Section 1
Data We Collect
Account & Profile Data
When you create an account or complete onboarding, we collect:
Email address — used for authentication via Firebase Auth.
Personal profile: name, age, gender, height, weight, fitness goals, experience level, injury status, dietary preferences, and preferred language — stored in your private cloud account on Google Firestore.
Health & Fitness Data
Mola stores your fitness activity data in your secure, private cloud account to enable AI personalization and progress tracking:
All of this data is stored in Google Firestore, a cloud database, and is accessible only by your authenticated account. No other user or third party can read your data.
Device & Technical Data
When you use the app, we may automatically collect device model, OS version, app version, and crash/stability data to maintain app performance.
Location Data (GPS)
If you use GPS-based cardio tracking, we access your device's precise location. Location is used solely for calculating distance, pace, and route data during recorded sessions. This requires ACCESS_FINE_LOCATION and FOREGROUND_SERVICE_LOCATION permissions on Android.
You may deny or revoke location permission at any time in your device settings. Core app functionality remains available without location access.
Camera & Photos
Nutrition Scan and Form Analysis (Pro) features require camera access. Images are processed via our secure AI pipeline for immediate feedback. Images are not permanently stored on our servers.
Section 2
How We Use Your Data
| Purpose | Data Used |
|---|---|
| Account creation & authentication | Email, Firebase UID |
| AI-personalized workout & meal plans | Profile, workout history |
| Syncing fitness history across sessions | All fitness logs |
| Nutrition tracking & meal planning | Nutrition logs, food database |
| GPS cardio session tracking | Precise device location |
| Nutrition label & form analysis | Camera images (temporary) |
| Serving advertisements (free tier) | Device advertising ID, usage data |
| App stability & crash monitoring | Technical device data |
| Processing shop orders (future) | Name, shipping address, order details |
Section 3
AI Processing — Google Gemini
Mola uses Google Gemini (via Google Cloud Functions) to generate personalized workout programs, meal plans, mobility routines, and exercise alternatives.
This data is processed in-transit and used solely to return your personalized protocol. We do not use your data to train AI models.
Google's AI data handling is governed by Google's Cloud Services Privacy Notice.
Section 4
Advertising (Free Tier)
The free tier of Mola is supported by ads served through Google AdMob. AdMob may collect:
This data is used by Google to show relevant advertisements and measure ad performance. To opt out of personalized ads on Android: Settings → Google → Ads → "Opt out of Ads Personalization".
Advertising data is governed by Google's Privacy Policy.
Section 5
In-App Purchases (Pro Membership)
Pro Membership purchases are processed entirely through the Google Play Store or Apple App Store. We do not collect or store any payment card information. We receive only a confirmation of your subscription status from the respective store to unlock Pro features.
Section 5b
Shop & Print-on-Demand (Future Feature)
Mola Fitness has a planned in-app merchandise shop powered by a third-party Print-on-Demand (POD) fulfillment service. When the shop launches, we will collect the following additional data solely to process and fulfill your orders:
Full name · Shipping address (street, city, state/province, ZIP/postal code, country) · Email address (for order confirmation and tracking) · Items and quantities ordered
Third-Party Fulfillment
Your name and shipping address will be shared with our Print-on-Demand fulfillment provider solely for the purpose of manufacturing and delivering your order. We will disclose the specific provider when the shop is launched. The fulfillment provider's privacy practices are governed by their own privacy policy.
Payment Processing
Payment for physical goods will be processed by a third-party payment processor (such as Stripe or the respective app store). We do not collect or store your payment card number, CVV, or full billing details. We receive only an order confirmation and shipping details.
Order Data Retention
Order records (name, address, items purchased) are retained for a minimum of 3 years for legal, tax, and accounting compliance requirements, even after account deletion. You may request a copy of your order history by emailing molafitness.dev@gmail.com.
Section 6
Firebase Infrastructure
Our backend is powered by Google Firebase, including:
| Service | Purpose |
|---|---|
| Firebase Authentication | Manages login sessions and user identity |
| Cloud Firestore | Stores your profile, workouts, logs, and nutrition data — encrypted, UID-isolated |
| Firebase Cloud Functions | Securely routes AI requests to Google Gemini without exposing API keys to the client |
| Firebase Hosting | Serves the app's web assets |
Firebase's data handling is governed by Google's Firebase Privacy information. Your Firestore data is stored in the us-central region. Users in the EU should be aware their data is stored in the United States.
Section 8
Data Retention
| Data Type | Retention Period |
|---|---|
| Account & profile | Until account deletion request |
| Workout & fitness logs | Until account deletion request |
| Nutrition & water logs | Until account deletion request |
| Shop order records (name, address, items) | Minimum 3 years (legal/tax compliance) |
| Ad tracking data | Managed by Google AdMob (see their policy) |
You may request deletion of your data at any time by emailing molafitness.dev@gmail.com with the subject "Data Deletion Request." We will process your request within 30 days.
Section 9
Your Rights
All Users
Access — Request a copy of your stored personal data.
Deletion — Request permanent deletion of your account and all associated data.
Correction — Update your profile data at any time within the app.
European Users (GDPR)
If you are in the EEA, UK, or Switzerland, you have additional rights:
Legal basis for processing: contractual necessity (to provide the service) and legitimate interests (app stability and improvement).
California Users (CCPA)
California residents have the right to know what personal information we collect and to request its deletion. We do not sell personal information as defined under CCPA.
To exercise any of these rights, contact: molafitness.dev@gmail.com
Section 10
Children's Privacy
Mola Fitness is intended for users who are 18 years of age or older. We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided us with personal information, please contact us immediately and we will delete the data.
Section 11
Security
We implement industry-standard security measures to protect your data:
Section 12
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you via in-app notification or email. The "Effective Date" at the top of this page reflects the most recent update.
Section 13
Contact Us
For questions, concerns, or data requests regarding your privacy:
Email: molafitness.dev@gmail.com
This policy applies to the Mola Fitness mobile application available on the Google Play Store and Apple App Store, and the Mola Fitness website.