Privacy Policy

Last updated: September 2026

Dual 88 Infinity ("we", "us", "our") respects your privacy. This policy explains what data we collect, how we use it, your rights, and the safeguards we apply to sensitive health and fitness information.

Categories of Data We Collect

Account & Identity

• Full name, email address, hashed password, user role (admin or user).

Fitness & Training Data

• Workout logs: Session dates, duration, RPE, notes, completion status, exercise counts.
• Set logs: Exercise name, weight, reps, sets, RIR, rest intervals, logged timestamps.
• Custom workouts: User-created workout templates and exercise prescriptions.
• Program enrollments: Enrolled program, current session, progress percentage, start date.
• Personal records: Best lifts, estimated 1RMs, and achievement dates.

Body & Physique Data

• Body measurements: Weight, body-fat percentage, circumferences, recorded dates.
• Progress photos: Front, side, back, and custom images stored in private storage with expiring signed access URLs — never publicly accessible.

Health & Recovery Data

• Readiness check-ins: Sleep quality, soreness, stress, motivation, readiness score, check-in date.
• Injuries and pain summaries: Injury descriptions, pain locations, session pain notes.
• Sweat test results: Pre/post body weight, fluid loss, sweat rate, temperature, humidity.

Nutrition & Dietary Data

• Food log entries: Foods, brands, calories, macros (protein, carbs, fat, fiber, sodium), serving sizes, meal types, log dates.
• Nutrition profiles: Age, sex, height, weight, activity level, dietary preferences, food allergies, intolerances, religious/cultural dietary needs, supplement use, budget preferences.
• Hydration logs: Fluid intake amounts, timing (pre/intra/post-workout), fluid type.
• Macro targets: Calorie, protein, carb, fat, and fiber targets, including distinct workout-day vs. rest-day configurations and target history.
• Saved meals, recipes, meal plans, and grocery lists: User-created meal templates, recipe ingredients and instructions, weekly meal plans, and grocery items.
• Nutrition weekly reviews: Adherence percentages, hunger, energy, sleep, digestion, and recovery ratings.

Subscription & Billing Data

• Stripe customer ID, subscription status, billing period. We do not store your credit card number — Stripe handles all payment processing.

Support & Communication Data

• Support tickets: Subject, message, type, attachment URLs, admin responses, status.
• Notifications: Workout reminders, milestone alerts, coach messages, account notifications.

Usage & Device Data

• App interactions, page views, and event analytics for product improvement.

How We Use Your Data

• To provide and improve the Dual 88 Infinity platform.
• To track your workout progress, nutrition, and program enrollment.
• To calculate personalized training and nutrition recommendations.
• To manage your subscription and billing.
• To send notifications about workouts and account activity.

Consent & Data Sharing

We do not sell your data. We share data only with your explicit, affirmative consent and only with:

• Stripe — for payment processing.
• Cloud infrastructure providers — for hosting, database storage, and private file storage.

You must provide clear, affirmative consent before any of your data is shared with a coach or any third party. Progress photos and all sensitive data are private by default. Coach sharing is disabled unless you explicitly enable it for a specific item. You can revoke consent at any time by disabling sharing in the app.

Data Security

• All data is encrypted in transit (TLS) and at rest.
• Progress photos are stored in private storage with expiring signed URLs — they are never publicly accessible.
• Authentication tokens are managed securely.
• API keys and secrets are stored in environment variables, never in client code.
• Row-level security restricts data access so users can only read and modify their own records.

Account Security

• Use a strong, unique password for your account.
• You can export all your data from the Account page at any time.
• You can permanently delete your account and all associated data from the Account page.
• If you suspect unauthorized access to your account, contact support immediately through the app.
• We recommend enabling any available two-factor authentication on your email account for added security.

Data Breach Response

In the event of a data breach involving personal information:

1. We will investigate and contain the breach immediately upon discovery.
2. We will assess the scope and impact of the breach, including the categories of data and number of users affected.
3. We will notify affected users without unreasonable delay, and in no case later than 60 days after discovery.
4. We will provide affected users with: a description of what happened, the data involved, steps you can take to protect yourself, and what we are doing to remediate the breach.
5. We will notify relevant regulatory authorities as required by applicable law.
6. We will document the breach and our response for future review and improvement.

Regulatory Notice

Consumer health apps like Dual 88 Infinity are not necessarily governed by HIPAA. However, other federal rules may apply, including the FTC Health Breach Notification Rule (16 CFR Part 318) and applicable state laws. We follow HHS mobile-health guidance for consumer health apps. This privacy policy should be reviewed by qualified legal counsel to ensure compliance with all applicable consumer health-data obligations, including but not limited to the FTC Health Breach Notification Rule and state privacy laws.

Your Rights

• Export: You can export all your data from the Account page.
• Delete: You can permanently delete your account and all associated data from the Account page.
• Access: You can view your data within the app at any time.
• Revoke Consent: You can revoke any data-sharing consent at any time.

Contact

For privacy questions, data requests, or to report a security concern, contact Dual 88 Infinity support through the app.