Privacy Policy

Section 1

Data We Collect

Account & Profile Data

When you create an account or complete onboarding, we collect:

Email address — used for authentication via Firebase Auth.

Personal profile: name, age, gender, height, weight, fitness goals, experience level, injury status, dietary preferences, and preferred language — stored in your private cloud account on Google Firestore.

Health & Fitness Data

Mola stores your fitness activity data in your secure, private cloud account to enable AI personalization and progress tracking:

All of this data is stored in Google Firestore, a cloud database, and is accessible only by your authenticated account. No other user or third party can read your data.

Device & Technical Data

When you use the app, we may automatically collect device model, OS version, app version, and crash/stability data to maintain app performance.

Location Data (GPS)

If you use GPS-based cardio tracking, we access your device's precise location. Location is used solely for calculating distance, pace, and route data during recorded sessions. This requires ACCESS_FINE_LOCATION and FOREGROUND_SERVICE_LOCATION permissions on Android.

You may deny or revoke location permission at any time in your device settings. Core app functionality remains available without location access.

Camera & Photos

Nutrition Scan and Form Analysis (Pro) features require camera access. Images are processed via our secure AI pipeline for immediate feedback. Images are not permanently stored on our servers.

Wearable Biometrics (Apple HealthKit & Google Health Connect)

If you choose to sync wearable biometrics, Mola accesses Heart Rate Variability (HRV), resting heart rate, and sleep duration directly from Apple HealthKit (iOS) or Google Health Connect (Android). This biometric data is accessed locally on your device and processed in ephemeral memory solely to calculate daily training volume autoregulation adjustments. Your biometric data is never transmitted to advertising networks, brokers, or external marketing platforms.

User Feedback & Support Submissions

If you submit feedback or a support request through the in-app "Contact Support" form, we collect the text of your message, your user ID, email address, and the app version. This data is stored in a secure Firestore collection and is used solely to respond to your inquiry and improve the Service.

Section 2

How We Use Your Data

Section 3

AI Processing — Google Gemini

Mola uses Google Gemini (via Google Cloud Functions) to generate personalized workout programs, meal plans, mobility routines, and exercise alternatives.

This data is processed in-transit and used solely to return your personalized protocol. We do not use your data to train AI models.

Google's AI data handling is governed by Google's Cloud Services Privacy Notice.

Section 4

Advertising (Free Tier)

The free tier of Mola is supported by ads served through third-party ad networks. AdMob may collect:

This data is used by Google to show relevant advertisements, measure ad performance, and identify devices based on information transmitted automatically. For more details on how Google collects, uses, and processes end-user data through our integration, please review How Google uses information from sites or apps that use our services.

Advertising data is governed by Google's Privacy Policy.

Section 5

In-App Purchases

All in-app purchases — including Mola Pro subscriptions (Monthly, Yearly) and single-use AI analysis credits (Form Analysis, Physique Analysis) — are processed entirely through the Google Play Store or Apple App Store. We do not collect or store any payment card information. Prices are displayed in your local currency at checkout and may vary by region.

RevenueCat Subscription Management

Subscription management and purchase verification are facilitated by RevenueCat, Inc., a third-party subscription infrastructure provider. When you make a purchase or your subscription status is checked, RevenueCat receives:

This data is used solely to verify your entitlement to Pro features and to enable cross-platform subscription syncing (e.g., a purchase made on iOS is recognized on Android). RevenueCat does not receive your name, email, fitness data, or health information.

RevenueCat's data handling is governed by their Privacy Policy.

Section 5b

Shop & Print-on-Demand (Future Feature)

Mola Fitness has a planned in-app merchandise shop powered by a third-party Print-on-Demand (POD) fulfillment service. When the shop launches, we will collect the following additional data solely to process and fulfill your orders:

Third-Party Fulfillment

Your name and shipping address will be shared with our Print-on-Demand fulfillment provider solely for the purpose of manufacturing and delivering your order. We will disclose the specific provider when the shop is launched. The fulfillment provider's privacy practices are governed by their own privacy policy.

Payment Processing

Payment for physical goods will be processed by a third-party payment processor (such as Stripe or the respective app store). We do not collect or store your payment card number, CVV, or full billing details. We receive only an order confirmation and shipping details.

Order Data Retention

Order records (name, address, items purchased) are retained for a minimum of 3 years for legal, tax, and accounting compliance requirements, even after account deletion. You may request a copy of your order history by emailing fitcraftsdev@gmail.com.

Section 6

Firebase Infrastructure

Our backend is powered by Google Firebase, including:

Firebase's data handling is governed by Google's Firebase Privacy information. Your Firestore data is stored in the us-central region. Users in the EU should be aware their data is stored in the United States.

Section 7

Data Sharing & The Zero Health Data Reselling Guarantee

We share data only with the essential technology infrastructure providers required to operate the application:

Section 8

Data Retention

You may request deletion of your data at any time via the in-app 1-Tap Account Deletion button in Settings, or by emailing fitcraftsdev@gmail.com with the subject "Data Deletion Request." We process written requests within 30 days.

Section 9

Your Rights & 1-Tap Total Self-Destruct

All Users — Right to be Forgotten

1-Tap Permanent Account Deletion: You have the absolute right to purge your data. At any time, you can navigate to Profile → Settings in the mobile app and select "Delete Account". This permanently deletes your Firebase Authentication record, your Firestore profile, all workout plans, weight logs, and biometric entries.

Access & Export: Request a complete copy of your stored training data, or export your workouts via in-app data tools.
Correction: Update or modify your profile, body weight, or training goals directly within the application.

European Users (GDPR)

If you are in the EEA, UK, or Switzerland, you have full GDPR rights:

Legal basis for processing: contractual necessity (to generate and log training programs) and legitimate interests (maintaining system stability).

U.S. State Privacy Rights (Texas TDPSA, California CCPA/CPRA, Virginia VCDPA)

Under the Texas Data Privacy and Security Act (TDPSA), California Consumer Privacy Act (CCPA/CPRA), and related state statutes, you have the right to know what personal data is collected, delete your data, and opt out of the sale or sharing of personal information. We expressly confirm that we do not sell or share personal health or biometric data for monetary or other valuable consideration.

To exercise any of these rights, use the in-app deletion button or contact: fitcraftsdev@gmail.com

Section 10

Children's Privacy (Strict 18+ Policy)

In compliance with the Texas Securing Children Online through Parental Empowerment (SCOPE) Act and the Texas App Store Accountability Act (TASAA), Mola Fitness is strictly restricted to users who are 18 years of age or older. We do not permit users under 18 and do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us immediately for deletion.

Section 11

Security & Regulatory Classification

We implement enterprise-grade security standards across our infrastructure:

Consumer Fitness Software Disclosure (Not a HIPAA Covered Entity)

Fitcrafts LLC is an independent app and web developer building software tools we use ourselves and sharing them with the world. Mola Fitness is an athletic performance, exercise tracking, and consumer wellness platform. Mola is not a healthcare provider, clinical diagnostic tool, hospital, or Covered Entity under the Health Insurance Portability and Accountability Act (HIPAA). The application does not provide medical diagnosis, clinical rehabilitation, or physical therapy treatment. Information provided in the app is for athletic conditioning and educational purposes only. Always consult a licensed physician or physical therapist before beginning any strenuous training regimen.

Section 12

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via in-app notification or email. The "Effective Date" at the top of this page reflects the most recent update.

Section 13

Contact Us

For questions, concerns, or data requests regarding your privacy:

This policy applies to the Mola Fitness mobile application available on the Google Play Store and Apple App Store, and the Mola Fitness website.