PDF Fit Privacy Policy

PDF Fit is operated by Global Outsource Solutions Pty Ltd, an Australian company ("PDF Fit", "we", "us", "our"). This Privacy Policy explains what personal information we collect when you use the PDF Fit app for iOS and Android (the "App"), our website at pdf-fit.com (including the Support form and the pages where creators share programs) and PDF Fit for Creators; how we use it; who we share it with; and the choices you have.

We have written this policy to meet the Australian Privacy Act 1988 and the Australian Privacy Principles, the EU and UK General Data Protection Regulation (GDPR), and US state privacy laws including the California Consumer Privacy Act (CCPA/CPRA). Section 6 explains how to use your rights.

1.1 Information You Provide

• Account and sign-in: your email address. You can sign in with a link or code we email you (this is also how most new accounts are created), or with Apple, Google or Microsoft. If you use Apple, Google or Microsoft, we receive an identifier for your account with them, the email address they hold for you, and your name and profile picture where they share them. Accounts created before email sign-in links may also have a password, which we store only as a one-way hash.
• Profile: your display name (if you set one or your sign-in provider shares it), your units (kg/lb, cm/in) and the language the App is set to.
• Workout data: the programs you train, workout sessions, exercises, sets, reps, weights, rest times, AMRAP scores, exercise swaps, recovery days (walks, stretching, rest), notes you add and your program progress.
• Testing data: strength, cardio and bodyweight test results you choose to log.
• Fasting data: intermittent fasting logs and presets.
• Pregnancy program: if you use the pregnancy and postpartum program, your due date (or the week you started from), when you accepted its safety note, and your progress in it. This is health information, and we use it only to run that program for you.
• PDFs you import: the PDF file you upload, its file name, and everything printed in it, which can include names or other details on the page. Sections 5 and 8 explain where it goes and how long we keep it.
• AI Program Builder answers: if you choose to have a program built for you, the answers you give in the in-app interview, covering age, sex, height, weight, body type, activity level, training experience, goals, available equipment, session length, training days, and any injuries, limitations, pregnancy/postpartum status or health screening answers you volunteer. See the AI Program Builder section below.
• Programs shared by creators: the email address you give on a creator's page, codes you enter in the App, your acceptance of the note shown before you start a creator's program, and any creator you choose to hide. See "Programs Shared by Creators" below.
• Purchases: what you bought and the credits on your account. See "Purchases, Credits & Subscriptions" below.
• Support and reports: what you send through the Support form or the App's feedback and "report this program" features: your name, email address, and the category, subject and message.
• If you are a creator: your creator profile and programs. See "If You're a Creator" below.

1.2 Information Collected Automatically

• Sign-in sessions: each time you sign in, we keep a record of that session with the IP address and the browser or App "user agent" it was made from, until the session ends.
• Activity records: our server records what happens in your account, such as signing in, opening the App, starting and finishing a workout, logging a set, importing a PDF and starting a program. Each record has the time, your IP address, the user agent, your platform (iOS, Android or web) and App version. When you sign up, or sign in with a password, the record also holds your email address. When guest mode starts, we record the same technical details with a random identifier for your installation, so that guest use can be linked to an account if you later create one. These records stay on our own server and are not given to analytics companies. They do not depend on the analytics setting described in section 13.
• Approximate location from your IP address: when you sign up, sign in with a password, Apple, Google or Microsoft, or start guest mode, we look up the approximate city, region, country and internet provider of your IP address (section 8). We include it, with your email address and device details, in a notification email to our team. We never collect your precise location.
• Device and App details: your device platform, operating system, App version and build number, which the App sends with its requests.
• Usage and crash data, only with your consent: see section 13.
• Website: cookies and Google Analytics on pdf-fit.com. See section 13.
• Emails: a short record of each email we send about your account, and whether you opened or tapped our check-in emails. See "Emails We Send You".
• Server logs: our web server and application keep technical logs (IP address, the address requested, time and browser) to keep the service secure and fix faults.

