PRIVACY POLICY

This policy explains how Muscle Monkeys (we, us or our) collects, uses, stores and shares personal information when you use our website and training application (the Service). We handle personal information in accordance with the New Zealand Privacy Act 2020 and its information privacy principles.

1. Information we collect

Depending on how you use the Service, we may collect:

• Account information: your Google account identifier, display name and email address;
• Profile information: date of birth, height, weight, measurement preferences, training experience, goals, available days, session duration and equipment access;
• Training information: phases, programmes, scheduled and completed workouts, exercises, sets, repetitions, loads, ratings, skipped activity and progress records;
• Recovery information: sleep, energy, mood, motivation, soreness, physical recovery, joint or tendon discomfort, and optional notes you choose to provide;
• Communications: enquiries, support requests and feedback you send us; and
• Technical information: IP address, device/browser information, authentication and security events, diagnostic logs, and essential cookie or session information.

Please avoid putting unnecessary medical details or information about other people in free-text notes. Profile and recovery information is voluntary, but some features cannot provide useful schedules or recommendations without it.

2. Google sign-in

We use Google to authenticate your account. Google provides the basic account information needed to sign you in, such as your Google identifier, name and email address. We do not receive or store your Google password, access your Gmail, contacts or Google Drive, or post to your Google account. Google's handling of information is governed by its own terms and privacy policy.

3. How we use information

We use personal information to:

• create and secure your account and maintain your signed-in session;
• create phases and workouts, record training, calculate progress and generate recommendations;
• carry training history and recovery context into later reviews and phases;
• provide support and respond to requests;
• operate, troubleshoot, secure and improve the Service;
• detect misuse and protect users, our systems and our legal rights; and
• comply with applicable law and valid legal requests.

We do not sell your personal information. We do not use your training or recovery information for third-party advertising.

4. Automated recommendations

The Service uses rules and calculations based on your profile, completed training and recovery entries to recommend exercises, loads, sets, repetitions and phase intensity. These recommendations support training decisions; they are not medical decisions. You can review and adjust programmed targets rather than being required to accept a recommendation.

5. When information may be shared

We may disclose information only as reasonably necessary to:

• cloud hosting, database, authentication, monitoring, email or support providers working for us;
• professional advisers under duties of confidentiality;
• comply with law, court orders, or lawful government requests;
• protect a person's safety, investigate misuse, or enforce our rights; or
• support a business reorganisation or transfer, subject to appropriate privacy protections.

Providers may process information outside New Zealand. We take reasonable steps to use reputable providers and appropriate contractual, organisational and technical safeguards when information is processed overseas.

6. Storage and security

We use reasonable safeguards designed to protect personal information from loss, unauthorised access, misuse, alteration and disclosure. These may include encrypted network connections, restricted access, authentication controls, backups, monitoring and security updates. No internet service can guarantee absolute security. If a privacy breach is likely to cause serious harm, we will notify affected people and the New Zealand Office of the Privacy Commissioner as required by law.

7. Retention

We retain information while your account is active and for as long as reasonably required to provide the Service, maintain security, resolve disputes and meet legal obligations. When information is no longer required, we take reasonable steps to delete or anonymise it. Deleted information may remain temporarily in secured backups until those backups rotate out.

8. Access, correction and deletion

You may ask for access to the personal information we hold about you, request correction of inaccurate information, or request deletion of your account and information. Some profile information can be reviewed or changed within the Service. For other requests, contact us using the details below. We may need to verify your identity and may retain information where permitted or required by law.

9. Cookies and sessions

We use cookies or similar browser storage that are necessary for authentication, security, preferences and operation of the Service. We do not currently use third-party advertising cookies. Browser settings can block cookies, but doing so may prevent sign-in or other features from working.

10. Children and young people

The Service is not directed to children under 16. If you are under 18, use the Service only with permission from a parent or legal guardian. If we learn that personal information was collected from a child in circumstances where it should not have been, we will take reasonable steps to delete it.

11. Changes to this policy

We may update this policy as the Service, providers or legal requirements change. We will publish the revised policy with a new effective date and provide additional notice where a change is material.

12. Contact and complaints

For access, correction, deletion, privacy questions or complaints, contact our Privacy Officer through Contact us. We will respond within a reasonable time and in accordance with applicable law.

You may also contact the New Zealand Office of the Privacy Commissioner if you are not satisfied with our response.