Privacy Policy

1. Data we collect

Account and contact data

When you create an account, we collect your email address, account identifier, and authentication information. Authentication is provided through Supabase. We do not receive your password in readable form.

Fitness and health-related data you provide

You may choose to record body measurements, workout activity and history, goals, progress, and health notes. Some of this information may be sensitive or health-related. You control whether to enter it.

Private progress photos

You may upload progress photos to your account. These photos are private account content: Hip Dip Fix does not post them publicly or make them available to other users. We do not use them for advertising or biometric identification.

Optional AI feature data

If you choose to use AI photo analysis or weekly insights, we process the content needed to provide that feature. This may include selected photos, relevant measurements, workout or progress information, prompts, and the AI-generated response. AI features are optional.

Subscription data

If you subscribe through Apple or Google, we receive limited purchase and entitlement information, such as product, subscription status, renewal status, and transaction identifiers. We do not receive your full payment card details.

Technical, security, and support data

We may process limited technical records needed to run and secure the Service, such as user ID, IP address, request timestamps, app or device version, and diagnostic or error information. If you contact us, we also process your message, email address, and any information you include.

2. How we use data

We use personal data to:

• create and authenticate your account;
• store and display your workouts, measurements, notes, photos, and progress;
• provide optional AI photo analysis and weekly insights when requested;
• verify subscription access and restore purchases;
• provide support and respond to privacy or deletion requests;
• maintain, troubleshoot, and secure the Service; and
• comply with legal obligations and enforce our Terms & Conditions.

3. Legal grounds

Depending on where you live and the data involved, we process data because it is necessary to provide the Service you request, because you have given consent, because we have a legitimate interest in securing and improving the Service, or because the law requires it.

Where required, we rely on your explicit consent to process health-related information, private progress photos, and content submitted to optional AI features. You may withdraw consent for future processing through the available app controls or by contacting us. Withdrawal does not affect processing that was lawful before withdrawal.

4. Service providers and disclosures

We disclose only the data reasonably necessary for the following providers to perform services for Hip Dip Fix:

• Supabase — account authentication, database, file storage, and backend infrastructure;
• OpenAI — processing content for optional AI photo analysis or weekly insights when you request those features;
• RevenueCat — managing subscription status and feature entitlements; and
• Apple and Google — processing app-store purchases, subscriptions, cancellations, and refunds.

These providers process data under their own terms and privacy commitments. We may also disclose information if reasonably necessary to comply with law, a valid legal request, protect rights and safety, investigate fraud, or secure the Service.

We do not share personal data with the general public or unrelated third parties for their own advertising.

5. Optional AI processing

AI processing occurs only when you choose to use an AI feature. We send OpenAI the selected content and related context needed to return the requested result. AI output is informational, may be inaccurate, and is not used by Hip Dip Fix to make legal or similarly significant decisions about you.

AI analysis is not medical advice, diagnosis, or treatment. Do not submit another person’s photo or personal information without their permission.

6. International processing

Our providers may process data in countries other than your own. Where required, we use provider agreements and recognized safeguards intended to protect personal data during international transfers.

7. Data retention

We retain account data and user content while your account is active and as needed to provide the Service. If you delete an item in the app, it may remain briefly in protected backups until those backups are routinely overwritten.

After a verified account deletion request, we delete or de-identify account data from active systems without undue delay, normally within 30 days. Residual copies may remain in encrypted or protected backups for up to 90 days before routine deletion. We may retain limited records longer where required for legal, tax, accounting, dispute, fraud-prevention, or security purposes. Apple, Google, RevenueCat, OpenAI, and Supabase may retain data under their own applicable policies and legal duties.

8. Security

We use reasonable technical and organizational safeguards designed to protect personal data, including encrypted network connections, access controls, and provider security features. No storage or transmission method is completely secure, so we cannot guarantee absolute security. Keep your password confidential and contact us if you suspect unauthorized access.

9. Your choices and rights

Depending on applicable law, you may have the right to access, correct, export, delete, restrict, or object to processing of your personal data, and to withdraw consent. You may also have the right to complain to your local data protection authority.

You can manage available privacy controls in the in-app Privacy Center. To exercise a right or ask a privacy question, email hipdipfix.app@gmail.com. We may ask for information reasonably needed to verify that the request relates to your account.

For complete account deletion steps, see Delete Account. Deleting your account does not cancel an Apple or Google subscription; subscriptions must be canceled separately in the applicable store settings.

10. Age requirement

Hip Dip Fix is intended only for people aged 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has provided data, contact us so we can investigate and delete it where appropriate.

11. This website

This static legal website does not use advertising trackers, analytics scripts, or cookies. Your hosting provider may process standard server logs for security and delivery purposes.

12. Changes to this Policy

We may update this Privacy Policy when the Service, our practices, or legal requirements change. We will update the effective date and provide appropriate notice in the app if a change is material.

13. Contact

For privacy questions, requests, or complaints, contact:

Kerem Ersoy
Türkiye
hipdipfix.app@gmail.com