1.3 Information We Do Not Collect

• We do not collect your precise location.
• The App does not access your contacts, camera or photo library. It opens a file only when you pick a PDF to import.
• The App does not read from or write to Apple Health, Google Fit or other health platforms.
• We do not show ads, we do not collect advertising identifiers, and we do not sell your personal information or use it for advertising.

We do not sell or rent your personal information, and we do not share it for advertising. We share it only as follows:

• Service providers: the companies in section 8, which process it on our behalf to run PDF Fit.
• Our team: a small number of PDF Fit staff can see account details, programs and retained PDFs. They use this to answer support requests, fix failed imports, review reports and run the service. Every change our team makes to an account is logged. Our team also receives notification emails about sign-ups, sign-ins, failed imports and support messages.
• Creators: if you get a creator's program, the creator sees totals only, never who you are (see "Programs Shared by Creators").
• Public creator pages: a creator's name, handle, photo, bio and programs are public on pdf-fit.com and in the App.
• Legal requirements: we may disclose your information if required by law, regulation, legal process, or governmental request.
• Safety and rights: we may disclose information to protect the rights, property, or safety of PDF Fit, our users, or the public.
• Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is subject to a different privacy policy.

We do not share your data with advertising networks or data brokers.

• Data travelling between the App or your browser and our servers is encrypted (HTTPS/TLS).
• Passwords are stored only as a one-way hash. Sign-in codes and links, password reset links and Face ID sign-in tokens are stored only in a scrambled (hashed) form, and Apple sign-in tokens are encrypted.
• Our database runs on a server we control. Access is limited to our team, and every change our team makes to an account is logged.
• In guest mode, your workouts stay on your device until you create an account. We do receive the technical details described in section 1.2 when guest mode starts.

While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

• Your account and training data: for as long as your account exists. When you delete your account, they are deleted straight away (section 7).
• Guest data: stored only on your device, and deleted when you clear the App's data or uninstall it, unless you create an account.
• Sign-in: emailed sign-in codes and links work once, for 15 minutes. Our record of them, including the address they were sent to, is deleted after 48 hours. Sign-in sessions are deleted when they expire.
• PDFs you import in the App: kept for 14 days, so we can look into an import that failed or looks wrong and run it again for you. They are then deleted automatically. The program made from the PDF stays in your account until you delete it. The import's working record is deleted after 24 hours, or after 14 days if the import finished but you haven't saved it yet, so you can still recover it.
• AI Program Builder answers and generation records: until you delete your account.
• Activity records: we keep these while we run the service; there is no fixed deletion date yet. When you delete your account, they are unlinked from you and your email address is removed from them, but the IP address and user agent in them stay.
• Support messages and reports: kept as a record of what we did about them. If you delete your account, we remove your email address from those you sent while signed in. A message sent from the website while signed out keeps the address you typed, because it's the only way to reply. Copies of support messages also arrive in our support mailbox.
• Record of emails we sent you: until you delete your account.
• Our team's log: every change our team makes to an account is kept as an audit record. It names the account by its number, never by email address.
• Backups: before we update the service we take a backup of our database. A backup can hold your data after you delete your account, until that backup is deleted.
• Server logs: web server logs are deleted after 14 days. Application logs are cleared when we next update the service.
• Programs shared by creators, and creators: see those sections below.
• Analytics: see section 13.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

6.1 All Users

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your account and associated data.
• Data Portability: Request your data in a structured, machine-readable format.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

6.2 EU/EEA/UK Residents (GDPR)

• Right to restrict processing of your personal data.
• Right to object to processing based on legitimate interests.
• Right to lodge a complaint with your local data protection authority.

6.3 Australian Residents

• You have rights under the Privacy Act 1988, including access to and correction of your personal information.
• Please contact us first. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

6.4 California Residents (CCPA/CPRA)

• Right to know what personal information is collected and how it is used.
• Right to request deletion of your personal information.
• Right to opt-out of the sale or sharing of personal information. Note: We do not sell or share your personal information.
• Right to non-discrimination for exercising your privacy rights.

Some controls are in the App itself: turn analytics on or off in Profile → Privacy, delete your account in Profile → Delete Account, and stop check-in emails with the unsubscribe link in any of them. For anything else, including a copy of your data or a correction, use the Support form or email training@pdf-fit.com. We may ask you to confirm the request from your account's email address.

