Privacy Policy

1. Introduction & Overview

Welcome to PhysiqueIQ AI ("PhysiqueIQ," "we," "us," or "our"). We develop and operate the mobile application PhysiqueIQ AI Body Rater (Package ID: com.physiqueiq.app), available on Google Play and Apple App Store.

We respect your privacy and are committed to protecting the personal data of all users. This Privacy Policy explains how our application collects, uses, handles, and discloses your information in strict compliance with the Google Play Developer Distribution Agreement, Apple App Store Review Guidelines, the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA/CPRA).

2. Our Zero-Cloud-Photo Storage Policy (Ephemeral Processing)

PhysiqueIQ AI is built on a Local-First and Ephemeral Cloud architecture:

• In-Memory Analysis: When you submit front and side photos for physique rating, the images are securely transmitted via encrypted TLS 1.3 to our stateless Edge Function for real-time visual analysis by our AI vision pipeline.
• Zero Cloud Persistence: Once the visual evaluation is generated, the photo data is discarded immediately from server RAM. We do not store, archive, or retain your photos in cloud buckets or remote servers.
• Local Device Storage: For your personal progress tracking, photos and generated reports are stored locally on your device in your private app storage directory. You retain complete ownership and control.
• No Model Training: Your private physique photographs are never used to train public machine learning or foundation models.

3. On-Device Body Pose Verification

Before any network request is initiated, PhysiqueIQ AI uses on-device computer vision (Google ML Kit Pose Detection) directly on your phone's processor to verify that your photo contains a visible human body and proper framing. This initial verification step runs 100% locally on your smartphone and never leaves your device.

4. Information We Collect

We collect only the minimum information necessary to provide the service and secure your account:

A. Account & Authentication Data

• Google Sign-In: If you sign in via Google, we receive your verified email address, unique Google User ID, and display name to create and authenticate your account.
• Anonymous / Guest Mode: If you use the app as a guest, an anonymous device identifier is created locally to manage your free scan session.

B. Numerical Scores & Report Metrics

• Physique Scores: Overall physique ratings (1.0–10.0), muscle breakdown scores (chest, shoulders, back, arms, legs, glutes), estimated body fat ranges, and workout focus areas.
• User Notes: Any workout or bodyweight notes you voluntarily add to past scan entries in your personal history feed.

C. Subscription & Transaction Data

• We process in-app subscriptions and lifetime unlocks through RevenueCat, Google Play Billing, and Apple In-App Purchase. We receive subscription status, active entitlements, and expiration dates. We never receive or store your credit card or banking details.

D. Diagnostic & Performance Data

• Device model, operating system version, app version, and anonymized crash logs to troubleshoot errors and maintain app reliability.

5. Third-Party Service Providers

We integrate with trusted third-party SDKs that process data in accordance with their respective privacy policies:

• Supabase (Authentication & Database): Powers user authentication, session security, and encrypted storage of score history. (Supabase Privacy Policy)
• RevenueCat (Subscription Management): Verifies in-app purchases, receipt validation, and subscription lifecycle. (RevenueCat Privacy Policy)
• Google AdMob (Advertising): Serves optional rewarded video ads for users choosing to unlock free Quick Estimate previews. AdMob may collect advertising identifiers (GAID/IDFA) in accordance with Google's Advertising Policies. (Google Ads Privacy)
• Google ML Kit: On-device pose and body detection library running locally on your hardware.

6. Health, Fitness & AI Coaching Disclaimer

7. Device Permissions Required

PhysiqueIQ AI requests the following explicit device permissions:

• Camera (android.permission.CAMERA): Required only when taking real-time front or side photos within the app for physique scoring.
• Photo Gallery / Media (READ_MEDIA_IMAGES): Required to select existing workout or progress photos from your device gallery.
• Internet (INTERNET): Required to perform cloud AI scoring, synchronize subscription entitlements, and authenticate your account.

8. Data Retention and Account Deletion

We retain your account profile and numerical scan metrics only for as long as your account remains active. You have the right to request deletion of all associated data at any time:

• In-App Deletion: Navigate to Settings → Account → Delete Account within the app to immediately purge your account and database records.
• Web Portal: Visit our dedicated Account & Data Deletion Page or email support@physiqueiq.app. Upon verification, all user records are permanently deleted within 7 days.

9. Children's Privacy (COPPA Compliance)

PhysiqueIQ AI is strictly intended for individuals aged 13 years and older (or 16 in certain European jurisdictions). We do not knowingly collect or solicit personal data from children under the age of 13. If we discover that a child under 13 has provided personal data, we will immediately delete such information.

10. Your Rights Under GDPR & CCPA/CPRA

Depending on your jurisdiction (e.g., European Union, United Kingdom, California), you possess specific data protection rights:

• Right to Access: Request a copy of all personal metrics and account records we hold about you.
• Right to Rectification: Request correction of inaccurate personal information.
• Right to Erasure ("Right to be Forgotten"): Request immediate permanent deletion of your account and data.
• Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
• Non-Discrimination: We will never discriminate against you for exercising any of your privacy rights.

11. Security Measures

We implement industry-standard technical and organizational security controls, including TLS 1.3 encryption in transit, strict database Row Level Security (RLS) policies ensuring users can only access their own data, and strict credential isolation using managed environment variables.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact our Data Protection Team:

• Email: support@physiqueiq.app
• App Name: PhysiqueIQ AI Body Rater
• Developer: PhysiqueIQ AI Team
• Website: https://physiqueiq.app