1. Data controller
Puckett's custom sporting goods, located in the United States, is the data controller for personal information processed to provide Body Blueprint. Contact puckettscse@gmail.com with privacy questions or rights requests.
2. Information and purposes
- Account information: email, account identifiers and authentication information are used for account creation, sign-in, password recovery and securing access.
- Fitness information: age, sex if supplied, height, weight, activity, goals, training style, limitations, soreness, photo-analysis results, check-ins, workout logs and coaching preferences personalize routines, nutrition, recovery and progress tracking.
- Body photo: when you choose analysis, your cropped image and relevant measurements are sent through the Lovable AI service for processing. Body Blueprint does not save the uploaded onboarding image to your profile; it saves the analysis you choose to submit. Processing providers may maintain operational records subject to their own retention practices; this is not a promise of zero provider retention.
- Progress photos: check-in photos remain in browser storage on your device, rather than being uploaded to the application's database.
- Coach narration: coaching text and selected voice/tone are sent to the AI speech service to generate audio.
- Technical information: usage/error records, device/browser information, IP addresses and request identifiers may be processed to operate the service, investigate errors and prevent abuse.
- Purchase records: provider customer, transaction and subscription identifiers, plan status and payment-event audit records are used to verify access, manage subscriptions and prevent duplicate purchases or fraud. Paddle processes checkout and payment information under its own privacy notice.
- Support messages: information you provide when contacting us is used to respond and resolve requests.
3. Legal bases
Where applicable, account and service processing relies on performance of our contract; security, diagnostics and support rely on legitimate interests; required accounting or regulatory records rely on legal obligations. Optional photo processing and any consent-required processing rely on consent where required. Fitness details may constitute health data; where applicable, their processing requires explicit consent or another lawful special-category condition. This notice does not itself constitute consent to processing; any legally required consent must be obtained separately. We do not use your fitness data for marketing in the current app.
4. Sharing and international processing
We share necessary information with service providers for hosting, account authentication, data storage, AI analysis, speech generation, operational diagnostics and support. The app uses Lovable Cloud and Lovable AI services. Paddle receives information for product sales, subscription management, payments, tax compliance and invoicing. Information may also be shared with professional legal/accounting advisers and authorities where legally required.
Service providers may process data outside your country. If UK/EEA transfer rules apply, international transfers require appropriate safeguards, such as adequacy decisions or Standard Contractual Clauses, as applicable. Contact us for information about the processing locations and safeguards applicable to your data.
5. Payment records, retention and deletion
Monthly and Yearly purchases are manually paid one-time periods, without automatic renewal or recurring payments; Lifetime is also a one-time purchase. We retain verified purchase identifiers, payment completion times and paid-period expiry dates to grant and end Premium access. Dispute identifiers, adjustment actions and payment-event audit records are processed to track disputes and enforce access: Premium tied to a purchase is revoked immediately when Paddle reports that a chargeback has opened, without waiting for the final outcome, even if the customer may later win. A later reversal does not automatically restore that purchase's Premium access. A warning of a possible future chargeback alone does not end access. Any approved refund, including a partial refund, also revokes Premium. Ordinary paid-period expiry still applies. Any applicable taxes and total charges are disclosed before payment; there are no hidden or unknown fees.
Profile details, analysis results, workout logs and check-ins are retained while your account exists to provide your saved plan and history. Premium expiry does not delete your account or free-feature records. Account deletion removes these application records; any legacy recurring billing is verified canceled first. Necessary legal, security, transaction or dispute records may be retained as required by law or to resolve disputes; they are deleted or anonymized when no longer needed. Provider logs and backups may remain according to provider retention schedules.
Deleting an account removes its check-in photos on the device used for deletion. Photos stored on other devices must be removed on those devices or by clearing that site's browser data.
6. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to processing, and withdraw consent without affecting prior lawful processing. Contact puckettscse@gmail.com. You may complain to your local supervisory authority. If GDPR applies, we respond to rights requests within one month, subject to legally permitted extensions. We may verify your identity before fulfilling a request.
7. Security
We are committed to appropriate technical and organizational safeguards, including encrypted transport, authentication and owner-scoped access controls. No online service can guarantee absolute security. Keep your sign-in details private, and consider shared-device access when storing progress photos.
8. Cookies and browser storage
The application uses essential browser storage for authentication, checkout references, narration preferences and device-local progress photos. Payment and sign-in providers may use their own essential cookies when their services open. No optional analytics or marketing cookie controls are implemented in the current app. You can manage cookies and stored data in your browser, though blocking essential storage can prevent sign-in or checkout and clearing storage removes device-local photos. Any future optional tracking must be disclosed and obtain consent where required.
9. Younger users, photo consent and updates
We ask for age in onboarding before any photo step. Users under 14 cannot use the photo feature, even with parental consent, and continue onboarding without a photo. For users aged 14–17, a parent or legal guardian must consent before the photo feature becomes available and explicitly consent to photo and fitness data processing before analysis. Users aged 18 and older may provide explicit consent themselves. The processing consent checkbox is not preselected; photo analysis remains optional. These consent statements cover processing the photo and fitness details to produce AI analysis and personalize fitness guidance as described in this notice.
Younger users should use the service with a parent or guardian and appropriate exercise supervision. A guardian may contact puckettscse@gmail.com about a child's data. Any additional parental authorization or explicit consent required by local law must be obtained before processing; these photo-feature rules do not replace those requirements. We may update this notice; the date above identifies the latest revision.