Privacy Policy

This Privacy Policy describes how Earn Your Stripes ("EYS", "we", "us", or "our") collects, uses, discloses, and safeguards information about you when you use the EYS On-Demand mobile applications (iOS and Android), our website at eysondemand.com, and related services (collectively, the "Services"). By using the Services, you agree to the practices described in this policy.

1. Information We Collect

We collect the following categories of information:

• Account information: name, email address, password (hashed), date of birth, and optional profile photo.
• Health & fitness data: workout history, programs completed, performance metrics, body weight, height, and goals you choose to enter. With your explicit consent, we may read data from Apple HealthKit or Google Health Connect (e.g. heart rate, steps, active energy).
• Payment information: processed by Apple App Store, Google Play, or our third-party payment processor. We do not store your full card number.
• Device & usage data: device model, OS version, app version, IP address, crash logs, and interaction events.
• Communications: messages you send to support and survey responses.

2. How We Use Your Information

• Provide, maintain, and personalize the Services and your training programs.
• Process subscriptions, purchases, and refunds.
• Track progress, rank, and achievements within the app.
• Communicate updates, security alerts, and support messages.
• Detect, prevent, and address fraud, abuse, and technical issues.
• Comply with legal obligations.

We do not sell your personal information, and we do not use your health and fitness data for advertising.

3. Legal Basis for Processing (EEA/UK Users)

Where the GDPR applies, we rely on the following legal bases: performance of a contract (to deliver the Services), consent (for health data and marketing), legitimate interests (to secure and improve the Services), and legal obligation.

4. Sharing of Information

We share information only with:

• Service providers that host infrastructure, process payments, send emails, and provide analytics/crash reporting under contractual confidentiality.
• Apple and Google for in-app purchase processing and platform compliance.
• Authorities when required by law, subpoena, or to protect rights, safety, and property.
• Successors in the event of a merger, acquisition, or asset sale, with notice to you.

5. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Services. You may request deletion at any time (see Section 8). Backups are purged on a rolling 90-day cycle. Aggregated, de-identified data may be retained indefinitely.

6. Security

We use encryption in transit (TLS 1.2+) and at rest, role-based access controls, and regular security reviews. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

7. Children's Privacy

The Services are not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

8. Your Rights & Choices

Depending on your jurisdiction (GDPR, UK GDPR, CCPA/CPRA, and similar laws), you may have the right to:

• Access, correct, or delete your personal information.
• Port your data to another service.
• Object to or restrict certain processing.
• Withdraw consent for HealthKit/Health Connect at any time in OS settings.
• Opt out of marketing emails via the unsubscribe link.
• Lodge a complaint with your local data protection authority.

To exercise these rights, email privacy@eysfit.com. You can also delete your account in-app under Settings → Account → Delete Account.

9. Apple HealthKit & Google Health Connect

Data read from HealthKit or Health Connect is used solely to provide fitness features within the app. We do not use this data for advertising or marketing, do not disclose it to third parties for their marketing, and do not sell it. You may revoke access at any time in your device's Health/Privacy settings.

10. International Transfers

We may transfer information to countries outside your own. Where required, we use Standard Contractual Clauses or equivalent safeguards.

11. Changes to this Policy

We will notify you of material changes via the app or email. The "Last updated" date above reflects the latest revision.

12. Contact Us

Earn Your Stripes — Privacy Team
Email: privacy@eysfit.com
Web: eysfit.com