PTG Fitness Privacy Policy

Effective Date: February 20, 2026
Last Updated: June 22, 2026

PTG Fitness ("PTG Fitness," "we," "us," or "our") values your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use the PTG Fitness mobile application, related services, and websites that link to this policy collectively, the "Services".

By using the Services, you agree to the practices described in this Privacy Policy.

1. Scope

This Privacy Policy applies to personal information processed through the Services. It does not apply to third-party websites, services, or applications that may be linked from the Services, such as external recipe pages or payment pages. Those third parties are governed by their own privacy policies. When you navigate away from our Services to a third-party site, we recommend reviewing the applicable privacy policy for that site.

2. Information We Collect

A. Information You Provide Directly

We collect information you provide when you:

• Create an account, such as email address and authentication credentials.
• Complete onboarding or update your profile, such as first name, age, sex or gender, height, current and target weight, fitness goals, activity level, diet preferences, and coaching preferences.
• Log meals, workouts, hydration, body weight, notes, or other fitness-related entries.
• Upload meal photos for AI-assisted analysis.
• Contact customer support, such as message content and support metadata.

B. Health and Sensitive Data

Some of the information we collect constitutes health data or other sensitive personal information. This includes, but is not limited to, body weight, fitness goals, diet preferences, HealthKit metrics, meal photos, and nutrition data. Where required by applicable law, we obtain your explicit consent before processing this category of data. You may withdraw consent at any time by adjusting your permissions in iOS Settings or by deleting your account.

C. Information from Device Features and Integrations

If you grant permission, we may collect:

• Apple Health / HealthKit data, such as steps, calories, exercise minutes, and sleep metrics.
• Camera and photo library data when you capture or upload meal images.
• Push notification data, including device token, app version, iOS version, timezone, notification preference state, and last-seen timestamps.

HealthKit data is used solely to provide fitness and wellness features within the Services. It is never used for advertising purposes and is never sold or shared with third parties except as required to operate the Services.

D. Subscription and Billing Information

Subscriptions and payments are processed by Apple via StoreKit. We do not receive or store your full payment card information. We may receive limited subscription-related metadata, including:

• Product identifiers and plan tier.
• Subscription status.
• Current billing period and renewal state.
• Transaction identifiers necessary for entitlement management and customer support.

E. Information from Third-Party Data Sources

Depending on features you use, we may retrieve information from third-party providers, such as:

• OpenFoodFacts for barcode-based nutrition lookups.
• Recipe and nutrition providers, such as Edamam, for meal planning and recipe metadata.

F. AI-Generated and Derived Data

We generate data based on your inputs, including:

• AI-generated meal and workout plans.
• Nutrition and calorie estimates derived from meal photos.
• Insights, summaries, and recommendations based on your activity and preferences.

AI features are optional. Before any personal data is sent to OpenAI, the app identifies OpenAI as the recipient, describes the relevant data, and asks for your permission. If you allow AI data sharing, PTG may send only the data needed for the feature you choose: age, height, weight, fitness goals, workout and nutrition records, Apple Health steps, active and resting calories, exercise minutes and sleep metrics, meal details or photos, and messages submitted to the PTG Assistant. OpenAI processes that data to return meal plans, workout plans, meal-photo estimates, and assistant responses. If you decline, PTG does not send your personal data to OpenAI. You can change this choice later under Profile > Privacy & Data.

These AI-generated outputs are estimates and are used only to provide the requested features. They do not constitute medical advice or solely automated decisions that produce significant legal or similarly significant effects without human involvement.

G. Analytics and Usage Data

We may collect analytics and usage data through first-party or third-party analytics tools integrated into the Services, such as crash logs, feature usage events, and session data. This information is used to improve performance and user experience and is not used to build advertising profiles. If you use third-party analytics providers, we will identify them in this section or in our cookie/tracking notice as applicable.

3. How We Use Information

We use personal information to:

• Provide, operate, and maintain the Services.
• Create and manage user accounts.
• Generate personalized meal plans, workout plans, and nutrition insights.
• Sync enabled health and activity data.
• Deliver notifications and reminders you opt into.
• Process subscriptions, restore purchases, and manage entitlements.
• Provide customer support and respond to inquiries.
• Monitor security, prevent fraud, and troubleshoot issues.
• Improve functionality, performance, and user experience through analytics.
• Comply with legal obligations and enforce our terms.

The free version of the app displays Google AdMob ads. If you grant permission through Apple's App Tracking Transparency prompt, Google may use advertising data, device identifiers, product interaction, coarse location, and diagnostic or performance data to personalize ads and measure advertising across apps and websites. If you decline, PTG requests limited/non-personalized advertising where supported. HealthKit data is never used for advertising.

4. Legal Bases for Processing (EEA/UK)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process personal data under one or more of the following legal bases:

• Contractual necessity: to provide the Services you have requested.
• Explicit consent: for health and sensitive data under Article 9(2)(a) GDPR, HealthKit access, push notifications, and other optional features.
• Legitimate interests: such as improving Services, ensuring security, and preventing fraud, where those interests are not overridden by your rights.
• Legal obligations: where processing is required to comply with applicable law.

You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

You have the right to lodge a complaint with your local data protection supervisory authority. For UK users, this is the Information Commissioner’s Office (ICO). For EEA users, this is the supervisory authority in your country of residence.

If we are required to appoint a Data Protection Officer (DPO) or EU/UK representative under applicable law, we will update this section with their contact details. In the meantime, data protection inquiries may be directed to: support@ptgfitness.com.

5. Automated Decision-Making

We use automated processing to generate personalized meal plans, workout plans, and nutrition insights. These outputs are recommendations only and do not produce legal effects or similarly significant decisions without human review. If you have questions about how automated processing affects you, contact us at support@ptgfitness.com.

6. How We Share Information

We may share personal information with:

• Service providers and processors that help operate the Services, such as hosting, authentication, databases, AI processing, nutrition lookup services, and push notification delivery, under contractual obligations limiting their use of your data.
• Apple, for subscription processing and App Store functionality.
• Legal or regulatory authorities when required by law or to protect rights, safety, and security.
• Business transaction participants in connection with mergers, acquisitions, or asset sales, subject to appropriate confidentiality safeguards.

We do not sell personal information for monetary consideration. We share data for cross-context behavioral advertising only when you grant permission through Apple's App Tracking Transparency prompt. You can change tracking permission in iOS Settings.

7. Third-Party Services

The Services rely on the following third-party providers. Each processes data under its own privacy policy and applicable contractual obligations with us:

• Supabase: authentication, database, storage, and server functions.
• OpenAI: AI analysis and generation features, including processing of meal photos and fitness data.
• Google AdMob: advertising delivery, measurement, and, only with ATT permission, personalized advertising and tracking.
• Edamam: recipe and meal planning data.
• OpenFoodFacts: product and nutrition data.
• Apple: StoreKit subscriptions, push notifications, and HealthKit integration.

We encourage you to review the privacy policies of these providers. We are not responsible for the privacy practices of third parties.

8. Data Retention

We retain personal information only for as long as necessary to:

• Provide and improve the Services.
• Maintain account records and customer support history.
• Comply with legal, tax, accounting, and security requirements.

In general:

• Account, profile, and log data are retained while your account is active.
• Uploaded meal images and AI analysis data are retained until deleted by you or until no longer required to provide the Services.
• Certain billing and security records may be retained for legally required periods after account deletion.

If you delete your account, we will delete or de-identify your personal information within 90 days, subject to legal hold and backup retention requirements. De-identification is performed such that the remaining data cannot reasonably be used to identify you.

9. Security

We use reasonable administrative, technical, and organizational safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction. However, no system is completely secure, and we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at support@ptgfitness.com.

10. Your Choices and Rights

Depending on your location, you may have rights to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal information.
• Restrict or object to certain processing.
• Receive a portable copy of certain data.
• Withdraw consent where applicable.
• Opt out of automated decision-making in certain circumstances.

You may also:

• Manage HealthKit permissions in iOS Settings.
• Control notification permissions in iOS Settings.
• Manage or cancel subscriptions through the App Store.
• Delete your account using in-app tools where available.

To exercise any of your rights, or to submit a complaint or inquiry, contact us at: support@ptgfitness.com. We will respond within the timeframe required by applicable law, typically 30-45 days. If you are unsatisfied with our response, you may appeal by contacting us again and requesting escalation. We will provide a final decision within the period required by applicable law.

11. U.S. State Privacy Rights

Residents of certain U.S. states, including California, Colorado, Connecticut, Utah, and Virginia, may have additional rights under applicable state privacy laws, including rights to:

• Access personal information we have collected about you.
• Delete personal information, subject to certain exceptions.
• Correct inaccurate personal information.
• Obtain a portable copy of personal information.
• Opt out of the sale of personal information or its use for targeted advertising.
• Appeal a denial of any of the above rights.

We do not knowingly sell personal information or use it for cross-context behavioral advertising. To submit a request or appeal, contact us at support@ptgfitness.com. We will respond within the timeframe required by the law applicable to your state.

California residents may also have rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know the categories of personal information collected and the purposes for which it is used.

12. Children’s Privacy

The Services are not directed to children under 13, or a higher age if required by applicable law in your jurisdiction. We do not knowingly collect personal information from children. If you believe a child has provided us personal information without appropriate parental consent, please contact us at support@ptgfitness.com and we will take prompt action to delete such information.

13. International Data Transfers

Your information may be processed in countries outside your country of residence, including the United States, where data protection laws may differ from those in your country. Where required by applicable law, including GDPR, we implement appropriate safeguards for international data transfers, such as standard contractual clauses approved by the European Commission or the UK Information Commissioner’s Office.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised "Last Updated" date. If changes are material, we will provide advance notice by in-app notification, email, or other means as required by applicable law. Your continued use of the Services after the effective date of any update constitutes your acceptance of the revised policy.

15. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

PTG Fitness
Privacy & Data Inquiries: support@ptgfitness.com

This document was last reviewed and updated on February 20, 2026.