Privacy Policy

Who We Are

RVK Fitness provides a member app for fitness coaching, workouts, nutrition logging, check-ins, progress tracking, messaging, subscriptions, and account access.

Privacy contact: patrekur@rvkfitness.is

Data We Collect

Depending on how you use the app, we may collect account information, contact information, membership status, subscription and invoice details, workout logs, routine and custom-exercise data, exercise notes and demo media, nutrition entries, check-ins, measurements, progress photos, messages and message attachments shared with coaches, profile images, app settings and preferences, and technical information needed to keep the service secure and functional. Account app settings are stored so appearance, layout, reminder schedules, progress targets, and related preferences can remain consistent across your devices. Each settings area syncs only its own fields into the latest account copy. Its minimized retry receipt contains a random operation identifier, request fingerprint, settings area, changed field names, and whether a reset was requested; the setting values are not copied into that receipt. Notification saves likewise merge only notification-owned fields. Member profile changes create a separate minimized retry receipt containing only a random operation identifier, request fingerprint, changed field names, and whether the avatar changed; profile values and image paths are not copied into that receipt. Authorized profile administration records a reason category, changed field names, and relevant before/after access states in a restricted audit trail; names, phone numbers, kennitala, and internal notes are not copied into that audit event. Routine recipient emails are available only to authorized staff program-management requests and are not included when members load shared routine content. Routine assignments, coach nutrition-goal changes, exercise-library changes, and coach check-in feedback create minimized staff or account audit events. Check-in feedback audit records contain the check-in and message identifiers and whether text or video was included, not the feedback content. After a member deletes a check-in, a one-way account hash and its private photo paths may be retained for up to 14 days solely to recover interrupted deletion and finish private-file cleanup. Exercise creator email addresses remain internal and are not returned with shared exercise entries.

Messages and direct coach communication: Message text and optional photo or video attachments are stored so the signed-in member and their assigned coach can communicate inside RVK Fitness.

Device and notification data: If you enable device notifications, RVK Fitness stores an app-specific push token, device platform, app version, permission state, and notification preferences so requested alerts can reach that signed-in device. A pending token or settings update may remain temporarily on that device until the server confirms it. Signing out or denying permission cancels local reminders, unregisters the native token, and disables the matching server device. The token is not an advertising identifier and is not used for tracking.

How We Use Data

We use data to provide the app, manage membership access, deliver coaching, track progress, verify mobile subscriptions through Apple or Google and web subscriptions through Paddle, maintain legally required historical billing records, analyze nutrition entries, respond to support requests, improve reliability, prevent abuse, and comply with legal obligations.

Optional Reliability Diagnostics

Reliability diagnostics are off by default. If you turn them on in Privacy settings, the app may send a redacted error category, app version, device platform, page path, and basic loading-time measurements. Diagnostics never include workout details, nutrition entries, health data, photos, or messages.

Diagnostics may be linked to your account so support can investigate a problem, are visible only to authorized admins, are rate-limited, and are deleted after 90 days or when your account is deleted. You can stop future diagnostics at any time in Profile → Settings → Privacy.

Optional Website Analytics

Marketing analytics are off until you choose Allow analytics on the public RVK Fitness website. If you continue from that website to the web membership checkout, RVK Fitness may send Meta a general page-view, checkout-start, or completed-purchase event. These events may include the membership name, price, currency, and a random event identifier, but never your workout, nutrition, progress, health, photo, message, email-address, or phone-number data. Website analytics do not run in the iOS or Android app and never control payment processing or membership access.

Sharing

We do not sell personal data. We share data only with service providers needed to operate the app, including hosting, authentication, storage, payment, messaging, and analysis providers. Assigned coaches may access training, nutrition, step history, and private progress photos only while the member has enabled that permission in Profile → Settings → Privacy. Turning it off blocks the coach at the database and private-storage level on every device. Messages and check-ins remain available because the member sends those records directly to the coach.

Health And Fitness Information

The app stores fitness, nutrition, measurements, and progress data that you choose to provide. RVK Fitness is not a medical device and does not provide medical diagnosis or treatment. Consult a qualified healthcare professional before making medical decisions.

If you choose to connect Apple Health or Health Connect, RVK Fitness requests read access only to your daily step count. The app initially reads recent daily counts and then refreshes while the app is open; those counts are stored with your RVK Fitness account so your progress can appear across devices. Access begins only after you approve the device permission, can be stopped in the app, and can be revoked at any time in your device health settings.

