Account information: Your email address and display name, provided when you sign up or sign in. We also store an onboarding-completed flag and your theme preference (light/dark mode) on your device.

Profile information: A short bio, profile photo, and accent color that you choose to add to your profile.

Workout data: Workout type, duration, distance, calories burned, optional notes, and the date of each activity you log manually or sync from Strava.

Social & buddy data: Your fitness buddy pair (team name, partner's email and name, shared streaks, and combined workout totals), friend connections, buddy requests you send or receive, and reactions/comments you leave on workouts.

Goals & preferences: Your primary fitness goal, preferred sports, self-reported fitness level, target workouts per week, and any notes you add (which may include injury or limitation context).

Recovery tokens: The number of recovery tokens you hold and their usage history.

Strava connection data: When you link your Strava account, we store your Strava athlete ID, athlete display name, and the OAuth tokens needed to import your activities.

Subscription data: Your premium subscription status and billing relationship with Stripe (we do not store your full card number).

We collect this information to provide the core features of AsOne:

• To create and manage your account and authenticate you.
• To log workouts and calculate personal and team streaks.
• To connect you with a buddy and friends for accountability and motivation.
• To display leaderboards, activity feeds, and reactions.
• To sync activities automatically from Strava when you choose to connect it.
• To power AI coaching and workout plan generation for premium subscribers.
• To process premium subscription payments and manage your subscription.
• To maintain the security and integrity of the platform.

Your data is stored securely on Base44's managed cloud infrastructure, which hosts our database, authentication, and application backend. Access to your data is protected by row-level security policies so that only you (and, where relevant, your connected buddy or friends) can view your records. Strava OAuth tokens are stored so we can keep your activities synced without requiring you to re-authorize repeatedly.

With your buddy & friends: When you form a buddy pair or friendship, your partner can see your workouts, streaks, and activity in the feed. Team streaks and combined stats appear on the leaderboard to other AsOne users.

With Strava: If you connect Strava, we retrieve your activity data from Strava. We do not publish your AsOne workout data back to Strava.

With Stripe: Payment information is processed by Stripe. We receive your subscription status but do not see or store your full card details.

With service providers: We use Base44 for hosting and data storage, and Google Calendar for premium calendar-integration features. These providers process data only as needed to deliver our services.

We do not sell your personal data to any third party. We only share data when required by law or to protect the rights, property, or safety of AsOne and its users.

• Base44 — Application hosting, database, and authentication.
• Strava — Optional activity tracking integration via OAuth.
• Stripe — Payment processing for AsOne Coach Premium subscriptions.
• Google Calendar — Optional premium feature to sync workouts to your calendar.

Each third-party service has its own privacy policy governing how it handles your data. We encourage you to review those policies.

You can delete your account and all associated data at any time from the app: open the Profile tab, tap the settings icon, and select Delete Account. This permanently removes your workouts, buddy pairs, friendships, goals, recovery tokens, Strava connection, and profile information. The action cannot be undone.

To disconnect Strava without deleting your account, use the Strava settings in your Profile. You can also revoke AsOne's access directly from your Strava account settings.

We retain your data for as long as your account is active. When you delete your account, your data is removed from our active database. Some limited information may remain in encrypted backups for a short period before it is permanently purged.

• Choose whether to connect Strava — it's entirely optional.
• Control what profile information and bio you share.
• Choose your buddy and friends; you can dissolve a buddy pair or remove a friend at any time.
• Delete your account and all associated data whenever you wish.

AsOne is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

We may update this Privacy Policy from time to time. When we do, we'll revise the "last updated" date at the top. We encourage you to review this page periodically to stay informed.

If you have questions or concerns about this Privacy Policy or how your data is handled, please contact us at:

connect@asonefit.com