You can delete your account and its data at any time:

• In the App: Profile → Delete Account. If your account has a password, you'll be asked for it. Your account is deleted straight away.
• In PDF Fit for Creators (creators only), from your account page. We send one email to confirm.
• Through Support, if you can't sign in: use the Support form. We verify the request and delete the account within 30 days, then email you to confirm.

When your account is deleted, we permanently delete your profile and sign-in methods; your sessions and Face ID tokens; your workouts, sets, tests, fasting and recovery logs; your programs and your AI Program Builder answers; the PDFs you imported; your credit and subscription records; our record of emails we sent you; and the email address on any creator program you claimed. If you signed in with Apple, we also tell Apple to end PDF Fit's access.

We keep, without your contact details:

• a program someone else is already training, so they can keep training it; it is no longer linked to you;
• activity records, unlinked from you, as described in section 5;
• reports and feedback you sent, with your email address removed;
• our team's log of changes to accounts, which names accounts by number only;
• records we must keep by law, such as records of a purchase;
• if you were a creator, the records listed in "If You're a Creator".

Deleting your account does not cancel a subscription: cancel it in your Apple App Store or Google Play account. Apple, Google and RevenueCat keep their own records of your purchases under their own policies. Emails you sent us stay in our support mailbox; ask us if you want them deleted too.

We use these companies to run PDF Fit:

Each provider processes your information under its data processing terms with us and its own privacy policy.

PDF Fit is not for anyone under 16: our Terms of Use require users to be 16 or older, and creators must be 18 or older. The AI Program Builder declines to build a program for anyone who says they are under 16. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has given us personal information, contact us and we will delete it.

We are based in Australia. Our server and database are hosted by DigitalOcean in New York, United States, and most of the providers in section 8 process data in the United States. Google may also process analytics data in other countries where it operates. This means your personal information is stored and processed outside Australia and outside the EU and UK.

• We use providers that are bound by data processing terms requiring them to protect your information.
• For information from the EU, EEA or UK, we rely on those terms, including the European Commission's standard contractual clauses (with the UK addendum) where they apply, or another transfer mechanism recognised by law.

The App supports optional Face ID, Touch ID or fingerprint sign-in. Your face or fingerprint is checked entirely on your device by Apple or Android; we never receive it. When you turn this on, the App keeps a random sign-in token in your device's secure storage, and we store only a scrambled (hashed) copy of it with the dates it was created and last used. It is deleted with your account.

The App can remind you about workouts with notifications that are scheduled and stored on your device. We do not collect a push notification token, and we do not send push notifications from our servers. You can turn notifications off at any time in your device settings.

The website (pdf-fit.com)

• Google Analytics: pdf-fit.com uses Google Analytics to count visits and see how the site is used: the public pages, creators' pages and program pages, the sign-in pages, PDF Fit for Creators and our team's admin pages. It records the pages you view, your approximate location, your device and browser and how you arrived, using cookies (_ga and _ga_R58ZS4YVZG) that last up to two years. On creators' pages, program pages and the signed-in pages it is told the kind of page you're on, never a code, link or search in its address; when you're signed in, it is also told your account's random ID and whether you're a creator, never your name or email address. Pages opened from a link in one of our emails that signs you in, resets a password or stops emails do not use it. You can block these cookies in your browser, or use Google's opt-out add-on at tools.google.com/dlpage/gaoptout.
• Cookies we set: __Host-pf_web keeps you signed in to the website (creators and our team only), for up to 30 days (7 days for our team). __Host-pf_oauth lasts 10 minutes while you sign in with Google, Apple or Microsoft. pf_theme remembers light or dark mode on signed-in pages, for a year. pdffit_lang remembers the language you chose, for a year. Your browser's local storage also remembers whether you chose light or dark mode on the public pages. These are needed for the site to work or to remember your choices, and are not used for tracking.

The App

The App does not use cookies, except inside the YouTube player when you play an exercise video (section 8). We do not take part in cross-app tracking or targeted advertising, and we do not use advertising SDKs.

