Legal

Privacy Policy

Effective date: July 16, 2026. These policy is a standard template adopted by TipFit and may be updated; material changes will be posted on this page.

1. What we collect

Account data: email address and password (handled by our authentication provider, Supabase; we never see your password in plain text). Fitness data you enter: your onboarding answers (age, sex, height, weight, goals, injury flags), workout logs, body-weight entries, and food logs. This is health-adjacent data — we treat it with corresponding care. Payments: processed entirely by Paddle.com as merchant of record; we never receive or store your card details. Technical basics: standard server logs from our hosting provider (Cloudflare).

2. How we use it

Solely to run the Service: generating and adjusting your training plan, computing nutrition targets, syncing your data across devices, and providing support. We do not sell your data, and we do not use your fitness data for advertising.

3. Where it lives

Your data is stored in our database (Supabase, encrypted at rest) with row-level security so only your authenticated account can read your records. Data you enter while signed out stays on your device only.

4. Third parties we rely on

Supabase (accounts and database), Paddle (payments, as merchant of record), Printful (merchandise fulfillment — receives your shipping address for orders), Cloudflare (hosting), and TikTok (embedded videos on some pages — loading an embed is subject to TikTok's own privacy policy).

5. Your rights

You can access your data in the app at any time. To export or permanently delete your account and all associated data, email [email protected] and we will complete the request within 30 days. Deleting your account is irreversible.

6. Cookies and local storage

We use browser local storage to keep you signed in and to save app data on your device. We do not run third-party advertising or tracking cookies.

7. Children

The Service is for adults 18+. We do not knowingly collect data from anyone under 18; if you believe a minor has created an account, contact us and we will delete it.

8. Contact

Privacy questions: [email protected].