Privacy Policy

Information you provide directly

• Account information — name, email address, date of birth, gender
• Body metrics — height, weight, and weight history
• Fitness data — workout logs, exercise history, step counts, and training goals
• Nutrition data — food logs, meal plans, and calorie targets
• Profile photo — if you choose to upload one

Special Category Data (Health & Fitness)

We collect sensitive personal data such as body measurements, weight history, workout logs, and nutrition information. This data is processed only with your explicit consent and used solely to provide personalised fitness and nutrition features.

Information collected automatically

• Usage data — screens visited, features used, and session duration
• Device information — device type, operating system version, and push notification token

Information from third parties

Google or Apple Sign-In — if you sign in using Google or Apple, we receive your name and email (we do not receive your password).

We use your information to:

• Create and manage your account
• Calculate personalised calorie targets, TDEE, and fitness recommendations
• Track your workout and nutrition progress
• Provide AI-powered coaching and meal plans
• Send push notifications for reminders and achievements (with your consent)
• Improve the App and respond to support requests

Legal Basis (GDPR-aligned): Contractual necessity, your explicit consent (for health data), and legitimate interests (service improvement).

We do not sell your personal information.

We share data only in limited cases:

• With service providers under strict data processing agreements
• DeepSeek: When you use AI coaching or meal plan features, your input data is sent to DeepSeek to generate responses.
• Other service providers: Supabase (storage & auth), Expo (push notifications)

We do not sell your data to third parties.

Your data is stored on Supabase with encryption in transit (TLS) and at rest (AES-256). We implement reasonable security measures, but no system is completely secure.

We keep your data for as long as your account is active. When you delete your account, we will permanently delete your personal data within 30 days, except where retention is required by law.

Your data may be transferred to and processed in countries outside North Macedonia (including the United States) by our service providers. We ensure appropriate safeguards are in place.

You have the right to:

• Access, correct, or delete your personal data
• Withdraw consent at any time
• Object to certain processing

To exercise these rights, contact us at contact@progresspal.fit.

ProgressPal is not directed at children under 13. We do not knowingly collect data from children under 13. If we discover such data, we will delete it.

We may update this Privacy Policy. We will notify you of significant changes by updating the “Last updated” date. Continued use of the App after changes constitutes acceptance.

Stefan Ivanov
North Macedonia
Email: contact@progresspal.fit