Our server keeps its own activity records whether or not you consent to the analytics below (section 1.2). The consent switch controls only Google Analytics for Firebase and Firebase Crashlytics.

Analytics and crash reporting. With your consent, the App uses Google Analytics for Firebase and Firebase Crashlytics (provided by Google Ireland Limited) to measure aggregate feature usage and to diagnose crashes.

• Legal basis: your consent (GDPR Art. 6(1)(a)), and consent to storage on your device under ePrivacy Directive Art. 5(3). Analytics and crash collection are disabled in the App as shipped. Nothing is sent to Google Analytics for Firebase or Crashlytics unless you opt in.
• What is collected: a randomly generated app-instance identifier, device model, operating system version, app version, coarse country, the names of screens you visit, and feature-usage events (for example: a workout was started, a PDF was imported). Crash reports additionally include stack traces.
• What is never collected: your name, email address, account identifier, password, workout or body-measurement data, PDF contents, precise location, or any advertising identifier. Collection of the Android Advertising ID (AdID), Android ID (SSAID) and the iOS Vendor Identifier (IDFV) is explicitly disabled, so the App cannot be used to build a cross-app advertising profile.
• How to withdraw consent: open Profile → Privacy and turn off “Share anonymous usage data”. Withdrawal takes effect immediately: collection stops and the App instructs Google to reset the app-instance identifier and discard locally queued analytics data. Withdrawing is as easy as granting, and you can change your mind at any time.
• Retention: analytics event data is retained by Google for a maximum of 14 months from collection and then deleted automatically. Crash reports are retained for 90 days.
• Declining costs you nothing: every feature of the App works identically whether you consent or not.

The AI Program Builder creates a personalized training program from the answers you give in an in-app interview. Because some of those answers can reveal information about your health, including injuries, physical limitations, pregnancy or postpartum status and health screening answers, this feature works only with your explicit consent, given when you start the interview, and the information is used solely to generate your program.

• What is sent to the AI provider: only the interview answers themselves. Your name, email address and account identifiers are never included in what the AI model sees.
• No AI training on your data: our AI provider (Anthropic) processes this data as our service provider and does not use it to train its models.
• Safety screening: the feature declines to generate programs for users under 16, during pregnancy or postpartum recovery, or where answers suggest a condition that needs medical clearance first.
• Not medical advice: generated programs are general fitness information. They are not medical advice, and you should consult a health professional before starting any exercise program.
• Reporting: you can report any generated program from within the app; reports are reviewed by a human.
• Deletion: your interview answers and generation records are deleted with your account, as described in the retention section above.

Payments are processed by the Apple App Store or Google Play. We never receive or store your card or bank details. To deliver what you bought, we receive and store: the store's transaction identifier, the product purchased, and (for PDF Fit Pro) your subscription status, via our purchase-infrastructure provider RevenueCat, which identifies you by a random PDF Fit account number, not your name or email address. We also keep a ledger of the credits on your account (for example PDF import credits and program credits) and when they were granted and spent. Subscriptions renew and are cancelled through your app store account; refunds are handled under the store's policies.

Some fitness creators share a free program through a link to a page on pdf-fit.com. When you use one of those pages, this is what happens to your information.

• Your email address: When you tap “Get the free program”, you give us your email address. We use it only to send you an email with the links to get PDF Fit and your code, and to add the program to your PDF Fit account when you sign up or sign in with the same address. We send that email through our email delivery provider.
• What the creator sees: Totals only, on the creator's numbers page and in a weekly email to them, such as how many people visited the page, got the program, started week 1 and kept training. Numbers from 1 to 4 show as “<5”. The creator never sees your name, your email address or anything else that says who you are.
• Page visits: We count visits to these pages without storing your IP address. Instead we keep a code made from it and your browser details, and the code changes every day, so we can count visitors and limit abuse without following anyone from one day to the next. We also note your browser and phone type and the website that sent you.
• How long we keep your email address: We delete it 7 days after the program is added to your account. If it never is, we delete it 30 days after your request expires (a request lasts 30 days). If you delete your PDF Fit account, we delete it straight away.
• What we record: Which creator's program first brought you to PDF Fit, if one did; that you accepted the note shown before you start a creator's program, with its version, your language and your App version; and any creator you choose to hide. A creator never learns that you hid them. If a program has to be taken down, for example over who owns it, we may remove it from everyone who has it.

