Non-Material Changes:** Posted on this page with updated date

### 13.2 Continued Use
Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

## 14. Contact Us

For privacy inquiries, to exercise your rights, or for questions about this Privacy Policy:

**Email:**support@playspace.games
**Mailing Address:** 6430 NW 41st Terrace Coconut Creek, FL 33073


**Response Time:** We will respond to your inquiry within 30 days as required by GDPR/CCPA.

## 15. Supervisory Authority

If you are located in the EEA, you have the right to lodge a complaint with your local data protection authority (DPA) if you believe we have not addressed your privacy concerns adequately.

**Find your DPA:** [List of EU Data Protection Authorities](https://edpb.europa.eu/about-edpb/about-edpb/members_en)

## 16. Additional Information

### 16.1 Data Controller
Coachie is the data controller for your personal information.

### 16.2 Data Processing Locations
- Primary: United States (Firebase, OpenAI, Google services)
- Processing occurs in accordance with applicable data protection laws

### 16.3 Automated Decision-Making
We use automated processing (AI) to:
- Generate meal recommendations
- Analyze photos
- Calculate scores and insights
- Provide personalized content

You have the right to request human review of automated decisions that significantly affect you.

### 16.4 Data Minimization
We only collect and process data that is necessary for the Service. You can control many data collection settings in your account preferences.

---

**Last Updated:** December 2025

**Effective Date:** December 2025

**Version:** 1.0