Privacy Policy

1. Who We Are

Workout Editor ("we", "us", "our") operates the workout planning service at this website. For privacy inquiries contact privacy@workouteditor.app.

2. Data We Collect

• Account data: name, email address, and authentication credentials managed via Clerk.
• Subscription data: billing plan and payment status. Payment card details are handled by Stripe and never stored by us.
• Content data: workout plans, exercises, and images you create or upload.
• Technical data: IP address, browser type, and device information.

3. How We Use Your Data

• To provide, maintain, and improve the Service.
• To process subscription payments and send billing-related communications.
• To respond to support requests.
• To detect and prevent abuse or security incidents.
• To comply with legal obligations.

4. Third-Party Services

We share data with the following third parties only as necessary to operate the Service:

• Clerk — authentication, user management, and subscription billing.
• Stripe — payment processing (via Clerk). Card details are handled directly by Stripe and are never stored by us.
• Neon — database hosting for your workout data.
• Cloudinary — image storage and delivery.
• Anthropic — AI workout generation (prompts sent to their API; no personal data is included).

We do not sell your personal data to any third party.

5. Cookies

We use essential cookies required for authentication and core functionality. You can manage cookie preferences via our cookie banner or your browser settings.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data; object to or restrict processing; and data portability. To exercise these rights, email privacy@workouteditor.app.

If you are in the EU/EEA, you have the right to lodge a complaint with your local data protection authority.

8. Security

We use industry-standard security measures to protect your data. However, no method of transmission over the internet is 100% secure.

9. Children

The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date.