Health, fitness, and nutrition data is not used for advertising, ad targeting, or general marketing profiles, and it is not sold to data brokers.

AI Meal Analysis

AI meal analysis is optional and off until you give explicit permission in the app. Your current consent choice and disclosure version are saved to your RVK Fitness account so the same choice applies on every device. A revocation takes effect immediately on the current device and may remain temporarily in its account-scoped sync queue while offline; a new grant stays off until the server confirms it. Before any analysis begins, the secure backend independently confirms that the signed-in member has accepted the current disclosure; a request from the browser cannot grant permission by itself.

When you choose this feature, the meal description or photo you selected is sent securely through RVK Fitness to OpenAI to estimate nutrition. Product text may also be checked against Open Food Facts. The data is used only to return the requested estimate and operate or secure the feature. AI estimates may be inaccurate and must be reviewed before saving. You can enter nutrition manually instead and revoke AI permission on every device at any time in Profile → Settings → Privacy.

Community Safety

Members can share selected progress posts, follow accounts, like or comment on posts, report posts or comments, and block accounts. Community feeds use a random public account identifier and public profile details; another member’s email address is never included in a feed response. Your profile visibility and interaction settings control who can see or interact with shared posts. The service verifies the reported content from its own records rather than trusting an account identity sent by the device. Reports, the verified content and context, the selected reason, optional details, and the internal reporter and subject account identifiers are used to review safety concerns, prevent abuse, and enforce our Community Guidelines. Authorized administrators may view the reported text and a short-lived private image preview when one is attached. Their final decision requires an internal review note and may remove the reported post or comment. Internal identities, moderator notes, and audit records are not returned to members. Duplicate active reports, excessive reports, and excessive comments are rate-limited to protect the service from abuse.

Security

We use access controls, authenticated sessions, secure backend services, role-based permissions, and collision-resistant account ownership keys for uploaded media to protect account data. Before, after, and progress-timeline photos are stored in a dedicated private bucket and displayed through short-lived signed links. They are never made public by an appearance setting. Members can see shared exercises and their own private custom exercises; only the exercise creator or an administrator can change an exercise or its uploaded demo. Older media folders are permanently reserved to one account and are locked if ownership would be ambiguous. Eligible older progress photos are moved from the avatar bucket into private storage after the member signs in. No internet service can be guaranteed to be completely secure, but we work to protect the information entrusted to us.

If your connection drops while you save a workout, nutrition entry, pinned meal, nutrition display field or personal goal, member profile detail or avatar confirmation, AI-consent choice, community post, follow, like, comment, report, privacy preference, app-setting patch, notification choice, or block/unblock choice, the pending change and its random retry identifier are stored temporarily on that device under your account until they can sync securely. Pending app-setting patches are separated by settings area and remain authoritative over an older server copy after an app restart. A pending avatar operation may also retain only the new and previous storage references until the app confirms which image should be removed. A pending push-token registration or outgoing notification preview may remain on the device until delivery is confirmed; outgoing previews expire after seven days. Pending changes are kept separate for each signed-in account, are not used for advertising, and are removed from the device queue after the related action has synced successfully.

Personal data exports are generated only for the signed-in member and are never accepted for a caller-selected account. Exports omit device push tokens, payment-provider identifiers and tokens, raw provider responses, internal security and moderation identities, and other community members’ email addresses. Billing screens receive only account-scoped subscription and payment-history summaries; Apple, Google, Paddle, and historical provider payloads remain server-side. Private media is provided through secure download links that expire after 24 hours.

Retention And Deletion

We keep account and activity data while your account is active and as needed for support, security, fraud prevention, accounting, legal, and regulatory obligations. You can request account deletion from inside the app or at Account Deletion. Some records may be retained where required by law. After deletion, a restricted legacy folder key and one-way ownership hash may remain only as a media-folder security reservation so a future account cannot inherit access to an older private folder.

Your Choices

You can update profile and privacy settings, delete your own Community posts and comments, download a structured copy of your personal app data, stop or restore coach access to training and nutrition history, stop optional reliability diagnostics, revoke optional AI permission, block community accounts, sign out, or request account deletion inside the app. Email addresses are never shown to other members, and activity visibility is selected separately whenever a post is shared. A pending deletion request can be cancelled in Privacy settings before processing begins. You can also contact us to ask about access, correction, export, or deletion of your personal data.

Changes

We may update this Privacy Policy as the app changes. The latest version will remain available at this URL.