Privacy Policy

Effective date: November 8, 2026.

This policy describes how TUFF 90 handles personal information when you use our US adult fitness-tracking service. TUFF 90 is a general wellness app, not a healthcare provider or medical record service.

1. Information we collect

Account information includes your email address, account identifier, display name, sign-in provider and account settings. Intake information includes goals, experience, equipment, schedule, timezone, health-screen answers, medical-clearance responses and safety acknowledgments. Challenge information includes plans, cycle history, check-ins, notes, effort and confidence ratings, daily rule records, learning entries, reviews, graduation records and follow-up choices. You may optionally enter body weight, a custom water target or a calorie target; we do not calculate or recommend calorie targets.

Social information includes crew membership, sharing preferences, preset cheers, dismissed prompts and invitations, including recipient email addresses and delivery status. Technical information may include IP addresses, browser and device information, service logs and app usage events. Do not put unnecessary sensitive information about yourself or others in free-text entries.

2. How we use information

We use information to provide accounts, build and store your plan, track daily progress, preserve cycle history, present private reviews, support crews and invitations, apply safety safeguards, respond to requests, investigate abuse and maintain the service. Technical logs and usage analytics help us understand reliability and use. We do not use private learning entries, health answers, weight or calorie targets as crew content or for advertising.

3. Crew visibility and your choice

Crewmates can see your display name and, when progress sharing is on, your challenge day, whether all five rules are completed today, your weekly completion count, today's rule count and graduation flag. When sharing is off, those progress fields are hidden; your name and membership remain visible. Leaving a crew removes mutual crew visibility. Sharing does not make your profile public.

Crewmates cannot read your health answers, intake, weight, water amounts, calorie target, learning text, notes, ratings, detailed check-ins, workouts, reviews or private cycle history. Current crew members can manage crew invitations and see recipient email addresses and delivery status. Anonymous calendar and graduation downloads contain only the limited branding and progress projection shown in the image; anyone you send an image or invite link to can keep or forward it.

4. Disclosures and service providers

We do not sell personal information. We use Lovable Cloud for hosting, account services and data storage, Resend for crew invitation delivery, and Lovable visitor analytics for usage measurement. Sign-in providers process information under their own policies. Providers may process information in the United States or other locations under their applicable terms. We may disclose information where legally required, to protect rights and safety, or in a business transfer subject to applicable protections. Authorized service operators may access information when necessary for support, security or administration.

5. Browser storage and analytics

Browser storage and account-session mechanisms keep you signed in and preserve an intended crew invitation through signup. The app records events such as signup, challenge activity and crew actions. Clearing browser storage can sign you out or remove an unfinished invite. Your browser or device may offer additional privacy controls; we do not currently promise a response to all browser tracking-preference signals.

6. Retention and deletion

Your account and challenge history are retained while your account exists so you can revisit earlier cycles. Deleting your account removes your active app records, private progress, membership and related invitation records. A crew with other members stays available; its creator responsibility transfers to a remaining member. Previously downloaded images or delivered emails cannot be recalled. Backups, provider delivery logs and security or legally required records may remain under provider retention schedules or legal obligations; they are not available as an active app account. We have not set a fixed backup or provider-log retention period.

7. Access, export and privacy requests

Use Settings to download your account and app records as JSON or permanently delete your account. The export does not include another member's private information, passwords or security tokens. For questions, corrections or requests concerning provider-held information, contact hello@tuff90.com. We may verify identity before responding. Depending on your state and applicable law, you may have rights to access, correct, delete or obtain a copy of information, appeal a decision or exercise rights without discrimination. This policy does not claim that every state privacy law applies to TUFF 90.

8. Security

We use access controls, authenticated account operations and restricted crew projections to protect information. No service or transmission is completely secure. Protect your sign-in credentials, use a trusted device and report suspected misuse. Avoid sending sensitive health details by email.

9. Adults only

TUFF 90 is for people 18 and older. We do not knowingly offer accounts to children. If you believe someone under 18 has provided information, contact us so we can investigate and remove it as appropriate.

10. Changes and contact

We may update this policy and its effective date. Material changes will be communicated as required by applicable law. Privacy contact: hello@tuff90.com. The legal operator name and mailing address must be confirmed before public launch.