Privacy Policy

1. Introduction

Aera Fitness ("Aera", "we", "us", or "our") operates the Aera mobile application and web platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

Account Information

• Email address and password (for authentication)
• Display name and user tag
• Profile photo (optional)

Health & Fitness Data

• Gender, date of birth, height, and weight
• Fitness goals, activity level, and experience level
• Body measurements (weight, body fat %, muscle mass)
• Workout logs (exercises, sets, reps, weight lifted)
• Step count data (from device pedometer)

Nutrition Data

• Logged meals (food name, quantity, calories, macronutrients)
• Meal photos (when using AI meal analysis)
• Meal descriptions (when using text-based AI analysis)

Device Information

• Device type and operating system
• Push notification token
• Language/locale preferences

3. How We Use Your Information

• Provide and maintain the app's fitness and nutrition tracking features
• Analyze meal photos and text descriptions using AI to estimate nutritional content
• Track your workout progress and body measurements over time
• Connect you with your personal trainer (if applicable)
• Send push notifications (trainer invitations, questionnaires, reminders)
• Improve and optimize our services

4. Data Sharing

We do not sell your personal data. Your data may be shared with:

• Your Trainer: If you accept a trainer invitation, your trainer can view your workout logs, nutrition data, body measurements, and questionnaire responses.
• Service Providers: We use Supabase for authentication and data storage, and Google Gemini AI for meal analysis. These providers process data on our behalf under strict data processing agreements.

5. Data Storage & Security

Your data is stored securely on Supabase servers with row-level security (RLS) policies ensuring only you (and your trainer, if applicable) can access your data. All data is transmitted over HTTPS. Authentication tokens are stored locally on your device.

6. Device Permissions

• Camera: Used to photograph meals for AI nutritional analysis. Only accessed when you explicitly choose to scan a meal.
• Photo Library: Used to upload a profile photo or select meal images from your gallery.
• Motion & Fitness (Pedometer): Used to count your daily steps. Only accessed if you use the step tracking feature.
• Notifications: Used to deliver trainer invitations, questionnaire reminders, and workout notifications.

7. Your Rights

You have the right to:

• Access and update your personal data through the app's Profile section
• Request deletion of your account and all associated data
• Disconnect from a trainer at any time
• Opt out of push notifications through your device settings

8. Account Deletion

You can request account deletion by emailing aerafitnessapp@gmail.com or by visiting our Account Deletion page. Upon deletion, all your personal data, workout logs, nutrition data, and body measurements will be permanently removed within 30 days.

9. Children's Privacy

Aera is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, contact us at: aerafitnessapp@gmail.com