MuscleCuties Privacy Policy

Publication draft: This page requires operator approval and deployment review before it becomes the public policy.

1. Scope & Age Eligibility

During profile setup, this version requires a date of birth showing an age of at least 18. Publication TODO: Confirm the intended minimum age and any jurisdiction-specific age requirements before final approval. App guidance is informational wellness guidance only and does not diagnose, treat, or rehabilitate medical conditions.

2. What Is Stored and How It Is Protected

The service processes your account profile, cycle history, symptoms, workouts, meals, and progress photos. PostgreSQL and private object storage are first-party data services. AWS encryption and retention configuration is still subject to operational verification.

• PostgreSQL: Account and health records are stored in first-party PostgreSQL. Access is intended to be account-scoped. The deployed database encryption settings have not been verified.
• Account Recovery & Synchronization: Your account is protected by industry-standard authentication (passwords hashed with PBKDF2/Argon2 or Sign in with Apple). Cloud synchronization allows you to seamlessly restore and manage your health and workout data across authorized sessions.
• Photos: Progress and meal photos are intended to use private Amazon S3 object storage and short-lived authenticated upload/download URLs. The deployed bucket privacy, encryption, and lifecycle settings have not been verified.
• Local Caching: For offline workout tracking at the gym, the app maintains an optional, encrypted local snapshot cache on your device. Local cached data is invalidated and wiped upon account logout or account deletion.
• Health Ecosystems: Apple Health integration is strictly optional and limited to read-only acquisition of daily step counts upon your explicit permission. MuscleCuties never writes back to HealthKit and never transmits HealthKit data to third parties. Health Connect and Whoop are not connected in this release.

3. Limited External Requests

The app supports these limited external requests. Network providers may also receive ordinary connection metadata, such as an IP address:

• Email Verification & Password Recovery: If you use email authentication, your normalized email address and temporary challenge fields are sent over HTTPS to our verification service. It does not receive your password or health records. A code is valid for 5 minutes; the service keeps its challenge record for the one-hour abuse-control lookback after expiry, then scheduled cleanup removes it. Anonymous aggregate send counters support a 24-hour lookback and are then removed by scheduled cleanup. The email provider processes the address and message for delivery and has its own retention period.
• Optional Online Food Search: If you search for foods online, generic food terms (e.g., "chicken breast") may be sent to USDA FoodData Central. Your personal diet logs, health stats, and identity are never included. Offline search is fully available without network access.
• Exercise Library: The app contains clients for Wger and ExerciseDB to fetch generic exercise catalog information and media. These requests do not need your cycle, weight, injury or workout logs.
• Apple Sign In: If you choose this option on iPhone, Apple handles the sign-in flow and can provide an Apple user identifier, email address and name to authenticate your account. Apple's service has its own privacy practices.
• User Feedback: If you tap "Send Feedback", the app prepares an email draft in your device's native mail composer that includes your profile name. A reply address and attachments are optional. You choose whether to send it; the receiving mailbox and your email provider handle anything you send.

4. Choices, Account Deletion & Rights

These account and data choices are available:

• In-App Account Deletion: The operator reports that account-deletion checks have been completed successfully. The in-app flow deletes the account and associated records handled by that flow. Retention in infrastructure backups and operational logs still needs confirmation; see the TODO list below.
• Data Retention & Backups: A specific AWS backup retention period and deployed encryption configuration have not been verified. Backup copies may retain data after account deletion until those copies expire or are otherwise removed.
• External Metadata Inquiries: To request deletion of any temporary email challenge metadata or support inquiries, contact deniska.petruk@icloud.com.

5. Retention, Service Providers & Contact

Retention periods for active records, backups, verification provider logs, and support correspondence depend on configured services and provider policies; current AWS backup and object lifecycle settings have not been verified. For questions or requests, contact Denis Petruk at deniska.petruk@icloud.com.