Privacy Policy

1) Data Controller and Scope

My Personalized Fitness Coach (“Service”, “we”, “us”, “our”) acts as the data controller for this beta service. The scope includes the public pages, account onboarding, SMS/WhatsApp verification, messaging workflows, and account management.

2) Categories of Personal Data

• Contact and identity data: email address, phone number (E.164), and optional name fields.
• Account profile data: goals, constraints, preferences, timezone, and coach selections.
• Authentication and security data: password hash, sign-in activity, consent and verification logs.
• Communication records: inbound/outbound message bodies, message identifiers, delivery status, and timestamps.
• Consent and compliance metadata: opt-in timestamp, source page, request IP (where available), and user-agent.

3) Purposes and Legal Basis

• Account creation, identity verification, and secure access control.
• Delivery and continuity of SMS/WhatsApp-based coaching and service notifications.
• Fraud prevention, abuse mitigation, audit logging, and legal compliance.

4) Communications Processing and Third Parties

Message transport and channel delivery are provided through Twilio. We use a minimal set of message metadata required for routing, delivery reporting, and troubleshooting. We do not sell or share users' phone numbers with third parties for their own marketing or advertising purposes.

5) Retention

We retain personal and messaging data while the account is active and for a limited period after account closure to satisfy security, accounting, and compliance review needs, then delete or pseudonymize records according to operational policies.

6) Security

We employ standard security practices for access control, transport security, and credential handling. Passwords are stored as one-way hashes and are not available in plaintext.

7) Your Rights

• Right to access, correct, and request deletion of your account data.
• Right to withdraw consent for non-essential messaging by using STOP in-chat.
• Right to request a copy of retained records and ask for account closure.

8) SMS and WhatsApp Controls

• STOP or equivalent opt-out command ends non-essential messaging.
• HELP provides support instructions and contact details.
• Message frequency varies and message/data rates may apply based on the user's carrier plan.
• Operational messages that are legally required or security-related may still be sent where applicable.

9) International Transfers

Service infrastructure may operate in multiple jurisdictions. By using the Service, you acknowledge cross-border processing for service delivery and support.

10) Changes to this Privacy Policy

We may update this policy from time to time as the beta evolves. Material updates will be posted to this page with a revised effective date.

11) Contact

Privacy, access, or deletion requests: support@mypfc.ai