AdaptivLyfe™ Privacy Policy

Last updated: February 27, 2026

This Privacy Policy explains how AdaptivLyfe ("we," "us," or "our") collects, uses, shares, and protects your information when you use our web and mobile experiences, including our Android app available on the Google Play Store (collectively, the "Service"). By using AdaptivLyfe, you agree to the practices described here.

AdaptivLyfe is operated by an individual creator based in Oregon, United States. If you have any questions about this Privacy Policy or your data, you can contact us at: connect@lifteachotherempowerment.com.

1. Information We Collect

1.1 Account and Profile Information

When you register and use AdaptivLyfe, we may collect:

Username
Email address (optional, used for account recovery and communication)
Password (stored as a bcrypt hash, never in plain text)
Display name (optional)
Bio (optional)
Birth date (optional, for age-based health calculations and eligibility checks)
Biological sex (optional, for BMI and other health-related calculations)
Profile picture (optional, stored in cloud object storage)

1.2 Health and Fitness Data

To provide health, fitness, and lifestyle features, we may collect and process:

Height, weight, and BMI calculations
Weight loss plans and goals
Fitness goals (types, target values, progress)
Food and nutrition logs (meal type, food names, calories, and nutrient breakdown such as fat, protein, carbs, fiber, sugars, sodium, cholesterol)
Cardio and distance tracking (including GPS-based distance while you are actively tracking an activity)
Daily routine completions, streaks, and points
Exercise preferences and workout history
Cooking preferences (mobility level, sensory preferences, dietary restrictions, allergens)
Pantry items and shopping lists

Some of this information is considered "sensitive" or "special category" data under certain laws, such as health-related data and location information.

1.3 Location Data

When you enable cardio tracking, we may temporarily access your device's GPS location to calculate distance for your activity.

Location is accessed only during active cardio tracking sessions.
We do not continuously track your location in the background.
Location information used for distance calculations is processed for the activity and is not stored on our servers as a persistent location history.

1.4 Communications and Community Content

We may collect content and metadata when you interact within the app, including:

Chat messages with the AI assistant
Forum posts and comments
Direct messages between users (which auto-delete after 24 hours)
Message requests and responses
App ratings and reviews submitted through the app
Resource Hub submissions
User reports and related moderation records

1.5 Payment and Subscription Information

Payments for premium subscriptions are processed by Stripe.

We do not see or store your full payment card numbers.
Stripe may collect and store your payment details according to its own privacy policy.
We store Stripe customer IDs, subscription status, and your selected plan type (such as monthly or yearly) to manage your subscription.
If you access the App through the Google Play Store, Google may also process payment information in accordance with Google's privacy policy.

1.6 Technical, Analytics, and Usage Data

To operate and improve the Service, we may collect:

Anonymous visitor or device identifiers (a randomly generated ID, not a browser fingerprint)
Basic usage information such as page views, feature usage, and interaction events (for example, which features are used, not the specific content you enter)
API usage metrics used internally for performance and cost monitoring
Log information such as IP address and user agent for admin and security logs

1.7 Cookies, Local Storage, and Similar Technologies

We use cookies, localStorage, and similar technologies to support core functionality and preferences, including:

Session cookies for authentication and keeping you logged in
localStorage for accessibility settings (for example, high contrast, large text), theme preference, update/version tracking, app install prompts, and various UI preferences

1.8 Push Notifications

If you opt in, we may collect:

Web push subscription endpoints and keys (for browser notifications using VAPID)
Native push tokens for iOS/Android (via Capacitor)
Hydration or reminder settings (timing, frequency, and time zone)

2. How We Use Your Information

We use the information we collect for purposes including:

Providing and operating the Service, including account creation, authentication, and core features such as routines, streaks, and points.
Delivering health and fitness features, such as BMI calculations, goal tracking, nutrition logging, workout generation, and personalized recommendations.
Powering AI-driven features, including chat, workout generation, nutrition analysis, meal planning, and body-doubling/companion support.
Supporting social and community features, including forums, direct messaging, Resource Hub submissions, and moderation for safety.
Processing payments and managing subscriptions via Stripe.
Sending transactional communications, such as account-related emails and password reset messages.
Maintaining security, preventing abuse, detecting fraud, and protecting the integrity of the Service.
Analyzing usage to improve performance, reliability, usability, and feature design.
Complying with legal obligations and responding to lawful requests.

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or another region where GDPR or similar laws apply, we rely on one or more of the following legal bases:

Consent: For processing sensitive personal data such as health and fitness information and for accessing your location for cardio tracking when you choose to provide or enable these features.
Contract: To provide the Service you requested, including operating your account, maintaining your subscription, and delivering core features.
Legitimate Interests: For purposes such as basic analytics, security logging, preventing fraud, improving the Service, and ensuring the stability of our systems.
Legal Obligations: To comply with applicable laws, regulations, or court orders.

You can withdraw your consent for specific processing (for example, turning off cardio tracking or removing health data you previously provided) at any time through the app settings where available or by contacting us.

4. How We Share Your Information

We do not sell your personal information. We share information only as reasonably necessary to operate the Service, comply with the law, or protect our rights and users.

4.1 Service Providers and Processors

We use trusted third-party providers to support our Service, including:

OpenAI: Provides AI chat, workout generation, nutrition analysis, meal planning, and companion features. User messages and relevant content (including nutrition label images) may be sent to OpenAI's APIs for processing.
Stripe: Processes payments for subscriptions. Stripe handles your payment information and may retain payment records according to its own policies.
Resend: Delivers transactional emails such as password reset messages.
Cloudflare R2 object storage: Stores images such as profile pictures and certain home page photos.
USDA FoodData Central: Used as a reference source for nutrition data; we do not send your personal data to USDA.

