PRIVACY POLICY

PT Sessions · Effective date: September 16, 2026

1. Overview

This Privacy Policy describes how Nervous Penguin Studios LLC ("we," "us," or "our") collects, uses, and shares information when you use the PT Sessions app and related services (the "Service"). By using the Service, you agree to the practices described here.

2. Information We Collect

• Account information — name, email address, and password or Apple Sign-In / Google Sign-In identifier; profile photo if you add one.
• Client and health information — information trainers and clients record in the app, such as date of birth, gender, body weight, height, body composition, fitness measurements, goals, session history, and progress notes. This may include data considered sensitive health information; we process it only to provide the Service.
• Messages — the content of messages sent through the in-app chat between trainers and clients, so we can deliver and display your conversations. Messages are retained for a limited period and then automatically deleted.
• Payment information — subscriptions and in-app purchases are processed by Apple or Google Play and by RevenueCat; payments between clients and trainers are processed by Stripe. We do not store full payment card numbers. See RevenueCat's privacy notice and Stripe's privacy notice.
• Device and usage information — push notification tokens, device type, and diagnostic information needed to operate the Service.

3. How We Use Information

We use information to provide and operate the Service (scheduling, client management, progress tracking, messaging, payments), to send service notifications you'd expect (booking updates, reminders, payment confirmations), to provide support, to maintain safety and security, and to comply with legal obligations. We do not sell your personal information.

4. AI Features

When you use our artificial intelligence features (such as workout program or meal plan generation), the information needed to generate the content — such as training goals, experience level, and relevant fitness details — is shared with our AI service providers solely to process your request. Results are returned to the app for review. Our providers are not permitted to use this information for their own purposes.

5. When We Share Information

• Between trainers and their clients — that's the point of the app: information a client records or a trainer records about a client is visible to the other, as designed.
• Service providers — cloud infrastructure (Google Firebase), payment processors (Apple, Google Play, RevenueCat, Stripe), and AI providers as described above, each only to perform services for us.
• Legal — when required by law, or to protect the rights, safety, and security of users or the Service.
• Business transfers — if we are involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction.

6. Data Retention and Deletion

We keep your information while your account is active. Chat messages and in-app notification history are automatically deleted after a limited retention period. Deleting your account permanently removes your data from the Service, except where we must retain records to comply with legal obligations. Deleted data cannot be restored.

7. Security

Your data is stored with Google Firebase and protected by industry-standard measures, including encryption in transit and access rules that restrict data to authorized users. No system is perfectly secure; use a strong password and keep your device protected.

8. Your Rights

You can access and update most of your information directly in the app, and you can delete your account (and its data) from Settings. Depending on where you live — including California — you may have rights to request access, correction, or deletion of your personal information, and to not be discriminated against for exercising them. Contact us at the address below to make a request; we will verify and respond as required by applicable law.

9. Children

The Service is intended for adults and requires users to be at least 18. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be posted here with an updated date.

11. Contact