Privacy Policy
1. Introduction
This Privacy Policy explains how GrindUP (hereinafter referred to as "we" or "the App") collects, uses, stores, and discloses your personal information. We respect your privacy and are committed to complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the requirements of Apple's App Store review guidelines.
By using the App, you agree to the terms of this Privacy Policy. If you do not agree to this policy, please do not use the App.
2. Information We Collect
2.1 Information You Voluntarily Provide
Personal Information: Age, Gender, Height, Weight, Fitness Goals
Health and Fitness Data: Exercise Records (Type, Duration, Distance, Calories Burned), Weight Records, Body Measurements, Training Plan Completion Status
Important Note: Under the GDPR, health data falls under "Special Category Data" and enjoys a higher level of legal protection. We process this type of data only with your explicit consent.
2.2 Automatically Collected Information
Device Information: Device model, operating system version, unique device identifier
Usage Data: Application function usage frequency, page visits, function interaction records
Crash logs and performance data
IP address and approximate location (city level only, for content distribution optimization)
3. How We Use Your Information
The information we collect is used for the following purposes:
Providing core fitness functions (training plan customization, progress tracking, data recording and analysis)
Personalizing your fitness experience and recommended content
Improving and optimizing application functions and user experience
Sending application updates, security notifications, and service-related information
Processing your support and feedback requests
Complying with legal and regulatory obligations
4. Legal Basis for Data (for GDPR users)
If you are located in the European Economic Area (EEA), the legal basis for our processing of your personal data includes:
Your consent: Processing of special categories of data such as health data
Contractual performance: Providing you with the requested fitness services
Legal interests: For application improvement, security, and fraud prevention
Legal obligations: Complying with applicable laws and regulations
5. Data Sharing and Disclosure
5.1 Third-Party Service Providers
We may share data with the following types of third parties:
Cloud Service Providers: for data storage and hosting
Analysis Services: for application performance and usage analysis (data is anonymized)
Payment Processors: process subscription payments through the Apple App Store; we do not store complete payment information.
5.2 We will not:
Sell your personal data to third parties
Use your health data for ad targeting
Share your personal data with third-party AI services unless we have your explicit permission.
5.3 Legal Requirements
We may disclose your information as required by law or to protect our legal rights.
6. Data Storage and Security
Encryption Measures: Data transmission is encrypted using TLS, and data storage is encrypted using AES-256.
Data Retention: We retain your data only for the period necessary to provide you with the services you require.
Security Measures: We implement industry-standard security measures to protect your data from unauthorized access, alteration, or destruction.
7. Your Rights
Under GDPR and CCPA, you have the following rights:
Right of Access: To obtain a copy of the personal data we hold about you.
Right of Correction: To correct inaccurate or incomplete personal data.
Right of Erasure: To request the erasure of your personal data ("Right to be forgotten").
Right of Restriction of Processing: To restrict how we process your data.
Right of Data Portability: To obtain your data in a structured, commonly used format.
Right of Objection: To object to data processing based on legitimate interests.
Right of Withdrawal of Consent: To withdraw your consent at any time (without affecting the legality of processing based on consent prior to withdrawal).
If you are a California resident, you also have the right to:
To know the categories of personal information we collect, use, disclose, and sell.
To request the erasure of your personal information.
To opt out of the "sale" or "sharing" of your personal information (this application does not sell personal information).
8. Children's Privacy
This application is not intended for children under the age of 13. We do not knowingly collect personal information from children under the age of 13. If we discover that we have unintentionally collected such information, we will delete it immediately.
9. Cross-border Data Transfer
Your data may be transferred to and stored in countries with different data protection laws than your country. We ensure that such transfers comply with applicable legal requirements, such as through Standard Contractual Clauses (SCCs).
10. Changes to the Privacy Policy
We may update this Privacy Policy from time to time. Please review this policy periodically.
12. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact:
Email: [email protected]