Privacy Policy

1. Scope

Flexor Labs Ltd ("Flexor", "we", "our", or "us") provides the Flexor mobile application, website, and related services (collectively, the "Service"). This Privacy Policy explains which information stays on your device and what is processed when you choose to use an online feature.

The mobile app does not require a Flexor account, sign-in, name, email address, username, or personal profile. You can download the app and start using its free core features immediately.

2. Information and Storage

2.1 No Flexor Account or Identity Profile

Flexor does not ask you to register or provide identity details to use the mobile app. In particular, the app does not require or create a Flexor profile containing your:

• Name
• Email address
• Username
• Password or login credentials
• Personal account profile

2.2 Information Kept on Your Device

The information needed for the app's offline features is kept locally on your device rather than attached to a Flexor account. This includes:

• Custom routines and favourites
• App preferences, goals, constraints, focus areas, and experience level
• Reminders and notification preferences
• Session history, completed routines, progress, and streaks

You can remove this information from the device with Delete Local Data in the app settings. Uninstalling the app may also remove local app data, subject to your device and backup settings. Deleting local data or uninstalling Flexor does not cancel an App Store or Google Play subscription.

2.3 Optional Flexor AI Requests

Flexor AI is optional and requires an internet connection. When you make an AI request, the information needed to answer it is sent to Flexor's service and its AI provider. Depending on what you enter or select, this can include:

• Your selected goals, focus areas, constraints, experience level, available time, and app language
• Optional notes you type for the request
• The relevant routine or exercise catalogue information needed to generate the result
• Technical request information such as IP address, user agent, response status, and performance information

AI request and response records may be retained for service operation, security, troubleshooting, allowance management, and cost monitoring. They are not used to create a Flexor identity account. Do not include your name, contact details, medical records, or other sensitive personal information in optional notes.

2.4 App Analytics and Diagnostics

A mobile build may use analytics, crash-reporting, and platform services to understand product interactions, app version, device or operating-system type, failures, and performance. These services are not intended to receive your name, email address, custom routine text, or AI notes, and Flexor does not use them to create a personal app profile. The current Apple App Store and Google Play disclosures provide platform-specific details.

2.5 Premium Purchases

Apple or Google processes Premium purchases through the store account you use on your device. Billing and entitlement services may provide transaction, product, renewal, and subscription-status information needed to unlock and manage Premium. A store account is not a Flexor user account, and Flexor does not receive or store your full payment-card number.

2.6 Website and Support Information

If you contact Flexor through the website or by email, you choose to provide your contact details, message, and any other information you include. This information is used to respond to your request and is separate from using the mobile app without an account.

3. How We Use Your Information

• Provide, operate, and maintain Flexor and its core features
• Process an AI request when you choose to use Flexor AI
• Confirm Premium entitlement and support store-managed subscriptions
• Respond to support requests and service communications
• Improve product quality, performance, and reliability
• Detect, prevent, and investigate abuse, fraud, and security issues
• Comply with legal and regulatory obligations

4. Cookies, Analytics, and Tracking Technologies

The website uses necessary storage for site features. Google Analytics is optional: its script is not loaded and analytics events are not sent until you choose “Accept analytics” in the website preference notice. If you reject analytics, the website records that preference in your browser so it can respect the choice on later visits.

The mobile app may use platform services or SDKs for diagnostics, subscription management, and anonymous or pseudonymous product measurement as described above and in the relevant app-store disclosure. These services do not create a Flexor login or identity profile.

5. How We Share Information

• AI and hosting providers when you submit an optional Flexor AI request
• Analytics and crash-reporting providers for product measurement and diagnostics
• Apple, Google, and subscription-service providers for billing and Premium entitlement management
• Support, communications, and website providers when you contact us or use the website
• Legal, regulatory, or law-enforcement authorities where required
• Acquirers or successors in connection with mergers, financing, reorganization, or sale of assets

Flexor does not require identity details for advertising and does not sell personal data for money.

6. Data Retention

Local routines, preferences, reminders, history, and streaks remain on your device until you delete them, clear the app's local data, or uninstall the app, subject to device backups. AI operational records, diagnostics, support correspondence, and transaction records are retained only for as long as reasonably needed for the purposes described in this policy, including security, support, accounting, dispute resolution, and legal obligations.

Apple, Google, AI, analytics, and other service providers apply their own retention rules to information they process under their policies.

7. Security

We use commercially reasonable technical, administrative, and organizational safeguards to help protect information against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers in accordance with applicable law.

9. Your Rights and Choices

• Delete locally stored app data using Delete Local Data
• Access, correct, or update personal information
• Request deletion of information held by Flexor where applicable
• Object to or restrict certain processing where available by law
• Request portability of certain data where available by law
• Withdraw consent where processing is based on consent
• Opt out of marketing communications using unsubscribe controls or by contacting us

There is no Flexor identity profile to delete. We may need enough information to locate a support message or online record and verify that a request relates to you before responding.

10. U.S. State Privacy Rights (Including California)

Residents of certain U.S. states may have rights to know, access, correct, delete, or obtain a copy of personal information, and to opt out of certain profiling, targeted advertising, or sharing activities.

We do not knowingly sell personal information for money. Where state law gives you additional rights concerning online processing, you may submit a request using the contact details below.

To exercise your rights, contact us using the information in Section 16 below. Authorized agents may submit requests where allowed by law.

11. EEA, UK, and Switzerland Privacy Rights

If you are located in the EEA, UK, or Switzerland, you may have rights to access, rectify, erase, restrict, object, and data portability, plus the right to lodge a complaint with your local supervisory authority.

Our legal bases for processing may include performance of a contract, legitimate interests, legal obligations, and consent where applicable.

12. Children's Privacy

The Service is not intended for children under 13, or a higher minimum age where required by local law. Flexor does not knowingly collect identity information from children below the applicable age threshold.

If you believe a child included personal information in an AI request or support message, contact us so we can review and delete it where appropriate.

13. Health Data and HIPAA Notice

Flexor is a general fitness and wellness service, not a medical or physiotherapy service. It does not diagnose symptoms or provide medical treatment. Flexor is not a covered entity under the U.S. Health Insurance Portability and Accountability Act (HIPAA).

Do not include medical records, emergency health information, or other sensitive personal information in AI notes or support messages.

14. Third-Party Services

The Service may contain links or integrations with third-party services, websites, or platforms. Their data practices are governed by their own policies, not this Privacy Policy.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will be posted on this page. Continued use of the Service after changes become effective means you accept the updated policy.

16. Contact Us

Email: hi@flexor.app