These service providers act on our behalf and are permitted to use your information only to provide services to us, under appropriate contractual safeguards.

4.2 Community and Social Sharing

Certain information you choose to share within the app may be visible to other users, such as:

Your display name, profile picture, and bio
Forum posts and comments (visible to logged-in users)
Resource Hub submissions (showing your author name)
Your online status or last active timestamp in community features

Direct messages are visible only to the participants and are automatically deleted after 24 hours. Message requests expire after a set period if not accepted.

4.3 Legal, Safety, and Protection

We may disclose your information if we believe it is reasonably necessary to:

Comply with applicable law, legal process, or governmental requests
Enforce our terms or policies
Protect the safety, rights, property, or security of AdaptivLyfe, our users, or the public
Detect, prevent, or address fraud, security, or technical issues

5. International Data Transfers

AdaptivLyfe is operated from the United States. Your information may be processed and stored in the United States and in other countries where our service providers operate.

If you are located in the EEA, UK, or another region with data protection laws that differ from those in the United States, please be aware that we may transfer your personal data to countries that may not have the same level of data protection as your home jurisdiction. Where required, we take steps to implement appropriate safeguards, such as contractual data protection clauses with our service providers.

6. Cookies, Local Storage, and Tracking

We use:

Session cookies to keep you logged in and secure your session.
localStorage to remember your preferences (accessibility settings, theme, version/update state, install prompts, and other UI preferences).
Basic analytics identifiers (random IDs) to understand how the Service is used, without creating detailed browser fingerprints.

You can control or delete cookies through your browser settings, but disabling essential cookies may affect the functionality of the Service.

7. Advertising

AdaptivLyfe does not display third-party advertisements. We do not use advertising networks, advertising cookies, or ad-tracking technologies. We do not sell personal information and do not participate in targeted advertising. If this changes, we will update this Policy before any advertising is introduced.

8. Data Retention and Deletion

We aim to keep your information only for as long as necessary to provide the Service and for legitimate business or legal purposes.

You can delete your account from within the app. When you do, your account and associated data are deleted from our systems, subject to limited exceptions below.
Direct messages between users are automatically deleted after 24 hours.
Message requests expire after a set period if not responded to.
We may retain limited records necessary for security, legal, or compliance purposes (for example, basic logs of account deletion events or records that we are legally required to retain).
Stripe may retain payment and transaction records independently in accordance with its own legal and regulatory obligations. We do not control Stripe's retention practices.

If you have questions about how long we keep specific types of data, you can contact us at connect@lifteachotherempowerment.com.

9. Your Rights

Your rights depend on where you live. Subject to local law, you may have the following rights with respect to your personal information.

9.1 Rights Under GDPR (EEA/UK and Similar Jurisdictions)

If you are in the EEA, UK, or another region with similar data protection laws, you may have the right to:

Access: Request confirmation of whether we process your personal data and obtain a copy of the data we hold about you.
Rectification: Request correction of inaccurate or incomplete personal data.
Erasure ("Right to be Forgotten"): Request deletion of your personal data, including through the account deletion feature in the app, subject to certain legal exceptions.
Restriction: Request that we limit the processing of your data in certain circumstances.
Portability: Request your personal data in a structured, commonly used, and machine-readable format, and ask us to transmit it to another controller where technically feasible.
Objection: Object to certain types of processing, including processing based on our legitimate interests.
Withdraw Consent: Where we rely on consent (for example, certain health or location processing), you can withdraw that consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise these rights, contact us at connect@lifteachotherempowerment.com. We may need to verify your identity before responding to your request.

9.2 Rights Under CCPA/CPRA (California Residents)

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA/CPRA), including:

Right to Know: Request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which we use it, and the categories of third parties with whom we share it.
Right to Delete: Request deletion of your personal information, subject to certain exceptions (for example, where we must retain data for legal or security reasons).
Right to Correct: Request correction of inaccurate personal information.
Right to Opt Out of Sale or Sharing: If we "sell" or "share" personal information as defined by CCPA/CPRA (including certain targeted advertising activities), you have the right to opt out of such sale or sharing. We do not currently sell your personal information. If that changes, we will provide a clear "Do Not Sell or Share My Personal Information" mechanism.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

You or an authorized agent can exercise your rights by contacting us at connect@lifteachotherempowerment.com. We may require reasonable verification of your identity or the authority of your agent.

10. Children's Privacy

AdaptivLyfe is not intended for use by children under the age of 13. We do not knowingly collect personal information from anyone under 13.

If we learn that a user under 13 has created an account or provided personal information, we will take steps to delete the account and associated data as soon as reasonably practicable. If you believe that a child under 13 may have provided us with personal information, please contact us at connect@lifteachotherempowerment.com.

We may collect birth date information from users to support age-based health calculations and to help ensure that users meet the age requirements for the Service.

11. Security

We take reasonable and appropriate measures to protect your information from unauthorized access, loss, misuse, or alteration, including:

Storing passwords using bcrypt hashing; never storing plain-text passwords
Supporting secure authentication methods such as WebAuthn/passkeys (Face ID, Touch ID, and similar methods), with storage of credential IDs and public keys
Offering two-factor authentication for admin accounts (with TOTP secrets stored securely)
Using session tokens with expiration for authenticated access
Maintaining logs for admin access, including IP address and user agent, for security and auditing purposes
Using secure hosting and storage providers, including cloud object storage for images

No system can be guaranteed to be completely secure, but we work to protect your information and continually improve our security practices.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice (for example, via in-app notice or email).

Your continued use of the Service after the updated Privacy Policy becomes effective means that you accept the new terms.

13. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or your personal information, you can contact us at:

Email: connect@lifteachotherempowerment.com

If required by law in the future, we may provide additional contact details or a designated representative for certain regions, and we will update this section accordingly.