Privacy Policy

1. Information we collect

• Account information: your name, email address, and password (passwords are stored in hashed form by our authentication provider).
• Health and fitness information you provide: during onboarding and use, information such as your training experience, goals, injuries or physical limitations, and workout activity. Some of this may be considered sensitive health-related information; we collect it only to provide and personalize the Service.
• Workout and usage data: the sessions you start and complete, exercises performed, and how you interact with the Service.
• Payment information: processed by our payment processor, Stripe. We do not store your full card number; we receive limited billing details (such as subscription status and the last four digits of your card) from Stripe.
• Technical data: device, browser, and log information collected automatically to operate and secure the Service.

2. How we use your information

We use your information to: create and manage your account; deliver and personalize workouts and coaching; process subscriptions and payments; communicate with you about your account, updates, and support; maintain security and prevent abuse; and comply with legal obligations. We do not sell your personal information.

3. How we share your information

We share information only with service providers who help us operate CassouFit, under agreements that require them to protect it:

• Supabase — database and authentication hosting.
• Vercel — application hosting.
• Stripe — payment processing.
• Resend — transactional email (account confirmation, password reset, notifications).

We may also disclose information if required by law, to protect our rights, or in connection with a business transfer. We do not share your health information for advertising.

4. Cookies and local storage

We use cookies and browser storage necessary to keep you signed in and to remember preferences (such as your selected training level). We do not use third-party advertising cookies.

5. Data retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where retention is legally required.

6. Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal information, or to object to or restrict certain processing. To exercise these rights, contact support@cassoufit.com. You can delete your account at any time from your settings.

7. Security

We use industry-standard measures (including encryption in transit, hashed passwords, and access controls / row-level security) to protect your information. No system is perfectly secure, and we cannot guarantee absolute security.

8. Children

The Service is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact support@cassoufit.com and we will delete it.

9. International users

CassouFit is operated from the State of Florida, USA. If you access the Service from elsewhere, you consent to processing your information in the State of Florida, USA, which may have different data-protection laws than your location.

10. Changes to this Policy

We may update this Policy from time to time and will post the updated version with a new effective date. Material changes will be notified as required by law.

11. Contact

Privacy questions: support@cassoufit.com.