Flexbound

Flexbound / policies

Privacy Policy

How Flexbound collects, uses, protects, exports, synchronizes, and deletes workout, nutrition, account, and subscription information.

Last updated July 10, 2026

Operator: Suolar (“we,” “us,” “our”)
App: Flexbound
Contact: suolaraketti@proton.me

This Privacy Policy explains what information Flexbound collects, how it is used, and the choices you have. It applies to the Flexbound mobile app, flexbound.app, and related backend services.

This is a practical boilerplate for App Store privacy disclosures. It is not personalized legal advice. Have counsel review before publishing as your final policy.

1. Summary

Flexbound is a fitness and nutrition logbook. Much of your data can stay on your device (local-first). When you sign in or use cloud-assisted features, some data is processed on our servers and by subprocessors listed below. We do not sell your personal information. We do not use your journal content for third-party advertising.

2. Information we collect

2.1 Information you provide

  • Account: email and authentication credentials when you create an account (via Supabase Auth).
  • Profile: name, age, sex, height, weight, training style, experience, activity level, nutrition preference, goals, and macro targets.
  • User content: journal entries and raw notes; parsed workouts (exercises, sets, reps, loads); pain flags; food entries and corrections; saved meals; workout plans; weekly reviews; source traces.
  • Support: messages you send to suolaraketti@proton.me.

2.2 Information from purchases

If you subscribe to Flexbound Pro, Apple or Google processes payment. We (and RevenueCat) receive subscription status and entitlement information, not your full payment card number.

2.3 Technical information

When the app talks to our backend, standard technical data may be processed (for example device/app identifiers needed for auth, IP address at the network edge, timestamps, and error logs). We do not currently operate a separate advertising analytics SDK. If we add analytics later, we will update this policy and App Store privacy labels.

2.4 Health & fitness related data

Workout logs, body metrics, nutrition entries, and pain notes are health-related user content you choose to enter. They are used to provide the logbook and coaching features, not for medical diagnosis.

3. How we use information

We use information to:

  • Provide and maintain the Service (logging, parsing, estimates, reviews, plans, sync)
  • Enforce freemium limits and Pro entitlements
  • Improve reliability, safety, and product quality
  • Respond to support requests
  • Comply with law and protect against abuse

Deterministic calculators (macros, TDEE, 1RM, volume, progression rules) run from your data and approved methodology rules. AI models, when used, write or explain from facts and context we supply; they are not the source of truth for your raw notes.

4. Local-first storage

By default, the app can store data on your device. Local data remains on the device unless a feature uses a backend service (account sync, Edge Functions for AI/nutrition lookup, etc.).

Device reset (Settings → Reset all data) clears local app storage on that device. It does not by itself cancel a store subscription.

5. Backend services and subprocessors

Depending on configuration, we may use:

Provider Purpose
Supabase Authentication, database, Edge Functions
RevenueCat Subscription entitlement management
Apple / Google App distribution and in-app purchases
Kimi (Moonshot) AI-assisted writing / parsing (server-side)
USDA FoodData Central Generic food nutrition references
Open Food Facts Packaged food nutrition references
Perplexity Low-confidence food/source fallback retrieval

Private API keys are stored on the server (Edge Functions), not in the mobile app binary. Only public configuration (for example Supabase URL/anon key and RevenueCat public SDK keys) ships in the app.

6. AI and estimates

AI-generated suggestions, workout plans, food estimates, and weekly reviews are informational. Nutrition estimates may be inaccurate and should be reviewed by you. User corrections are treated as your source of truth inside the app. Estimates may show source, serving assumption, and confidence.

7. Sharing

We share information only:

  • With subprocessors that help us operate the Service (under contractual obligations)
  • With app stores / RevenueCat for purchases and entitlements
  • When you direct us to (for example export/share from your device)
  • If required by law, or to protect rights, safety, and the Service
  • In connection with a merger, acquisition, or asset sale (with notice where required)

We do not sell personal information and do not share journal content with data brokers for advertising.

8. Retention

  • Local data: until you reset the app, uninstall (subject to OS behavior), or overwrite it.
  • Account / cloud data: until you delete your account, or sooner if we no longer need it to provide the Service.
  • Backups and logs: may persist for a limited period for security, abuse prevention, and legal compliance.
  • Purchase records: retained by Apple/Google and as needed for accounting and fraud prevention.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, export, or delete personal data, and to object to or restrict certain processing.

In the app you can:

  • Edit profile and goals
  • Export your logbook
  • Reset local data
  • Delete account and remote data when signed in

Email suolaraketti@proton.me for privacy requests. We will respond within a reasonable period as required by applicable law.

If you are in the EEA/UK, our processing of account and cloud data is generally based on contract (providing the Service), legitimate interests (security, improvement), and consent where required (for example certain optional processing).

10. Children

The Service is not directed to children under 13 (or the higher age required in your region). We do not knowingly collect personal information from children under that age. If you believe we have, contact us and we will delete it.

11. Security

We use industry-standard measures appropriate to our size and the nature of the data (encryption in transit to our backend, access controls on server secrets, RLS on user-owned tables when sync is enabled). No method of transmission or storage is 100% secure.

12. International transfers

If you use cloud features, data may be processed in the United States or other countries where our providers operate. Where required, we rely on appropriate transfer mechanisms.

13. Health & safety notice

Flexbound does not provide medical advice, diagnosis, or treatment. Stop or reduce activity if you experience pain, dizziness, or concerning symptoms, and consult a qualified professional for medical, dietary, or training concerns.

14. Changes

We may update this Privacy Policy. The “Last updated” date will change when we do. Material changes will be highlighted in-app or on this page when appropriate.

15. Contact

Privacy / support: suolaraketti@proton.me
Website: https://flexbound.app
Terms: https://flexbound.app/terms
Support: https://flexbound.app/support

App Store privacy labels (draft)

Likely data types linked to you:

  • Health & Fitness (workout logs, body metrics, nutrition, pain notes)
  • User Content (journal entries)
  • Purchases (subscription status)
  • Identifiers (account ID when signed in)
  • Contact Info (email when you create an account)

Tracking: No, unless you later add advertising/tracking SDKs.