Privacy Policy

1. Overview

The Higher Up Plan ("we", "our", or "the App") is an AI-powered fitness tracking application developed and operated by Higher UP Fitness. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the App, you agree to the practices described here.

2. Information We Collect

Account Information

When you create an account we collect your name, email address, and authentication credentials. Account management is handled by Clerk, Inc. (clerk.com). We do not store your raw password.

Fitness & Training Data

We store the workout sessions, exercises, sets, repetitions, and weights you log in the App. This data is used to personalise your AI-generated strength programs and progressive overload recommendations.

Body Composition Data

If you use the In-Body Scan feature, we collect the measurements you enter (weight, height, body fat percentage, muscle mass, and similar metrics). This data is stored securely and used solely to personalise your training and nutrition guidance.

Nutrition Data

Food items, meal descriptions, calorie estimates, and macro-nutrient logs you enter are stored to provide daily summaries and AI-estimated nutritional analysis.

Payment Information

Premium subscription payments are processed by our payment providers — Stripe, Inc. (stripe.com) on the web, and Google Play Billing / RevenueCat on Android. We do not store full card numbers or payment credentials on our servers. We retain subscription status and billing dates.

Usage & Technical Data

We collect standard server logs including IP addresses, device type, operating system version, and crash reports to diagnose issues and improve performance.

3. How We Use Your Information

• To deliver and personalise the App's core features (workout logging, AI coaching, nutrition tracking).
• To generate AI-powered strength programs, fatigue analysis, and exercise targeting using your logged training data.
• To process and manage Premium subscriptions.
• To respond to support requests.
• To detect and prevent fraud, abuse, and technical errors.
• To comply with applicable laws and legal obligations.

We do not sell your personal data to third parties. We do not use your fitness or body composition data for advertising purposes.

4. Artificial Intelligence Features

The App uses AI models to generate workout plans, analyse muscle fatigue, recommend exercises (Xtra Strength Targeting), and estimate nutritional content. Your anonymised training data may be used to improve the quality of these models. You may opt out of model-improvement data use by contacting us at the address below.

5. Data Sharing

We share data only with the service providers necessary to operate the App:

• Clerk — authentication and identity management.
• Stripe — payment processing and subscription management (web).
• Google Play Billing / RevenueCat — subscription processing and management (Android).
• Replit — cloud infrastructure and hosting.

Each provider operates under its own privacy policy and data processing agreement. We do not share your data with any other third parties without your explicit consent, unless required by law.

6. Data Retention

We retain your account and fitness data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required for legal or fraud-prevention purposes. You can request deletion at any time — see our Account Deletion page.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Object to or restrict certain processing.
• Export your data in a portable format.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email us at privacy@higherup.app. We will respond within 30 days.

8. Children's Privacy

The App is intended for users aged 16 and older. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

9. Security

We implement industry-standard technical and organisational security measures including encrypted data transmission (TLS), database encryption at rest, and access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we are committed to protecting your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice at least 14 days before the change takes effect. Continued use of the App after the effective date constitutes acceptance of the revised policy.

11. Contact Us

If you have questions, complaints, or requests regarding this Privacy Policy or your personal data, contact us at: