Privacy Policy

1. Scope

This Privacy Policy explains how FitLink Duo ("we" or "us") collects, uses, and protects your personal data when providing the FitLink Duo app ("the Service"). For privacy questions, email contact@fitlinkduo.app.

2. Information we collect

• Account data: email or phone number, and your password (stored only as an irreversible hash — we can't see your password). If you sign in with Google or LINE, we receive that account's identifier, name, and email.
• Profile: name, birthday (used to calculate your age), gender, the gender you want to match with, fitness goals, training types, schedule, usual gyms, region, bio, photos, and language.
• Location (optional): only after you turn on "Share location" do we read your device's approximate location.
• Photo verification: the selfie you take to verify your identity.
• Activity: swipes, matches, chat messages, blocks and reports, Duo check-in photos and records, points and virtual item records, and when you were last active.
• Purchases: subscription status and purchase history. Payments are handled by Apple or Google; we never receive your card details.
• AI fitness assistant: what you type in AI conversations.
• Technical data: push notification tokens, IP addresses, and server logs (to prevent abuse and keep the Service secure).

3. How we use it

• To create and manage your account and verify sign-ins
• To recommend and match workout partners and calculate distance between you
• To provide chat, Duo check-ins, points, rewards, and other features
• To provide paid features and check subscription status
• To send push notifications about matches, messages, and more
• To review reports and photo verifications, handle suspensions and appeals, and prevent scams and abuse
• To answer your questions, fix problems, and improve the Service

We don't use your data for any other purpose, and we don't use it for advertising.

4. What other users can see

• Your profile card: name, age, photos, bio, fitness goals, training types, gyms, region, and similar details (never your birthday or contact info).
• Distance: other users see only an approximate number of kilometers, never your exact location.
• Chat messages are visible only to you and the other person.
• Duo check-in photos and records are visible only to your Duo partner.

5. Service providers

We do not sell your personal data. To run the Service, we share data with the following providers only as needed:

• Supabase: database and photo storage (servers in Tokyo, Japan)
• Our cloud hosting provider: runs the Service's servers
• Expo (USA), Apple, Google: deliver push notifications
• Apple App Store, Google Play, RevenueCat (USA): process payments and manage subscription status
• Google, LINE: only if you choose to sign in with them
• Anthropic (USA): generates AI fitness assistant replies; only what you type in AI conversations is sent

Otherwise, we share your data only with your consent, when required by law, or when necessary to protect someone's life or physical safety.

6. International transfers

Your data is stored mainly in Japan. Some providers (such as Expo, RevenueCat, and Anthropic) are located in the United States, and your data is processed there. The United States does not have a comprehensive privacy law equivalent to Japan's, so we only use providers that have appropriate safeguards in place and require them to handle your data properly. By using the Service, you consent to these transfers.

7. Retention and deletion

We keep your data while your account exists. You can delete your account anytime from the Me tab; we then delete your profile, photos, matches, chats, Duo records, and related data. To prevent the same purchase from being redeemed twice, purchase transaction IDs are kept after account deletion (without your name or other directly identifying details). Backups are automatically overwritten after a period of time. Payment records kept by Apple or Google under their own policies are outside our control.

8. Your rights

• Access and correction: edit directly in Edit Profile.
• Deletion: delete your account in the app.
• Copies of your data, stopping use, or other requests: email contact@fitlinkduo.app. We'll respond promptly after verifying your identity.
• Location and notifications: turn them off anytime in the app or your device settings.
• You can also file a complaint with the data protection authority where you live (in Japan, the Personal Information Protection Commission).

9. Security

We encrypt data in transit (HTTPS), store passwords as hashes, restrict access to our database, and limit login attempts and other forms of abuse. No online service can be 100% secure, so please keep your login information safe.

10. Minors

The Service is only for people 18 and older. If we learn that someone under 18 is using the Service, we will disable the account and delete the related data.

11. Changes to this policy

We may update this Privacy Policy. We'll announce material changes via an in-app notice or on this page before they take effect.

12. Contact us

If you have questions about this policy or your personal data, email contact@fitlinkduo.app.