Privacy Policy

Last updated · July 9, 2026

This Privacy Policy explains how SD Fitness ("the App", "we", "us"), the official training app of Shontelle DuBois Fitness, collects, uses, and protects your information when you use our mobile application on iOS or Android. We take your privacy seriously: we collect only what the App needs to work, we never sell your data, and we never use your data for advertising.

1. Information We Collect

1.1 Information you provide

• Account information — your name, email address, and password when you create an account. Passwords are stored in hashed form by our authentication provider; we never see or store your plain-text password.
• Profile details — information you choose to add such as gender, body weight, and fitness preferences, used to personalize your training and calorie estimates.
• Progress photos — your before & after transformation photos. These are stored only on your device. They are never uploaded to our servers. Sharing a transformation image happens only when you choose to, through your phone's own share menu.

1.2 Information created while you use the App

• Workout activity — completed exercises, workout duration, and estimated calories burned, so your progress and streaks stay in sync across sessions.
• Hydration logs — water intake you record and your reminder preferences.
• Purchase information — your subscription status, managed through Apple's App Store or Google Play together with our subscription provider (RevenueCat). We never receive or store your credit card details.
• Device information — a basic app-instance identifier and device model/OS version, used to operate your subscription and to diagnose technical problems.

1.3 Health data (Apple Health / Health Connect)

If you choose to tap "Connect Health Data", the App asks your operating system — Apple Health on iOS, or Health Connect on Android — for read-only access to the following data types:

• Daily step count
• Active calories burned
• Heart rate (most recent reading)
• Sleep duration (last night)

This data is used for one purpose only: to display your own daily activity on your personal dashboard inside the App. It is not uploaded to our servers, not stored outside your device, not shared with anyone, not sold, and never used for advertising or any other purpose. Connecting health data is entirely optional — the App is fully functional without it — and you can revoke access at any time in Apple Health settings (iOS) or Health Connect settings (Android).

1.4 Camera and photo access

The App requests camera access only when you choose to take a profile picture or a before/after progress photo, and photo library access only when you choose to pick an existing photo. We never access your camera or photos in the background.

2. How We Use Your Information

Data	Why we use it
Name, email, password	Creating and securing your account, signing you in, sending password-reset emails
Profile details (gender, weight)	Showing you the right training programs and estimating calories burned
Workout & hydration activity	Tracking your progress, streaks, and daily goals
Purchase information	Activating and managing your subscription
Health data (steps, heart rate, calories, sleep)	Displayed to you on your dashboard only — nothing else
Device information	Subscription management and fixing technical issues

We do not use your data for advertising, we do not sell or rent your data to anyone, and the App contains no third-party advertising of any kind.

3. Who We Share Data With

We share data only with the service providers required to run the App, and only the minimum they need:

• Supabase — our secure backend platform that hosts accounts and workout data (data hosted in Canada).
• RevenueCat — processes subscription status on our behalf. Receives an app-instance identifier and purchase state; never your name or health data.
• Apple / Google — handle all payments through the App Store and Google Play under their own terms and privacy policies.

We may also disclose information if required to do so by law. We never share your data with advertisers or data brokers.

4. Data Security

All data transmitted between the App and our servers is encrypted in transit using HTTPS/TLS. Access to stored data is restricted through row-level security, meaning your data is accessible only to your authenticated account.

5. Data Retention

We keep your account data for as long as your account exists. When you delete your account, your personal data — account details, profile, workout history, and hydration logs — is permanently deleted from our servers. Photos and health data never left your device in the first place; deleting the App removes them.

6. Deleting Your Account & Your Rights

If you can no longer access the App, you can request deletion by contacting us (see Section 10) from the email address linked to your account, and we will delete it for you.

You also have the right to ask us what personal data we hold about you, to correct inaccurate data, and to receive a copy of your data. Contact us and we will respond promptly.

7. Children

SD Fitness is intended for adults aged 18 and over. The App is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

8. Notifications

With your permission, the App sends local notifications such as hydration reminders and workout-completion alerts. These are generated on your device and can be turned off at any time in the App or in your system settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date above and, where appropriate, notify you in the App. Continued use of the App after changes take effect means you accept the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, contact us at support@shontelledubois.com.