Privacy Policy

Last updated: May 16, 2026

This Privacy Policy explains how Armatus ("Armatus", "we", "us") collects, uses, and shares information when you use the Armatus mobile application. By using Armatus you agree to the practices described here.

1. Information we collect

• Account information. When you create an account we store your email address and a hashed password. If you sign in with Apple or Google we store only the stable identifier provided by that service plus the email address it returns.
• Profile and fitness data. When you complete onboarding we store the profile you enter — name, age, height, weight, sex, fitness level, goals, training preferences, equipment, injuries, lifestyle answers, and related notes. This information is used to personalise your workouts.
• Workout activity. We store the workouts you generate, your logged sessions (exercises, sets, weights, reps, duration, intensity, notes) and any personal records you save.
• Coaching chat. Messages you send to the in-app coach and the coach's responses are stored so you can revisit them and so the coach can maintain context across sessions.
• Technical data. Our servers automatically log standard request metadata such as IP address, user-agent, request timestamps, and a request ID used to debug problems. We do not use this to track you across other apps or websites.

2. How we use information

• To create and operate your account.
• To generate personalised workout plans and respond to your coaching questions using a third-party large language model provider (currently OpenAI). The text we send includes your fitness profile, recent workout history, and your message — it never includes your password.
• To improve reliability and performance (logs, error monitoring).
• To comply with legal obligations and prevent abuse.

3. Data we do NOT collect

• We do not collect device location, contacts, photos, the camera, the microphone, health/fitness data from Apple Health, or any data not described above.
• We do not use third-party advertising or cross-app tracking SDKs.
• We do not sell your personal information.

4. How we share information

• AI service providers. To generate coach responses we send the necessary context (your profile and message) to OpenAI under their data-processing terms. OpenAI does not train on data submitted via their API.
• Infrastructure providers. We host the Armatus backend and database on third-party cloud infrastructure (currently Railway). Those providers process data on our instructions only.
• Authentication providers. If you choose Sign in with Apple or Google, those services receive standard sign-in metadata from your device.
• Legal. We may disclose information when required by law or to prevent fraud, abuse, or harm.

5. Data retention & deletion

Your data is kept while your account exists. You can permanently delete your account at any time from Profile → Data & account → Delete account & data. Deletion removes your profile, workout history, coach chats, personal records, and weekly plans from our active databases.

6. Security

Passwords are stored as bcrypt hashes. Network traffic between the app and our servers uses HTTPS. Authentication tokens on your device are stored in the iOS Keychain or Android Keystore (via expo-secure-store). No method of electronic storage is 100% secure; we cannot guarantee absolute security.

7. Children

Armatus is not intended for children under 13 (or under 16 in the EU/UK), and we do not knowingly collect information from them. If you believe a child has provided us with information, contact us and we will delete it.

8. International users

Armatus may be operated and accessed from anywhere in the world. By using the app you consent to the transfer of your information to the countries where our service providers operate.

9. Your rights

Depending on where you live (e.g. EEA, UK, California), you may have rights to access, correct, port, restrict, or delete your personal data, and to object to certain processing. Contact us at masdas.aipro@gmail.com to exercise these rights.

10. Health disclaimer

Armatus provides general fitness guidance only. It is not medical advice and is not a substitute for consultation with a qualified healthcare professional. Always consult your physician before starting any new exercise program.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by the "Last updated" date at the top of this page and, when appropriate, by an in-app notice.

12. Contact

Questions about this policy: masdas.aipro@gmail.com