DRAFT — NOT REVIEWED BY COUNSEL. Do not ship as-is. This covers the disclosures Apple requires and describes what Jimmie actually does today, so a lawyer has something concrete to review rather than a blank template. Delete this banner once reviewed.

Privacy Policy

Jimmie is a workout tracking application. This policy explains what we collect, why, where it is stored, and how you can remove it.

What we collect

• Account information — your email address, and a generated handle. If you sign in with Apple or Google, we receive the identifier that provider gives us; we never see your password.
• Fitness data you enter — your exercises, workouts, workout history, sets, weights, durations, gyms, and any notes you add.
• Media you attach — photos and videos you add to an exercise. These are stored on your device, not on our servers.
• Subscription status — whether you have an active subscription, its renewal state, and an identifier linking your account to the purchase. We do not receive or store your payment details; those stay with Apple or Google.

We do not collect location, contacts, health-app data, or advertising identifiers.

Where your data is stored

Account and fitness data is stored in MongoDB Atlas, encrypted at rest by the database engine (AES-256). Data in transit is encrypted with HTTPS/TLS.

Exercise photos and videos remain in your device’s app storage and are not uploaded to us.

Third parties we share data with

We do not sell your data, and we do not share it with anyone for advertising. We use a small number of processors to run the service:

• Firebase Authentication (Google) — sign-in and account identity.
• RevenueCat — subscription state, on top of Apple’s and Google’s billing.
• Render and MongoDB Atlas — application hosting and the database.

AI features

Jimmie’s AI features send the content of your request — which may include your exercise and workout data — to Anthropic for processing. Anthropic’s commercial API operates under a zero-retention policy: that data is not stored after the response and is not used to train models.

If you supply your own API key, requests go to your provider account under that provider’s terms instead of ours.

AI features are not a substitute for professional fitness or medical advice.

Your choices

• Delete everything. Settings → Delete Account removes your account and all associated data — exercises, workouts, history, gyms, and subscription records — from our systems. This is immediate and cannot be undone.
• Cancel your subscription at any time through your App Store or Play Store account. Cancelling stops renewal; it does not delete your data.
• Discoverability is off by default. Nothing about your account is visible to other users unless you turn it on.

Analytics

We do not currently run third-party analytics or advertising SDKs. If that changes, this policy will be updated to say what is collected and by whom before the change ships.

Children

Jimmie is not directed at children under 13, and we do not knowingly collect their data.

Changes

If this policy changes materially, we will update the date at the top and, for significant changes, notify you in the app.

Contact

Questions about this policy: [ADD CONTACT EMAIL]

Last updated: 27 July 2026