Privacy Policy

Last Updated: December 2024

1. Introduction

Welcome to Chalk ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.

2. Information We Collect

2.1 Information You Provide to Us

  • Account Information: When you create an account, we collect your email address, username, and password (encrypted).
  • Profile Information: Optional information such as your name, profile picture, and fitness goals.
  • Workout Data: Exercise names, sets, reps, weights, workout dates, and custom notes you add.
  • Communication Data: Information from support requests or feedback you send us.

2.2 Information Collected Automatically

  • Usage Data: Information about how you use the app, including features accessed and time spent.
  • Device Information: Device type, operating system version, unique device identifiers, and crash reports.
  • Authentication Tokens: Secure tokens for maintaining your login session.

2.3 Information from Third-Party Services

If you choose to sign in with Google, we receive your basic profile information (name, email, and profile picture) from Google's authentication service.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Enable cloud synchronization of your workout data across devices
  • Send you technical notices and support messages
  • Respond to your comments, questions, and requests
  • Monitor and analyze trends, usage, and activities
  • Detect, prevent, and address technical issues
  • Provide personalized features and recommendations

4. Data Storage and Security

Your data is stored securely using Google Firebase services, which employ industry-standard security measures including:

  • Encryption in transit and at rest
  • Regular security audits and updates
  • Access controls and authentication
  • Secure data centers with physical security measures

While we implement appropriate technical and organizational measures to protect your personal information, no method of transmission over the Internet is 100% secure.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following situations:

  • Service Providers: With Firebase (Google) for data storage and authentication services
  • Legal Requirements: If required by law or in response to valid requests by public authorities
  • Protection of Rights: To protect and defend our rights or property
  • With Your Consent: With your explicit consent for any other purpose

6. Your Rights and Choices

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your account and associated data
  • Data Portability: Export your workout data
  • Opt-out: Opt-out of non-essential data collection

To exercise these rights, please contact us at privacy@chalk.fitness

7. Children's Privacy

Our service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

8. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction. Firebase servers are located in multiple regions globally to provide optimal performance.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

10. Contact Information

If you have questions about this Privacy Policy, please contact us:

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your information, and the right to opt-out of the sale of your personal information (which we do not do).

12. European Privacy Rights

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability, the right to restrict processing, and the right to object to processing.