Privacy Policy

Information You Provide

Automatically Collected Information

Information from Third Parties

To Provide Our Services

• Create and manage your account across all BimStrength applications
• Personalize your content feed and recommendations
• Enable content creation, sharing, and interactions
• Facilitate connections between users, coaches, and clients
• Process Premium subscription payments
• Provide training, nutrition, and body tracking features
• Enable gym check-in and access management

To Improve Our Services

• Analyze usage trends across the ecosystem
• Develop new features and applications
• Resolve technical issues and optimize performance
• Conduct research and statistical analysis
• Train and improve recommendation algorithms

For Security

• Detect and prevent fraud and unauthorized access
• Protect against abuse, spam, and malicious behavior
• Verify user and coach identity
• Enforce our terms, policies, and community guidelines

For Advertising (Free Users)

• Display personalized advertisements
• Measure campaign effectiveness
• Understand your interests for ad targeting

Note: Premium subscribers do not see advertisements. You can manage ad personalization in your privacy settings.

To Communicate With You

• Send important service notifications and security alerts
• Inform you about new features and ecosystem updates
• Respond to your support requests
• Send marketing communications (only with your explicit consent)

With Other Users

Depending on your privacy settings: your public profile (name, photo, bio), content you post, your public interactions. Coach profiles are publicly visible on the marketplace.

Across BimStrength Applications

Your account data and certain health/fitness data are shared across the BimStrength ecosystem (Social, Training, Nutrition, Track, Coach, Access) to provide an integrated experience. You can manage cross-app data sharing in your account settings.

With Our Service Providers

We share information with third parties who help us: host our services (cloud infrastructure), process payments (Stripe), send communications (email/push), analyze usage (analytics), provide customer support, ensure security (fraud detection). All providers are contractually bound by data processing agreements (DPAs) to protect your data.

With Advertising Partners (Free Users)

For non-Premium users, we may share: advertising identifiers, aggregated usage data, inferred interests. You can limit this sharing in your privacy settings or upgrade to Premium for an ad-free experience.

For Legal Reasons

We may disclose your information if necessary to: comply with a legal obligation or court order, protect our rights or property, prevent fraud or abuse, protect the safety of our users or the public, respond to lawful requests from public authorities.

In Case of Business Transfer

If BimStrength is involved in a merger, acquisition, or asset sale, your information may be transferred to the acquiring entity. We will notify you by email and/or prominent notice before any such transfer occurs.

Legal Basis

• We process health data based on your explicit consent (GDPR Art. 9(2)(a))
• You can withdraw consent at any time via your account settings
• Withdrawing consent does not affect the lawfulness of processing done prior to withdrawal
• Some health data processing is necessary for the performance of our contract with you (providing fitness tracking services)

Enhanced Protections

• Health data is encrypted at rest with AES-256 encryption
• Access to health data is restricted to essential personnel only
• Health data is never shared with advertising partners
• Health data is never used for ad targeting purposes
• You can export or delete all your health data at any time

Authentication Providers

• Google OAuth: we receive your name, email, and profile photo. Google's privacy policy applies to data processed by Google.
• Apple Sign-In: we receive your name and email (or a private relay email). Apple's privacy policy applies.
• We do not receive or store your passwords from any OAuth provider.

Payment Processors

Payment data is processed by Stripe, Apple Pay, and Google Pay. We receive transaction confirmations but never your full credit card number. These processors are PCI-DSS Level 1 certified.

Analytics & Performance

We use analytics tools to understand how our services are used and improve performance. These tools collect anonymized or pseudonymized usage data. You can opt out of analytics tracking in your privacy settings.

Content Recommendations

We use algorithms to personalize your content feed, suggest training programs, and recommend coaches. These recommendations are based on your usage patterns, interests, and stated goals. You can reset or adjust your recommendation preferences in settings.

Content Moderation

We use automated systems to detect content that violates our Community Guidelines (spam, harmful content, etc.). Automated decisions are always subject to human review upon appeal.

No Significant Automated Decisions

We do not make decisions based solely on automated processing that have legal or similarly significant effects on you without human involvement.