Privacy Policy

What we collect

• Account: your email, first name, time zone and settings (like your reminder time and whether you want tips by email).
• Membership: your plan, its status and dates, and an ID from Stripe. Your card details go straight to Stripe; we never see or store your full card number. Programs you bought, gifts you send or receive (names, emails and the message), and friends you invite (their email) so referral credit works.
• Training: workouts you start and finish (and how far into a video you are, so you can pick up where you left off), how a workout felt, your notes, favorites, the programs you follow and the days you train.
• Progress photos: the photos you add, their dates and poses, and anything you write with them. They're stored privately and only you can see them, unless you choose to share a check-in with us.
• Community and feedback: posts, replies, photos and cheers in Community; reviews you write; problem reports, including any screenshots and the page, browser and device they came from.
• Reminders: if you turn on workout reminders, your browser gives us a push subscription for that device.
• Technical: the basic information any website receives, like your IP address and browser, in our hosting providers' logs. The app stores a few things on your device (your sign-in and some preferences). We don't use advertising cookies or trackers.

How we use it

• To run the app for you: your plan, your history, your notes, reminders, calendar sync and progress photos.
• To email you: sign-in codes, account and membership emails (like a heads-up before a trial ends), and a few tips you can turn off any time.
• To recommend workouts: what you've done and favorited shapes the order you see. We also use totals across members (for example, how many finished or favorited a workout) to rank workouts for everyone; those totals don't identify anyone.
• To keep Community safe, help you when you contact us, prevent misuse, and improve the app.

We don't sell your personal information, and we don't share it for advertising.

Who helps us run the app

These companies process information for us, only to provide their service:

• Supabase: our database, private file storage (including progress photos) and sign-in.
• Vercel: hosts the app and website.
• Stripe: payments, billing and the page where you manage your membership.
• Mux: streams the workout videos and measures playback quality.
• Resend: sends our emails.
• Anthropic: checks Community posts and photos for safety, and drafts answers to questions posted there.
• Apple, Google and Mozilla: deliver workout reminders to your device if you turn them on (the messages are encrypted).

We may also share information if the law requires it, to protect people's safety, or as part of a sale or merger of our business (in which case this policy keeps applying to your information).

How long we keep it

We keep your information while you have an account. Photos and notes you delete are deleted right away. If you ask us to delete your account, we delete your information within 30 days, except what we have to keep by law (like billing records for taxes).

Your choices and rights

• Turn off tips emails (You → Tips by email, or the link in any tips email) and workout reminders (You → Workout reminders).
• Stop sharing a progress-photo check-in any time; we'll stop using it in anything new.
• Ask to see, correct, export or delete your information by writing to us. Depending on where you live (for example California), you may have further rights; we honor them, and we won't treat you differently for using them.

Security

Everything is sent over encrypted connections. Progress photos, Community photos and problem-report screenshots are kept in private storage, and videos play through signed links. No system is perfect, but we work to protect your information and limit who can access it.

Children

TIFFxDAN is for people 18 and older. We don't knowingly collect information from children; if you think we have, tell us and we'll delete it.

Where your information is stored

Our service providers store information in the United States.

Changes

If we change this policy in a meaningful way, we'll let you know before the changes apply.