Privacy Policy

Leta Asefa (\"we,\" \"our,\" or \"us\") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Hayal Fitness (the \"App\").

Please read this Privacy Policy carefully. By using the App, you consent to the practices described in this policy.

1. Information We Collect

Camera & Progress Photos

Hayal Fitness requires access to your device's camera to enable you to track your physique progress through time visually. When you take progress photos:

• Photos are uploaded to our custom cloud server for secure storage
• Only you (the photo owner) can access your photos - no other users, trainers, or third parties can view them
• You can delete any of your photos at any time directly within the app
• We do not use your photos for AI analysis, facial recognition, or any purpose other than allowing you to view your own progress

Personal Information

When you create an account and use Hayal Fitness, we collect the following information:

• Email address - for account creation and login
• Name - for personalizing your profile
• Password - stored securely using industry-standard encryption
• Weight, height, and body measurements - for tracking your fitness progress
• Workout history and exercise logs - to record your fitness activities
• Age or birth date - to customize fitness recommendations
• Gender - optional, for personalized fitness guidance

Device Information & Usage Data

• Device model and operating system version - to optimize app performance
• App usage analytics - to understand how users interact with features
• Crash reports - to diagnose and fix technical issues

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Hayal Fitness app
• Allow you to track and visualize your physique progress over time
• Record and display your workout history and body measurements
• Improve app performance, features, and user experience
• Respond to your support requests and troubleshoot issues
• Send important updates about the app (with your consent)
• Process payments securely through Chapa payment gateway

3. Third-Party Services

Hayal Fitness uses the following third-party services to provide core functionality:

• Firebase (Google) - for authentication, analytics, and crash reporting. Firebase Privacy Policy
• Google Analytics - for understanding app usage patterns. Google Privacy Policy
• Chapa Payment Gateway - for processing subscription and payment transactions. Chapa Privacy Policy

These third-party services may collect information as described in their respective privacy policies.

4. Data Storage and Security

Your progress photos are stored on our custom cloud server located in secure facilities. Only you can access your own photos through your authenticated account. We implement industry-standard security measures including encryption, secure access controls, and regular security audits to protect your data.

5. Data Sharing and Disclosure

We do not sell your personal information or your progress photos. We only share data:

• With your explicit consent - if you choose to share progress photos or data outside the app
• With third-party service providers (Firebase, Google Analytics, Chapa) as necessary to operate the app
• To comply with legal obligations - if required by law or valid legal process
• To protect rights and safety - to prevent fraud or protect the security of our users

6. Data Retention

• Progress Photos: Stored until you choose to delete them. You can delete individual photos or all photos at any time within the app.
• Account Data: Retained as long as your account is active. If you delete your account, we will delete your data within 30 days.
• Analytics Data: Retained for 14 months before automatic deletion.

7. Your Rights and Choices

You have control over your data. You can:

• Delete progress photos - individually or all at once through the app
• Update your profile information - email, name, measurements, etc.
• Delete your account - request complete deletion of all your data
• Opt out of analytics - through device settings or in-app preferences

8. Your Privacy Rights (CCPA/CPRA & GDPR)

If you are a California resident (CCPA/CPRA) or in the European Economic Area (GDPR), you have the following rights:

• Right to Know - Request details about what personal data we collect and how we use it
• Right to Delete - Request deletion of your personal information
• Right to Opt-Out - Request that we stop "selling" your data (we do not sell data)
• Right to Correct - Request correction of inaccurate information
• Right to Data Portability - Receive a copy of your data in a portable format
• Right to Limit Use of Sensitive Data - Limit how we use sensitive information like your progress photos

To exercise any of these rights, contact us using the information in Section 10 below. We will respond within 30 days as required by law.

9. Children's Privacy

Hayal Fitness is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

10. Contact Information

For privacy questions, data deletion requests, or to exercise your privacy rights, please contact us via email or phone.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy in the app and updating the \"Effective Date\" at the top of this policy. You are advised to review this Privacy Policy periodically for any changes.

12. Legal Compliance

This Privacy Policy complies with Google Play Store requirements, Ethiopia's data protection laws, and applicable international regulations including GDPR and CCPA/CPRA where applicable to our users.