Privacy Notice

• Account data — your name, email address and login credentials when you create an account.
• Personalization data — the goals, preferences and answers you give us so we can build your walking plan, meal plan and daily habits.
• Usage data — how you use the app: completed walks, check-ins, streaks, feature interactions and similar telemetry.
• Support data — messages you send to our support team.
• Technical data — device type, browser, approximate location derived from IP address, and log data needed to keep the Service secure.

Payment details (card numbers, billing address for tax purposes) are collected and processed directly by Paddle, our Merchant of Record — we never see or store your full card data.

• To provide the Service — creating your account, generating and updating your personalized plans, syncing your progress (legal basis: performance of our contract with you).
• Security and fraud prevention — protecting accounts, preventing abuse of trials and payments (legal basis: legitimate interests).
• Service improvement — understanding how features are used to improve the product (legal basis: legitimate interests).
• Customer support — answering your requests (legal basis: performance of contract / legitimate interests).
• Service emails — trial and billing reminders, receipts and important product notices (legal basis: performance of contract). Optional marketing emails are sent only with your consent, which you can withdraw at any time.
• Legal obligations — keeping records required by accounting and tax law.

• Paddle (Merchant of Record) — for the sale of the product, subscription management, payment processing, tax compliance and invoicing. Paddle processes payment data as an independent controller under its own privacy policy.
• Service providers — hosting, analytics, email delivery and support tooling providers who process data on our instructions under contract.
• Professional advisers — lawyers and accountants where needed.
• Authorities — where disclosure is required by law.

We do not sell your personal data.

We keep your personal data only for as long as needed for the purposes above: account and personalization data while your account is active; support messages for up to 24 months; billing-related records for the period required by tax and accounting law. When data is no longer needed, we delete or anonymize it.

Depending on your country of residence, you may have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive a portable copy, and withdraw consent where processing is based on consent. If you are in the UK or EEA, you also have the right to lodge a complaint with your supervisory authority; we respond to requests within one month.

To exercise any of these rights, email protofitsupport@gmail.com. You can also delete your account data by asking us at the same address.

Some of our service providers process data outside Ukraine, the UK or the EEA. Where personal data leaves these regions, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

We apply appropriate technical and organizational measures to protect your data, including encryption in transit, access controls and limiting access to staff and providers who need it. No system is perfectly secure, but we work to protect your information and will notify you and regulators of breaches where the law requires.

We use essential cookies and storage needed to keep you signed in and remember your preferences, and privacy-respecting analytics to understand aggregate usage. We do not use third-party advertising cookies. You can control cookies through your browser settings; blocking essential cookies may prevent sign-in.

We may update this notice from time to time and will post the new version on this page with a revised “last updated” date. Questions about privacy: protofitsupport@gmail.com. For order, payment and refund questions handled by our Merchant of Record, see our Refund Policy and Terms & Conditions.