Privacy Policy

Introduction

JocoFit ("we," "our," or "us") is a fitness tracking application developed by Joco Digital. We are committed to protecting your privacy and ensuring you understand how your personal information is collected, used, and safeguarded.

This Privacy Policy applies to the JocoFit mobile application available on iOS, iPadOS, tvOS, and macOS platforms. By using JocoFit, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we may collect:

• Email Address: If you choose to sign up with email authentication
• Apple ID Identifier: If you choose to sign in with Apple. Note that we do not receive your actual email address if you select the "Hide My Email" option provided by Apple
• Display Name: An optional username you may choose to set

1.2 Workout and Fitness Data

To provide our fitness tracking services, we collect:

• Exercise names, types, and categories
• Repetition counts and set information
• Workout duration, start time, and completion timestamps
• Workout completion status and progress data
• Personal bests and achievement records
• Custom workout configurations and templates

1.3 Technical and Device Information

We may automatically collect certain technical information:

• Device type, model, and operating system version
• App version and configuration settings
• Anonymous usage statistics and crash reports
• General geographic region (country level only, for service optimization)

2. How We Use Your Information

2.1 Service Provision

We use your information to:

• Provide, maintain, and improve the JocoFit application
• Sync your workout history securely across your Apple devices
• Track your fitness progress and calculate statistics
• Authenticate your identity and secure your account
• Respond to your support requests and communications

2.2 Service Improvement

We analyze aggregated, anonymized data to:

• Understand usage patterns and improve app features
• Identify and fix technical issues and bugs
• Develop new features based on user needs
• Optimize app performance and user experience

2.3 Communications

We may send you:

• Essential service notifications (security alerts, account updates)
• Responses to your support inquiries
• Important updates about changes to our services or policies

3. Data Storage and Security

3.1 Local Storage

Your workout data is stored locally on your device using Apple's SwiftData framework, which benefits from iOS's built-in security features including device encryption. This data remains on your device and is protected by your device passcode and biometric authentication.

3.2 Cloud Storage

When you sign in with an account, your data syncs to Supabase, a secure cloud database platform. Supabase provides:

• Encryption at rest using AES-256 encryption
• Encryption in transit using TLS 1.2 or higher
• Row-level security ensuring you can only access your own data
• Regular security audits and compliance certifications

3.3 Authentication Security

We use Supabase Auth with industry-standard security practices. When using Sign in with Apple, authentication is handled directly by Apple's secure systems. Passwords are never stored in plain text; they are cryptographically hashed using modern algorithms.

4. Your Rights and Choices

You have full control over your personal data:

5. Third-Party Services

JocoFit integrates with the following third-party services:

These services have their own privacy policies that govern their collection and use of your information. We encourage you to review their policies.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

• Account Data: Retained until you delete your account
• Workout Data: Retained until you delete individual workouts or your entire account
• Technical Logs: Automatically deleted after 90 days
• Support Communications: Retained for 2 years for service improvement

When you delete your account, all associated data is permanently removed from our systems within 30 days, except where retention is required by law.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Our cloud infrastructure providers maintain data centers in multiple regions. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

8. Children's Privacy

JocoFit is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover that a child under 13 has provided us with personal information, we will promptly delete such information from our servers.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you through the app or via email (if you have an account)
• Obtain your consent where required by applicable law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

10. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the personal data we collect and how we use it
• Right to Delete: You can request deletion of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, please contact us using the information provided below.