Data Safety

Apex Fitness by Zero Deficit LLC

Last Updated: April 1, 2026

Overview

This page describes what data Apex Fitness collects, how it's used, and whether it's shared with third parties. This information is provided to comply with Apple App Store and Google Play Store data safety requirements.

Data Collected

Data Type	Collected	Shared	Purpose
Email Address	Collected	Not Shared	Account creation, login, password reset
Name	Collected	Not Shared	Display in app profile
Password	Collected	Not Shared	Authentication (stored as bcrypt hash, never in plaintext)
Body Measurements	Collected	Not Shared	Calculate BMR, TDEE, body fat %, and nutrition targets
Workout Logs	Collected	Not Shared	Track exercise progress, progressive overload, PRs
Food Diary Entries	Collected	Not Shared	Track daily nutrition and macro intake
Health & Fitness Data	Collected	Not Shared	Body composition trends, weight tracking, workout streaks
Purchase History	Collected	Not Shared	Manage subscription status (Pro/Elite tiers)
Push Notification Token	Collected	Not Shared	Deliver optional workout reminders (opt-in only)
Analytics (PostHog)	Collected	Not Shared	App usage analytics to improve the experience

Data NOT Collected

Data Type	Status
Precise Location	Not Collected
Contacts	Not Collected
Photos / Camera	Not Collected
Microphone / Audio	Not Collected
Financial Information	Not Collected
Browsing History	Not Collected

Third-Party Services

OpenAI — Powers AI workout editor and meal plan generator. Prompts are sent without personally identifiable information.
Stripe — Processes web payments. Payment details are handled directly by Stripe and never stored on our servers.
Apple In-App Purchases — Processes iOS payments. Handled entirely by Apple.
Resend — Sends transactional emails (password reset, welcome). Only your email address is shared.
PostHog — Anonymous usage analytics. No personally identifiable data is sent.

Data Security

All data transmitted over HTTPS (TLS 1.3)
Passwords hashed with bcrypt (never stored in plaintext)
JWT tokens for session authentication with expiration
MongoDB access restricted to authenticated connections only

Data Deletion

You can delete your data at any time:

Delete All Data (keep account): Settings > Danger Zone > Delete My Data
Delete Account (and all data): Settings > Danger Zone > Delete Account
Web form: apexfitness.ai/delete-account

All personal data is permanently removed within 30 days of deletion request.

Children's Privacy

Apex Fitness is not intended for users under the age of 16. We do not knowingly collect data from minors.

Contact

Data Protection Officer: privacy@apexfitness.ai

General Support: support@apexfitness.ai