Privacy Policy

1. Information we collect

Information you provide

• Account information. Your name, email address, and a username. If you sign up with a password, we store it only in hashed form. If you sign in with Google or Apple, we receive your name, email, and a provider account identifier from them.
• Profile details. An optional profile photo and display name.
• Training content. The programs, workouts, exercises, sets, weights, reps, RPE, durations, and notes you create. Much of this is stored on your device first and synced to our servers so it is available across your devices.
• Form videos. Optional videos you record or attach to a set. Creating them uses your camera, microphone, and photo library (only when you choose to add a video). They are stored to provide the feature to you.
• Social connections. Friends you add or block within the app.
• Waitlist and communications. If you join the beta waitlist or contact us, we collect your email and the contents of your message.

Information collected automatically

• Device and usage data. Basic technical information such as device type, app version, and operating system, plus logs generated as you use the Service.
• IP address. Used transiently for security and to rate-limit abusive requests.
• Feature configuration. We use a feature-flag service that identifies your session by your account ID and email to roll out functionality and beta access.

2. How we use information

• To provide, operate, sync, and secure the Service.
• To authenticate you and manage your account and beta access.
• To send transactional and beta-related emails (for example, waitlist confirmations and approval notices).
• To maintain safety and integrity, prevent abuse, and enforce our Terms.
• To respond to your requests and provide support.
• To understand usage and improve the Service.
• To comply with legal obligations.

3. Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we process your information to perform our contract with you (providing the Service), based on our legitimate interests (securing and improving the Service), with your consent (for example, device permissions you grant), and to comply with legal obligations.

4. How we share information

We do not sell your personal information, and we do not share it for targeted advertising. We share information only with service providers who process it on our behalf to run the Service, and where required by law:

• Supabase — database and file storage (account data, training content, form videos).
• Railway — hosting for our backend API.
• Vercel — hosting for the inclne.app website.
• Resend — sending transactional and waitlist emails.
• LaunchDarkly — feature flags and beta rollout.
• Google and Apple — when you choose to sign in with them, and the app stores that distribute the app.

We may also disclose information to comply with the law, enforce our Terms, protect the rights and safety of users and the public, or in connection with a merger, acquisition, or sale of assets.

5. Device permissions

The app requests access to your camera, microphone, and photo library only when you choose to record or attach a form video, and to set a profile picture. You can deny or revoke these permissions at any time in your device settings; some features will not work without them.

6. Data retention and deletion

We keep your information for as long as your account is active. You can delete your account at any time from the app (Profile → Delete Account). When you do, we delete or anonymize your account and associated training content and form videos, except where we must retain limited information to comply with legal obligations, resolve disputes, or enforce our agreements. Waitlist emails remain in our email provider until you unsubscribe or we remove them.

7. Security

We use reasonable technical and organizational measures to protect your information, including encrypted transport and hashed passwords. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International transfers

We and our service providers may process your information in the United States and other countries that may have different data-protection laws than where you live. Where required, we rely on appropriate safeguards for such transfers.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, use the in-app controls or contact us at privacy@inclne.app.

California residents. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not use it for cross-context behavioral advertising. You may exercise your rights to know, delete, and correct without discrimination.

10. Children

The Service is not directed to children. You must be at least 16 years old to use INCLNE. We do not knowingly collect personal information from children under 16; if you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the date above and, for material changes, provide additional notice. Your continued use of the Service after an update means you accept the revised policy.

12. Contact

Questions about this policy or your information? Email privacy@inclne.app.