Once the program is in your account, it is part of your PDF Fit data like any other program, and the rest of this policy applies.

If you join PDF Fit for Creators to share your own programs, this is what we keep about you, on top of the rest of this policy.

• Your profile: your display name, handle, photo and short bio. They are public on your page at pdf-fit.com, and beside your programs in the App, once we approve your first program or your account. We store your photo as a new, smaller copy without the location and camera details a phone photo usually carries.
• Your Instagram, TikTok and YouTube accounts: the handles you add, whether we have verified them, follower counts you enter or that YouTube shows publicly, and any Instagram link-tap figures you type in. To verify, we read the message you send us, or the public description of your YouTube channel. For YouTube, we keep your channel's ID and check it again every 30 days. PDF Fit uses YouTube API Services to do this, so the YouTube Terms of Service and the Google Privacy Policy apply. We only read your channel's public details and never connect to your Google account.
• Your invite: if we email you an invite, we keep that address until you use the invite or we withdraw it, or until 30 days after it expires.
• The creator terms: which version you accepted, when, and a fingerprint of its exact text. We keep this record after your account is deleted, as the record of what was agreed.
• Your PDFs: the PDFs you upload, kept privately; followers never get them. We read them the same way as PDFs imported in the App (section 8), set them out as programs, and use them to fix problems and answer questions about who owns a program. We keep each PDF and its file name while its program is being prepared, reviewed, available or paused, and for 90 days after it stops being available or we decide not to publish it.
• Your confirmation of the rights: when you send a program for review, we record when you confirmed you have the rights to it, which wording you confirmed, and a scrambled fingerprint of your network address that can't be turned back into the address. We delete the fingerprint 90 days after the program stops being available.
• Notes you send us: what you write when you tell us something is wrong with your program.
• Your numbers: you see totals about your programs, never who your followers are; numbers from 1 to 4 show as “<5”.
• Emails: we email you about your programs and about your numbers (when your first followers start a program, and weekly). You can turn off the emails about your numbers from the link in them, or in PDF Fit for Creators.
• If you delete your account: you can delete it in PDF Fit for Creators or in the App. Your creator profile is closed: your name, photo, bio and social accounts are removed, and your handle stays reserved so nobody else can use your links. We delete straight away the PDFs of programs that never went live. We keep records that hold no contact details: the programs your followers train, the totals behind your numbers, the terms you accepted, and our team's log. If you delete it in PDF Fit for Creators, we send one email to confirm.

• Account and service emails: sign-in links and codes, password resets, notices when a sign-in method is added to or removed from your account, emails about programs you get from creators, and replies to your messages. They are part of running your account, so they have no unsubscribe link.
• Check-ins and tips: we may email you to help you get started or get back to training, for example if you signed up but haven't added a program, or haven't trained in a while. We choose who gets them from your activity records, and you get each kind at most once. Every one has a one-tap unsubscribe link. After you use it we send you no more of these, but you will still get the account and service emails above.
• Opens and taps: check-in emails use our email provider's standard measurement, which tells us whether an email was opened and which links were tapped. The button in a check-in email also goes through pdf-fit.com, and we record the first time you tap it. We use this only to tell whether these emails help. Account and service emails are sent without this measurement.
• Delivery and records: emails are sent through Twilio SendGrid, in the language your App is set to. We keep a short record of each email we send about your account: its kind, subject line, time and whether it was sent; never the message itself or your address. It is deleted with your account.

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify you via email or in-app notification for significant changes.
• Obtain your consent where required by applicable law.

We encourage you to review this policy periodically for any changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Support form
• Email: training@pdf-fit.com
• PDF Fit is operated by Global Outsource Solutions Pty Ltd, Australia, which is responsible for your personal data under this Privacy Policy.

We will respond to all privacy-related inquiries within 30 days (or sooner where required by applicable law).