VexaFit

Privacy Policy

This Privacy Policy explains how VexaFit: AI Form Coach collects, uses, stores, and deletes data when you use the VexaFit mobile app, the VexaFit account deletion page, and related services.

Effective date: August 12, 2026

1. Who we are

VexaFit is a fitness application for workout tracking, movement analysis, and AI-assisted training suggestions for general fitness use. The current version emphasizes squat coaching, but VexaFit may expand to support additional fitness and training features over time.

Contact: [email protected]

2. What data we collect

Depending on how you use VexaFit, we may collect the following categories of data:

  • Account information, such as your email address, if you create an account.
  • Workout records, including timestamps, rep counts, duration, tracking quality, form alerts, and related training metrics.
  • Optional user-provided context, such as your goal, experience level, pain flag, notes, or feedback comments.
  • Anonymous movement-interest responses on our website, including your selected movement, optional free-text movement name, source page, and submission time. No account or email is required.
  • Closed-beta coordination details, such as the Google Play email you submit, your beta join and reminder status, and your unsubscribe status.
  • AI-generated coaching responses and training suggestions.
  • Product analytics, including limited feature-use events, app-instance identifiers, and an internal account identifier when you sign in.
  • Technical and diagnostic data, such as crash and runtime error information needed to operate and secure the service.
Camera-based movement analysis is designed for on-device processing. Raw workout video or images are not recorded, saved, or uploaded by default.

3. How we use data

  • Provide workout analysis, training history, and related fitness features.
  • Generate general fitness suggestions, AI coaching summaries, and future training support features.
  • Authenticate accounts and synchronize account-linked data across devices.
  • Respond to feedback, troubleshoot issues, and keep the service secure.
  • Comply with legal requirements and enforce our service policies.

4. Third-party processors

We use the following third-party services to operate, measure, and maintain VexaFit:

  • Supabase for authentication and PostgreSQL database storage.
  • Google Cloud Run for backend API and service execution.
  • Alibaba Cloud DashScope / Qwen as a service provider for AI-generated coaching based on structured workout summaries and related fitness inputs.
  • Google Firebase Analytics for limited product analytics, such as feature-use events and app-instance identifiers.
  • Google Firebase Crashlytics for crash, ANR, and runtime error diagnostics.
  • Cloudflare Pages and D1 for website delivery and anonymous movement-interest response storage.
  • Resend for sending closed-beta operational email reminders after you explicitly opt in.

When AI features are used, we send structured workout metrics and selected workout context needed to generate a response. This may include optional workout notes, but does not include raw workout video, images, pose streams, or feedback comments. DashScope / Qwen processes this API data on VexaFit's behalf and does not use it for its own independent model training, fine-tuning, evaluation, or improvement. API input and output may be retained by the provider for up to 30 days for operational and security purposes, then automatically deleted. The data is processed in the provider region configured for the service. If VexaFit adds new product features in the future, we may update the types of structured fitness data described here and will update this Privacy Policy accordingly.

Firebase Analytics and Firebase Crashlytics are enabled only where configured for the relevant app build. Firebase Analytics receives the limited product events described above. Crashlytics receives crash, ANR, and limited runtime diagnostic information such as app version, device/build context, safe request paths, and failure classifications; VexaFit does not send request bodies, authentication tokens, or raw workout media. Their handling of data is also governed by their own privacy notices: Google Privacy Policy and Firebase Privacy Information.

If you join the VexaFit closed beta, we use the email you provide only to coordinate access and send Day 0, Day 3, Day 10, and Day 14 operational reminders. Resend processes those messages on our behalf. We do not sell or publicly display the address, and you can unsubscribe from beta reminders at any time using the link in each message or by contacting support.

5. Data retention and deletion

We keep account-linked training data until you delete it, delete your account, or it is otherwise removed in accordance with this policy.

Anonymous account data is automatically deleted after 90 days of inactivity. To preserve your training history long-term, please register an account.

Raw anonymous movement-interest responses are retained for up to 180 days so we can understand aggregate demand for possible future movement support. We do not require an account or email for this survey.

Closed-beta email records are retained only while needed to run the beta and its reminder schedule. You can unsubscribe at any time; to request deletion of the beta email record, contact [email protected].

Deleting an account removes the VexaFit account and associated cloud data from our active systems. Data already submitted to DashScope / Qwen may remain subject to its separate, up-to-30-day operational and security retention period before automatic deletion. Product analytics and diagnostic records already processed by Firebase Analytics or Firebase Crashlytics may be retained under those providers' applicable retention settings and policies, including aggregated or de-identified records that can no longer identify you.

You can request deletion in the following ways:

  • In the app, by deleting synced cloud data or deleting your account.
  • On the public web deletion page at /delete-account/.

6. Security

We use reasonable administrative, technical, and organizational measures to protect personal data in transit and at rest. No security method is perfect, and we cannot guarantee absolute security.

7. Your choices

  • You may choose to use the app without creating an account, subject to anonymous data retention limits.
  • You may delete your cloud data or your full account if you created an account.
  • You may contact us if you have questions about your data or this policy.

8. Health and medical disclaimer

VexaFit is for general fitness and educational purposes only. It is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. Consult a qualified healthcare professional before starting exercise or nutrition changes, especially if you have pain, injury, illness, or other health concerns.

9. Updates to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date on this page.