Privacy Policy

Strong and mobile is run by Strong and Mobile Coaching LLC, a limited liability company organized in Wyoming, USA, and part of Franz and Elliot LLC (Wyoming).

Address: 30 N Gould St Ste R, Sheridan, WY 82801, USA. This is our registered agent's address, not an office open to visitors.

Strong and Mobile Coaching LLC is the controller of your personal data. For anything about privacy, write to info@strongandmobile.co.

• Your training is saved on your phone first. Once you sign in, it is also saved online so it is safe and comes back on a new phone.
• We use your data to run the app, to build your sessions and to coach and improve the program. We don't sell it, we don't use it for advertising, and we don't track you across other apps or websites.
• Check-ins (sleep, energy, soreness, stress) and your bodyweight are health-related. We store them only with your explicit consent.
• You can delete your account and all of its data inside the app at any time.

Your account

When you sign in, we receive your email address (with an emailed six-digit code) or your Sign in with Apple details. Apple may give us a private relay address instead of your real email. We create a user ID for you. We use these to create your account, sign you in and keep your data in sync. We don't use passwords.

Your training

So the app can build your sessions and keep your history, it stores:

• Profile and settings: your name if you add one, bodyweight, kg or lb, and app settings.
• Your answers and choices: the questionnaire answers and the level they place you at, the equipment you have, your training days, your program and start date, the exercises and levels you choose, and the small daily routines you switch on.
• Your sessions: every set you log (weight, reps or time, and whether you entered a value or kept the app's suggestion), moves you skip, swap or make lighter, and your notes.
• Check-ins (optional): how you slept, your energy, where you are sore and your stress, before a session, and whether you applied the app's suggestion.

This is saved on your phone. Once you are signed in it is also saved online, so you don't lose it and it comes back when you sign in on another phone.

The Strong and mobile team (our staff and the coaches we authorize) can see this data to coach you, to support you and to see where the program works and where it doesn't.

Health-related data

Check-ins, soreness and bodyweight can reveal information about your health. We process them only with your explicit consent, which you give when you create your account, and only to provide and improve your training. You can withdraw your consent at any time by deleting your account (see section 8). Withdrawing doesn't affect what we did before.

Feedback

When you send feedback from the app, we store your message, the screen you sent it from and your account, so we can read it and reply.

Crash and freeze reports

When the app crashes, freezes or hits an error, it sends a report to Sentry, our error-reporting provider. A report contains the device model, operating system, app version, the error, and the screens and actions just before it. It carries a random ID for your installation. It does not contain your name, email address or IP address. You can turn reports off in the app under You.

Usage analytics (only if you allow it)

If you allow it, the app sends anonymous usage events (for example which screens are opened and which buttons are tapped) to PostHog, hosted in the EU, so we can see which parts of the app work. These events carry a random ID, not your name or email. You can change this choice at any time in the app under You.

Permissions on your phone

• Photos (add only): used only when you tap Save Image to save your session card. The app never reads your photo library.
• Notifications: reminders on your training days, scheduled on your phone. We don't run a server that sends you messages.

Videos

Videos in the app's Learn section play in YouTube's player. When you play one, YouTube (Google) receives information as described in Google's privacy policy.

The website

When you visit strongandmobile.app, our hosting provider, [HOSTING PROVIDER], keeps standard server logs (such as your IP address and browser) for security and to keep the site running. If you sign up for the beta or contact us, we keep your email address and message to reply and to tell you about the app. The website does not use advertising or tracking cookies.

What we don't collect

No location, no contacts, no camera or microphone, no health data from Apple Health, no payment details in the app, and no advertising identifiers.

• Performance of our contract with you: your account, saving and syncing your training, building your sessions, support.
• Explicit consent: check-ins, soreness and bodyweight (health-related data), and usage analytics.
• Legitimate interests: crash and freeze reports, keeping the service secure, and improving the program from how it is used. You can object at any time (see section 9).
• Legal obligation: where the law requires us to keep or disclose data.

We don't sell your personal data and we don't share it for advertising. We share it only with service providers that process it for us, under contracts that require them to protect it:

We may also disclose data when the law requires it, to protect the rights and safety of people or of our company, or to a buyer if the business is sold, in which case this policy continues to apply to your data.

We are based in the United States, and your data is stored and processed there. If you live in the EU, EEA, UK or Switzerland, we transfer your data to the US using the safeguards our providers offer, such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework where a provider is certified under it. Write to us for a copy of the relevant safeguards.

• Your account and training: for as long as you have an account. When you delete your account, it is deleted from our database right away and from backups within [BACKUP DAYS] days.
• Crash and freeze reports: up to [SENTRY RETENTION] days.
• Usage analytics: up to [ANALYTICS RETENTION] months, as anonymous events.
• Feedback and emails with us: as long as needed to handle them, and deleted with your account.
• Website logs: as long as our hosting provider keeps them, usually a few weeks.

• In the app: You, then Delete account. This deletes your account and everything saved with it online, and clears the app on your phone.
• Without the app: follow the steps at strongandmobile.app/delete-account, or email info@strongandmobile.co from the address on your account. We delete the account and its data within 30 days and confirm by email.

Depending on where you live, you have the right to:

• access your data and get a copy,
• correct it,
• delete it,
• take it with you in a common format (portability),
• object to processing based on legitimate interests,
• restrict processing,
• withdraw consent at any time.

To use any of these rights, email info@strongandmobile.co. We may ask you to confirm it is your account. We answer within one month (EU, EEA, UK) or 45 days (California and other US states).

If you are in the EU, EEA, UK or Switzerland, you can also complain to your data protection authority.

California residents

Under the California Consumer Privacy Act, as amended by the CPRA:

• Categories we collect: identifiers (email, user ID, random device IDs), sensitive personal information (health-related check-ins and bodyweight, account sign-in), usage and device information, and the content of your messages. They come from you and your device, and are used for the purposes in section 3.
• No selling or sharing: we don't sell your personal information and we don't share it for cross-context behavioral advertising, and haven't in the past 12 months.
• Sensitive personal information: we use it only to provide the app and the services you ask for, so we don't offer a separate option to limit it.
• Your rights: to know what we collect, use and disclose; to delete; to correct; and not to be treated differently for using your rights. You can use an authorized agent; we will ask them for proof of your permission.

Residents of other US states with privacy laws (such as Colorado, Connecticut, Virginia and Texas) have similar rights, which you can use the same way. If we turn down your request, you can appeal by replying to our answer.

Strong and mobile is for people aged 18 and over. We don't knowingly collect data from anyone younger. If you think someone under 18 has given us data, write to us and we will delete it.

Your training is saved on your phone, and your sign-in is stored in your phone's secure Keychain, not in backups. Data travels to us encrypted (HTTPS). In our database, each account can only read and write its own data; only our team can see across accounts, through a separate, restricted access. No system is perfectly secure, but we work to protect your data and limit who can access it.

When we change this policy, we update the date at the top. If a change matters for how we use your data, we tell you in the app or by email before it takes effect.

Strong and Mobile Coaching LLC 30 N Gould St Ste R, Sheridan, WY 82801, USA info@strongandmobile.co