Privacy Policy

WarmUp is a fitness coaching platform operated by TeamWarmUp LLC ("WarmUp," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

If you have questions about this policy or our privacy practices, contact us at support@warmup.app or by mail at [Company Mailing Address].

We collect the following categories of information to provide and improve the Service:

• Account information: your name, phone number, and email address.
• Profile and fitness goals: the training objectives, preferences, and profile details you provide.
• Workout data: workouts, programs, and exercise history created or completed within the Service.
• In-app messages: messages exchanged between clients and trainers on the platform.
• Health & fitness data from Apple HealthKit: with your explicit permission, metrics such as heart rate variability, resting heart rate, blood oxygen, sleep, steps, active and basal energy, and VO2 max. See the section below for details.

WarmUp integrates with Apple HealthKit only after you grant explicit permission. You control which health metrics you share, and you can revoke access at any time through your device's Health settings.

Health data accessed through HealthKit is used solely to:

• Personalize your training and recommendations; and
• Display your metrics to you and, if you choose to connect a trainer, to that trainer so they can better support your progress.

We never use your health data for advertising or marketing, we never sell it, and we never share it with third parties for their own use. HealthKit data is not used for any purpose other than delivering the Service to you.

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Personalize training programs and fitness recommendations;
• Enable communication between clients and trainers;
• Process payments and manage subscriptions;
• Verify your identity and secure your account (including SMS one-time passcodes);
• Respond to support requests and communicate with you about the Service; and
• Comply with legal obligations and enforce our terms.

Where required by law (for example, under the GDPR), we process your personal data on the following legal bases:

• Consent — for health and fitness data accessed via HealthKit and other optional features.
• Performance of a contract — to deliver the Service you sign up for.
• Legitimate interests — to secure, maintain, and improve the Service.
• Legal obligation — to comply with applicable laws.

We do not sell your personal information. We share data only with service providers who help us operate the Service, and only as needed to perform their functions:

• Amazon Web Services (AWS) — cloud hosting and data storage.
• Stripe — payment processing.
• Twilio — SMS delivery for one-time passcodes.

These providers are bound by contractual obligations to protect your data and may only use it to provide services to us.

Payments are processed by Stripe. We do not store full payment card numbers on our systems. Your payment information is handled in accordance with Stripe's privacy policy and applicable payment card industry standards.

We retain your personal data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it.

We implement administrative, technical, and physical safeguards designed to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing.

Deleting your account and data: You can delete your account and all associated data at any time from within the app under Settings → Delete Account, or by emailing support@warmup.app. Deletion is permanent and cannot be undone.

The Service is not intended for children. We do not knowingly collect personal data from anyone under the age of 13 (or under 16 where a higher age applies). If we learn that we have collected such data, we will delete it. If you believe a child has provided us information, contact us at support@warmup.app.

We are based in the United States, and your information may be processed and stored in the United States or other countries where our service providers operate. These locations may have data protection laws that differ from those in your jurisdiction. Where required, we use appropriate safeguards for such transfers.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you within the app. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.