PRIVACY POLICY

Ponte Fuerte (“we”, “us”, “our”) provides personal strength & conditioning coaching software, accessed through our website at pontefuertepr.com and our iOS application (collectively, the “Service”). This Privacy Policy explains what information we collect about you, how we use it, who we share it with, and the choices and rights you have.

1. Information we collect

Information you provide

• Account information: name, email address, password (stored only as a salted bcrypt hash), and optional phone number.
• Profile information: profile picture (optional), intake survey answers (training history, goals, injuries, equipment access).
• Workout data: training programs assigned by your coach, completed sets, reps, weights, exercise notes, effort ratings, difficulty feedback, session notes, and workout durations.
• Body composition data: weight log entries, progress photos (uploaded by you, stored privately and accessed only via short-lived signed URLs).
• Nutrition data (if you subscribe to nutrition coaching): dietary goals, meal plans, food logs, hydration logs, and weight history.
• Communications: messages you exchange with your coach through the in-app chat.
• Payment information: processed by Stripe. We do not store your full payment card number. We do store the Stripe customer and subscription identifiers needed to manage your billing.

Information collected automatically

• Step counts: with your permission, the iOS app reads pedometer data via Apple's Motion framework. This is used only inside the app to display your daily activity. It is not transmitted to our servers.
• Photo library access: the iOS app requests access to your photo library when you choose to upload a profile picture or progress photo. Only the photos you explicitly select are uploaded.
• Device and usage metadata: general technical information such as device type, OS version, and app version, used for debugging and abuse prevention.

Information from third parties

• Google sign-in: if you sign in with Google, we receive your name, email address, profile picture, and a verified Google account identifier from Google. We do not access your Google contacts, email, calendar, or files.

2. How we use information

• Provide the coaching service — assign and deliver your training program, log your progress, and let you communicate with your coach.
• Process and bill your subscription via Stripe.
• Send service-related emails (password reset, account changes, subscription receipts).
• Diagnose technical problems and improve the Service.
• Respond to support requests.
• Comply with legal obligations.

We do not use your data for advertising. We do not sell your personal information.

3. How we share information

We share data only with service providers who help us run the Service. Each is contractually bound to use your data solely to deliver their service to us.

• Stripe — payment processing and subscription billing. Receives name, email, and payment info you enter at checkout.
• Supabase — database and storage hosting. Stores all account, workout, nutrition, and progress-photo data on Postgres and a private object storage bucket.
• Vercel — web hosting and request routing for our website and APIs.
• Google — identity verification when you choose “Sign in with Google”.
• Resend — transactional email delivery (password reset, receipts).
• Apple — App Store distribution and, when enabled, push notifications.

We may also disclose information when legally required (subpoena, court order, or to comply with applicable law) or where necessary to protect our rights, your safety, or the safety of others.

4. Where data is stored and how long we keep it

Data is stored on Supabase infrastructure in the United States. Data is encrypted in transit (HTTPS/TLS) and at rest. Progress photos are stored in a private bucket and served only via short-lived signed URLs requested by your authenticated session.

We retain account data for as long as your account is active. When you delete your account from inside the iOS app (You tab → Delete Account), we:

• Cancel any active Stripe subscriptions associated with your account.
• Remove your progress-photo files from storage.
• Delete your account record, training plans, workout logs, nutrition data, and messages from our database.

Some information may persist briefly in encrypted infrastructure backups before being purged on rotation.

5. Your rights

You can:

• Access most of your data — it is visible to you in the app at any time.
• Correct your profile information by editing it in the app.
• Delete your account and associated data using the in-app delete flow.
• Export your data by emailing us at the address below.
• Opt out of non-essential email communications.

If you live in California (CCPA/CPRA), the European Economic Area, or the United Kingdom (UK GDPR), you have additional rights, including the right to object to processing, request a copy of your data in a portable format, and lodge a complaint with your local data-protection authority. Contact us using the information below to exercise any of these rights.

6. Children

The Service is not intended for users under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal information, please contact us using the information below and we will delete it.

7. Cookies and similar technologies

The website uses essential cookies to keep you signed in and to maintain your session. We do not use third-party advertising cookies. We do not have third-party analytics enabled at the time of writing; if that changes we will update this Policy.

8. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a notice in the Service before the change takes effect. The “Effective” date at the top reflects the most recent revision.

9. Contact us

Questions, requests, or complaints about this Policy or your data:

Ponte Fuerte
Email: info@pontefuertepr.com
San Juan, Puerto Rico