Privacy Policy

1. Introduction

Do App ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Name, email address, and profile information
• Account credentials and authentication data
• Payment and billing information (processed securely through third-party payment processors)
• Communications and feedback you provide to us

2.2 Health and Fitness Data

With your explicit consent, we collect and process:

• Workout data (exercises, sets, reps, duration, intensity)
• Activity tracking data (runs, walks, hikes, bike rides)
• GPS location data for outdoor activities
• Heart rate and other biometric data from connected devices
• Nutrition and meal tracking information
• Meditation and mindfulness session data
• Photos and media you upload related to fitness activities

2.3 Device and Usage Information

• Device type, operating system, and unique device identifiers
• App usage data and interaction patterns
• IP address and general location information
• Crash reports and performance diagnostics

2.4 Social Features Data

• Posts, comments, and reactions you share
• Connections with other users
• Challenge participation and leaderboard data
• Referral codes and referral program participation

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your transactions and manage your account
• Personalize your experience with AI-powered recommendations
• Generate workout plans, meditation sessions, and nutrition guidance
• Enable social features and community interactions
• Send you notifications, updates, and promotional communications (with your consent)
• Analyze usage patterns to improve our app and services
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our Terms of Service

4. AI and Data Processing

Our app uses artificial intelligence to provide personalized fitness recommendations, workout generation, meal analysis, and meditation guidance. Your data may be processed by AI models to:

• Analyze your fitness patterns and progress
• Generate customized workout plans
• Provide nutrition insights from food photos
• Recommend meditation sessions based on your needs
• Identify equipment and suggest exercises

We implement appropriate safeguards to protect your data during AI processing and do not use your personal health data to train models that benefit other users without your explicit consent.

5. Data Sharing and Disclosure

5.1 With Your Consent

We share your information when you explicitly choose to:

• Post content publicly in the social feed
• Participate in challenges with other users
• Share your achievements or activities
• Connect with friends and followers

5.2 Service Providers

We share data with trusted third-party service providers who assist us in:

• Cloud hosting and data storage (AWS)
• Payment processing (Stripe)
• Analytics and performance monitoring
• Customer support and communications

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

5.3 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security audits and monitoring
• Employee training on data protection

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and personal data
• Data Portability: Receive your data in a portable format
• Opt-Out: Unsubscribe from marketing communications
• Withdraw Consent: Revoke permissions for data collection (e.g., location, health data)

To exercise these rights, contact us at privacy@itsdoapp.com or use the in-app settings.

7.1 Account Deletion

You may delete your account at any time from Profile Settings in the app. When you delete your account:

• Permanently removed: Your name, email address, username, bio, profile picture, AI personalization data, and authentication credentials
• Permanently removed: Follow relationships and social connections
• Anonymized: Posts you created will have their author attribution replaced with "[deleted]" — post content is retained for community value
• Deactivated: Referral codes associated with your account
• Authentication disabled: Your login credentials are permanently deleted from our authentication provider, preventing future sign-in

7.2 Data Deletion Request

Alternatively, you may request deletion of your personal data while keeping your account structure. This removes all personally identifiable information (PII) but retains anonymized, non-identifiable data.

7.3 Data We Retain After Deletion

After account or data deletion, we retain the following non-identifiable information for legitimate business purposes:

• Anonymized usage analytics: Aggregated, non-identifiable statistics about app usage patterns to improve our services
• Anonymized workout data: De-identified fitness statistics that cannot be linked back to you
• Deletion audit log: A record of the deletion request (containing only a hashed email and timestamp) retained for up to 3 years for legal compliance and fraud prevention
• Financial records: Transaction records as required by tax and accounting regulations

Deletion requests are processed immediately. If you believe your data has not been fully removed, contact us at privacy@itsdoapp.com.

7A. GDPR and CCPA Compliance

For EU/EEA Residents (GDPR)

Under the General Data Protection Regulation, you have additional rights including:

• Right to be informed about how your data is processed
• Right to restrict processing of your data
• Right to object to processing based on legitimate interests
• Right not to be subject to automated decision-making

Our legal bases for processing include: consent, performance of a contract, and legitimate interests (service improvement and fraud prevention).

For California Residents (CCPA)

Under the California Consumer Privacy Act, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of your personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

8. Health Data and HIPAA

While we collect health and fitness data, Do App is not a covered entity under HIPAA. However, we treat your health information with the highest level of care and implement appropriate safeguards to protect it.

For enterprise customers, we offer HIPAA-compliant solutions. Contact us for more information.

9. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Referral Program

If you participate in our referral program, we collect and process referral codes, click tracking data, and commission information. Referral earnings are subject to our Terms of Service and payout policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: