If you have questions about this Privacy Policy or want to exercise your privacy rights, you can contact us at support@tomefitness.oscarbc.me.

Controller Information

Data We Collect

Account Information

• Email address (used for account creation, sign-in, and account recovery)
• Optional display name (used for personalisation)
• Authentication information provided through Firebase Authentication
• Authentication information from Google Sign-In or Sign in with Apple when used
• Firebase user identifier (UID)

Fitness Data You Choose to Store

• Workout sessions and exercise entries
• Custom exercises and routines
• Fitness goals and progress
• Training streak information
• Optional body-weight entries

Preferences and Settings

• Unit preferences (kg/lb, km/mi)
• Theme preference
• Notification preferences
• Experience level and training targets

Technical Information

• Firebase Cloud Messaging (FCM) token used to deliver push notifications

Data We Do Not Collect

Tome Fitness does not collect:

• GPS or location data
• Heart rate or biometric sensor data
• Medical records or clinical information
• Wearable device data
• Contacts, photos, or media files
• Payment information
• Advertising identifiers
• Analytics or tracking data
• Cross-app or cross-site tracking data
• Device fingerprinting information

Why We Process Your Data

We process your information to provide the features you requested, including:

• creating and managing your account
• synchronising your data across devices
• storing workout information and preferences
• delivering optional push notifications
• maintaining security and reliability of the service

We do not use your data for advertising, profiling, or marketing purposes.

Legal Basis for Processing

We process your data under the following legal bases:

• Performance of a service (Article 6(1)(b) GDPR): to create your account and provide cloud synchronisation and app functionality
• Consent (Article 6(1)(a) GDPR): for push notifications where required by your device
• Legitimate interests (Article 6(1)(f) GDPR): to maintain the security and reliability of the service
• Legal obligations (Article 6(1)(c) GDPR): where required by applicable law

Third-Party Services and International Transfers

Tome Fitness uses the following service providers:

• Firebase Authentication
• Cloud Firestore
• Firebase Cloud Messaging
• Cloud Functions

Google and authentication providers may process data outside the European Economic Area (EEA). Where this occurs, appropriate safeguards are used in accordance with applicable European data protection law.

We do not sell personal data and do not share your information for advertising purposes.

Data Retention

We retain account and fitness data while your account remains active.

When you delete your account, associated data is removed from our systems, although some technical metadata may remain temporarily within third-party service infrastructure according to their retention policies.

Your Rights

Under GDPR you have the right to:

• access your data
• correct inaccurate information
• request deletion of your data
• request restriction of processing
• receive a portable copy of your data
• object to certain processing activities

You can manage most data directly within the app. To exercise your rights, contact support@tomefitness.oscarbc.me. You may also lodge a complaint with your local data protection authority.

Security

We use reasonable technical and organisational measures to protect your information, including encrypted communications, access controls, and secure authentication systems.

Push Notifications

Push notifications are used only for app functionality such as streak reminders, goals, and training updates.

You can disable notifications at any time through your device settings or app settings.

Website Storage

The Tome Fitness website stores a single local browser preference to remember your selected theme. No analytics, advertising, or tracking technologies are used.

Children

Tome Fitness is not intended for children under 16 years of age. If you believe personal data from a child has been provided, please contact support@tomefitness.oscarbc.me.

Changes to This Policy

This Privacy Policy may be updated from time to time. Material changes will be communicated through the app or website where appropriate.

Contact