CrushPrivacy Policy
This Privacy Policy explains what information CrushRep ("CrushRep", "we", "us", "our") collects when you use the CrushRep app and website (the "Service"), how we use it, and the choices you have. By using CrushRep, you agree to the collection and use of information as described here.
1. Information We Collect
Account information
When you sign up, we collect your email address and display name through Firebase Authentication. If you sign in with Google, we receive the basic profile information Google shares with us (name, email, profile photo URL).
Profile and fitness information
To personalize your experience, we collect information you provide directly, such as your fitness goal, available equipment, training schedule, experience level, timezone, and (optionally) benchmark lifts.
Physique photos (for AI plan generation)
If you upload a photo to generate an AI workout plan, that image is sent directly to our AI provider (OpenAI) for the single purpose of analyzing your physique and generating a tailored plan. We do not store this photo on our servers — it is used for that one request and discarded on our end once the plan is generated. Our AI provider processes it under its own data-handling terms and does not use it to train its models.
Photos you choose to post
Separately, if you upload a check-in photo, a progress photo, or an image in a Pod or Community post, that photo is stored on our servers (hosted on our own infrastructure) so it can be displayed back to you and, where applicable, to the members of your Pod or the community you shared it with.
Usage and activity data
- Workout sessions, logged sets, reps, and weights
- Check-ins, streaks, and workout completion history
- Meal plans and adaptive meal-plan chat messages
- Pod membership, Pod chat messages, and community posts/comments
- Coach–client relationships, if you use or provide Coach Mode
Device and notification data
We collect a push-notification token (via Firebase Cloud Messaging) if you enable notifications, so we can send you reminders and activity alerts.
Subscription and billing data
Subscriptions are processed by the Apple App Store, Google Play, and our billing partners RevenueCat (for App Store/Google Play purchases) and Square (for purchases made on our website). We receive your subscription tier and status (e.g., free, pro, coach) and, for Square purchases, the email address and name associated with the payment so we can match it to your account — we never receive or store your card number or other payment credentials.
2. How We Use Information
- To create and maintain your account and profile
- To generate personalized AI workout and meal plans
- To power Pods, Coach Mode, community feeds, and social features you opt into
- To track your streaks, progress, and workout history
- To send you notifications you've opted into (reminders, Pod activity, coach messages)
- To detect abuse, enforce fair use limits, and keep the Service secure
- To communicate with you about your account or respond to support requests
We do not sell your personal information.
3. Who We Share Information With
| Recipient | Purpose |
|---|---|
| Firebase (Google) | Authentication and push notifications |
| OpenAI | Generating your AI workout and meal plans |
| RevenueCat | Subscription management for App Store/Google Play purchases |
| Square | Payment processing for subscriptions purchased on our website |
| Other members of your Pod / community | Content you choose to post is visible to the audience you post it to (Pod members, or public community feed) |
| Your Coach, if you join a Coach's Pod | Coaches can view the workout plans and progress of clients in Pods they own |
We do not share your information with advertisers or data brokers.
4. Data Retention & Deletion
We retain your account and activity data for as long as your account is active, so your history, streaks, and plans stay intact. You can permanently delete your account and all associated data at any time from Profile → Privacy & Safety → Delete Account in the app, or by emailing crushrep@nwudu.com. Deletion is immediate, except where we're required to retain limited records for legal or fraud-prevention purposes.
5. Security
We use industry-standard measures — encrypted connections (HTTPS), access-controlled infrastructure, and hashed/managed authentication via Firebase — to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
6. Children's Privacy
CrushRep is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
7. Your Rights and Choices
- Access & correction: you can view and edit most of your profile information directly in the app.
- Deletion: delete your account directly in the app (Profile → Privacy & Safety → Delete Account), or email crushrep@nwudu.com.
- Notifications: you can disable push notifications at any time in your device settings or in-app preferences.
- Depending on your location (e.g., EEA/UK/California), you may have additional rights to access, port, or restrict processing of your data — contact us to exercise them.
8. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we'll notify you in the app or by email. Continued use of CrushRep after changes take effect constitutes acceptance of the updated policy.
9. Contact Us
Questions about this policy or your data? Email us at crushrep@nwudu.com, or write to us at:
Nwudu Inc.
1653 Evergreenway
Essex, Maryland 21221