Privacy Policy

01 Information We Collect

1.1 Account Information

When you create an account, we collect:

• Full name
• Email address
• Password (stored in encrypted form via Supabase — we never see your plaintext password)

1.2 Profile and Onboarding Data

During onboarding and app use, we collect:

• Target military branch and career field
• Military background (civilian, prior service, active duty)
• Target timeline to selection
• Self-identified training weaknesses

1.3 Fitness and Training Data

As you use the App, we collect:

• Initial Fitness Test (IFT) baseline scores and subsequent logged scores
• Workout logs and completed training sessions
• Performance metrics (times, reps, weights)
• Progress data over time

1.4 Subscription and Billing Data

We collect information related to your subscription tier (Candidate, Pro, Elite, or Elite Plus). Payment processing is handled entirely by Apple (App Store) and RevenueCat. We do not collect, store, or have access to your credit card number, billing address, or full payment details. We receive only confirmation of your subscription status.

1.5 Device and Technical Information

We may automatically collect:

• Device type and operating system version
• App version
• General usage analytics (screens visited, features used)
• Crash reports and error logs

We do not collect your precise GPS location or contacts.

02 How We Use Your Information

We use the information we collect to:

• Provide the service — create and manage your account, deliver your training program, track your progress, and personalize your protocol based on your scores and goals
• Improve the App — analyze usage patterns and crash data to fix bugs and develop new features
• Communicate with you — send important account notices, support responses, and (with your permission) app updates and announcements
• Process subscriptions — verify your subscription tier and deliver the features you have access to
• Ensure safety and integrity — detect and prevent fraud, abuse, or violations of our Terms of Service

We do not use your data to serve advertisements. We do not build advertising profiles. We do not sell your data to any third party.

03 How We Share Your Information

We share data only in the following limited circumstances:

3.1 Service Providers

We use trusted third-party services to operate the App:

• Supabase — our authentication and database provider. Your account data and training data are stored on Supabase's infrastructure. Supabase processes data on our behalf and is bound by contractual data protection obligations. supabase.com/privacy
• RevenueCat — our subscription management platform. RevenueCat receives your subscription status and purchase history to manage access to paid features. revenuecat.com/privacy
• Apple — your App Store purchases are processed by Apple under their own privacy policy. apple.com/privacy

3.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or valid governmental request, or to protect the rights, property, or safety of OPTRX, our users, or the public.

3.3 Business Transfers

If OPTRX is acquired by or merged with another company, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

3.4 With Your Consent

We will share your information with other parties only when you have given us explicit permission to do so.

We do not sell, rent, or trade your personal information to advertisers, data brokers, or any other third parties for commercial purposes.

04 Data Retention and Deletion

We retain your personal data for as long as your account is active or as needed to provide the service.

Account deletion: You may delete your account at any time by contacting us at support@optrx.app. Upon deletion, we will remove your personal information from our active systems within 30 days. Certain data may be retained in encrypted backups for up to 90 days before being permanently purged, unless we are legally required to retain it longer.

Fitness data: Your training logs and IFT scores are retained as long as your account exists. If you delete your account, this data is deleted along with it.

Aggregated data: We may retain anonymized, aggregated data that cannot be linked to you individually (e.g., average pull-up counts across all users) indefinitely for product improvement purposes.

05 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate or incomplete data
• Deletion — request that we delete your personal data (subject to certain legal limitations)
• Portability — request your data in a structured, machine-readable format
• Objection — object to certain types of data processing

To exercise any of these rights, contact us at support@optrx.app. We will respond to verified requests within 30 days.

06 Children's Policy

OPTRX is intended for users who are 18 years of age or older. While we set the minimum account age at 13 in compliance with the Children's Online Privacy Protection Act (COPPA), we strongly recommend that users be at least 18 years old due to the intense physical nature of the training content and the target audience of military selection preparation.

We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13 without verifiable parental consent, we will delete that information promptly. If you believe we have inadvertently collected information from a child under 13, contact us at support@optrx.app.

07 Security

We take the security of your data seriously. Our security measures include:

• Password encryption via Supabase Auth (bcrypt hashing — we never store or see plaintext passwords)
• Encrypted data transmission via HTTPS/TLS for all communications between the App and our servers
• Row-level security policies in our database to ensure users can only access their own data
• Limited employee access to production data on a need-to-know basis

No method of electronic storage or transmission is 100% secure. While we use commercially reasonable measures to protect your data, we cannot guarantee absolute security. If we become aware of a data breach that affects your personal information, we will notify you promptly in accordance with applicable law.

08 Third-Party Links and Services

The App may contain links to third-party websites or reference external resources (such as military recruitment websites). This Privacy Policy applies only to the OPTRX App. We are not responsible for the privacy practices of third-party sites and encourage you to review their policies.

09 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:

• Updating the "Last Updated" date at the top of this policy
• Sending a notice to the email address associated with your account, or
• Displaying a prominent notice within the App

Your continued use of the App after changes take effect constitutes your acceptance of the revised policy. If you do not agree to the updated policy, you should delete your account and stop using the App.

10 Contact Us

If you have questions, concerns, or requests related to this Privacy Policy, contact us at: