Privacy Policy

MagFit Inc. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy outlines the types of personal data we collect, how we use it, and how we keep it safe. By using our app, Rate My Physique (the "App"), you agree to the terms of this Privacy Policy.

1. Information We Collect

We collect the following types of information when you use the App:

Personal Information:

• Email Address: We collect your email address through your Apple ID and during account creation to manage your account and communicate with you.
• Birthday: We collect your birthday to personalize your experience within the App and offer age-specific features.
• Gender: We collect your gender to provide gender-specific content and improve your experience with the App.
• Language: We collect information about the language you speak to tailor content to your language preferences.
• Height and Weight (optional): Only collected if you choose to add this information.

Legal Basis: The legal basis for collecting this information is your explicit consent, which is required before any data processing occurs. Height and weight are optional — by adding this information, you consent to its collection and use. This data is sent to our AI service providers to improve the accuracy of your physique rating. You can decline to add this data or delete it at any time.

User-Generated Content:

• Images: We collect images that you upload to the App, which are necessary for the core functionality of the App.

2. How We Use Your Information

We use your data for the following purposes:

Account Management:

• To create, manage, and authenticate your account.

Communication:

• To send you essential communications, such as updates to the App or changes to our Privacy Policy.

Personalized Features:

• To enable the core functionality of the App, such as processing and displaying your uploaded images.

Subscription and Payment Management:

• To manage your subscription and payments via RevenueCat.

AI-Powered Coaching:

• To provide AI-powered coaching and image analysis using services such as Anthropic (Claude), OpenAI, and Replicate.com.

Your personal information is processed based on your consent, contractual necessity, or our legitimate interests in providing you with a seamless user experience. AI-based processing (via Anthropic, OpenAI, and Replicate.com) is performed based on user consent and legitimate interests, ensuring compliance with GDPR.

3. Data Sharing

We do not share your personal information or user-generated content with third parties, except for the following:

Service Providers:

• We may share information with third-party service providers that help us operate and improve the App, including hosting providers, analytics services, AI-based processing providers (e.g., Anthropic, OpenAI, and Replicate.com), payment processing, and subscription management (e.g., RevenueCat). These providers are required to maintain the confidentiality of your data and comply with GDPR and applicable data protection laws.

Legal Requirements:

• We may disclose your information if required by law, legal process, or government request, or to protect our rights, property, and safety, or the rights of others.

3A. Refunds and Apple Server Notifications

If you request a refund for an in-app purchase, we may share information about your use of that purchase with Apple to assist in determining the appropriate resolution. By agreeing to this Privacy Policy, you consent to the transmission of this usage data to Apple solely for the purpose of refund resolution. This process complies with Apple's Server to Server Notifications feature and relevant data protection regulations.

3B. Advertising and App Install Attribution

We may use third-party advertising partners, such as Meta (Facebook/Instagram), to measure app installs and ad campaign effectiveness.

We use Apple's SKAdNetwork for anonymized, aggregated install attribution. We also use the Meta SDK, which may collect certain device signals (such as IP address and device type) to measure app installs and ad campaign effectiveness. This data does not include your name or directly identifying information, and advertising ID collection is disabled. For more information, see Meta's Data Policy.

4. Data Retention

When you delete your account, all of your personal data — including your images, ratings, height, weight, and any other information associated with your account — is permanently deleted from our systems.

We retain a record of your anonymized user ID and the deletion timestamp for auditing and fraud-prevention purposes. This record does not contain any personal or identifying information and cannot be used to reconstruct your account or data.

Height and weight data deleted independently via your profile settings (without deleting your full account) is removed immediately.

5. Data Security

We implement technical and organizational measures to protect your data, including encryption and access controls. However, no method of transmission over the Internet is completely secure, and we cannot guarantee the absolute security of your data.

6. Your Rights

Depending on your location, you may have the following rights:

• Right to access your data
• Right to correct any inaccurate data
• Right to request deletion of your data
• Right to request a copy of your data
• Right to object to certain processing practices
• Right to withdraw consent at any time, without affecting the lawfulness of processing before its withdrawal.
• Right to data portability: You can request your data in a structured, machine-readable format and have the right to transmit it to another service.
• Right to delete your height/weight data specifically, independent of deleting your full account, via your profile settings.

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with your local data protection authority.

To exercise these rights, please contact us at the email provided below.

7. Children's Privacy

The App is not intended for children under 13. We do not knowingly collect or solicit personal data from children under the age of 13.

8. Legal Compliance

We comply with data protection laws including the General Data Protection Regulation (GDPR) (EU) and the California Consumer Privacy Act (CCPA) (California), as applicable, to ensure the privacy and protection of your personal information.

9. Data Transfers & Third-Party Processing

We use third-party services, including Firebase (Google), Anthropic (Claude), OpenAI, RevenueCat, and Apple Payments. These providers comply with GDPR, and data processing agreements (DPAs) are in place where required.

Height and weight data, when provided, is included in the information sent to our AI service providers (e.g., Anthropic) solely to improve rating accuracy.

Your data is stored in Firebase, located in the Pacific region (U.S.). Appropriate safeguards, including Standard Contractual Clauses, are implemented for international data transfers.

10. Automated Decision-Making

We use AI-powered features (via Anthropic's Claude) to provide personalized physique coaching based on images and data you provide. This processing is based on your consent and is not used to make legally binding decisions about you.

11. Changes to This Privacy Policy

We may update this policy from time to time. Any changes will be posted in this document along with an updated effective date. You will be notified of significant changes.

12. Contact Us

For questions or concerns about your data or this policy, you can contact us at:

• Email: mobileappmagfit@gmail.com
• Support: info@ratemyphysiques.com

We do not have an official Data Protection Officer (DPO), but for privacy concerns, you can contact Jacob at jacob@ratemyphysiques.com.

If you have any privacy-related requests (such as data access or deletion), please reach out to our support team.

By using Rate My Physique, you acknowledge that you have read, understood, and agree to this Privacy Policy.