This Privacy Policy explains what information JustStart collects, how we use it, and the choices you have. It applies to the JustStart mobile application and related services (the "Service").
| Category | Examples | Why we collect it |
|---|---|---|
| Account data | Email address, display name, sign-in provider (Google/Apple/email) | To create and secure your account and communicate with you |
| Fitness profile | Primary goal, training experience, sex, typical session duration, available equipment, machine preferences, weight unit | To generate workout recommendations matched to your goals and setup |
| Workout data | Completed sessions, exercises, sets, reps, weight, RPE, preferences, history | To track progress and tailor future recommendations |
| Technical data | IP address, device type, app/device integrity signals, error logs, request timestamps | To operate, debug, and secure the Service |
You can explore a sample version of JustStart without creating an account. It includes a sample fitness profile and workout history. Information you enter while using demo mode is stored in a separate area of app storage on your device; it is not linked to a signed-in account or sent to our API. Demo data remains on the device until you choose "Reset demo data" or clear JustStart's app storage in your device settings. Demo mode does not create an account, sync workouts, or create shareable workout-plan links.
We do not use your information for advertising or profiling unrelated to the Service.
Where the EU/UK GDPR applies, we process your information on these bases:
Your fitness profile and workout history can reveal information about your health. Under some laws (such as the GDPR), this may be considered "special category" data requiring heightened protection. We treat this data as sensitive, collect only what is necessary, and process it solely to provide the Service. You may withdraw consent or delete your account at any time, which removes this data.
We do not sell your personal information. We share data with service providers that help us operate the Service, and with people you choose to share a workout plan with:
These providers process data on our behalf under contracts that restrict their use of it. We do not disclose your information to service providers for their own marketing. A shared plan link does not grant access to your full fitness profile or workout history.
We retain your information for as long as your account is active, and for a limited period afterward as needed for legal and operational purposes. Deleting your account removes your profile and workout history from our systems. To prevent repeated account recreation, we retain a non-reversible keyed identifier for up to 24 hours. Identity-deletion job status is retained for up to 7 days. Backups and logs may retain residual data for a short, bounded retention period. A workout-plan snapshot is available through its link for 48 hours, after which the link no longer provides access. Expired snapshots are removed by periodic backend cleanup, so they may remain in storage after link access ends. Deleting the account that created a link revokes its shared plans.
GDPR (EU/UK) and similar laws: you may request access, correction, deletion, restriction, and portability of your personal data, and you may object to or withdraw consent for processing.
CCPA/CPRA (California): you have the right to know what personal information we collect, to request deletion, to opt out of the "sale" or "sharing" of personal information, and to not be discriminated against for exercising these rights.
To exercise any of these rights, use the in-app account settings (including "Delete account" or clear workout history), request account or workout-history deletion outside the app, or contact us at JustStartSupport@gmail.com. We will verify your identity and respond within the time required by law.
Data sent between the app and our services is transmitted over encrypted connections. The app also stores some profile, preference, and workout information in local app storage, including information entered in demo mode. JustStart does not add a separate encryption layer to this local storage; any device-level protection depends on your device and its settings. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we will delete it.
We operate in United States. Your information may be processed in countries with different data-protection laws. We rely on appropriate safeguards (such as standard contractual clauses) where required.
We may update this Privacy Policy from time to time. Material changes will be communicated through the Service before they take effect.
Questions, concerns, or requests about your data? Contact us at JustStartSupport@gmail.com.