Nexal ("we", "our", "us") operates the Nexal mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your information when you use our App.

1. Information We Collect

Account Information

Email address and name (provided during sign-up or via Google Sign-In)

Profile & Health Data

Height, weight, age, gender
Target weight and fitness goals
Activity level, training style, lifting experience
Dietary preferences and food allergies

Usage Data

Workout logs, meal logs, and nutrition entries
Progress data (weight tracking, calorie intake, water intake)
Barcode scans for food products

Subscription Data

Subscription status and purchase tokens (managed by Google Play)
We do not store your payment card details

2. How We Use Your Information

To provide the service: Generate AI-powered workout plans, meal plans, food assessments, and exercise suggestions based on your profile data
To track your progress: Store workout logs, nutrition data, and body metrics so you can monitor trends over time
To manage your account: Authenticate your identity, manage your subscription, and communicate with you about your account
To improve the App: Understand how features are used to improve functionality and user experience

3. AI-Powered Features

Nexal uses Google Gemini AI to generate personalised workout plans, meal plans, food assessments, and exercise suggestions. Your profile data (such as fitness goals, weight, dietary preferences) is sent to the AI service to generate relevant recommendations. This data is used only for generating your content and is not used to train AI models.

4. Data Storage & Security

Your data is stored securely using Supabase, a hosted database platform with industry-standard encryption. Data is transmitted over HTTPS (TLS encryption). We use Row Level Security policies to ensure you can only access your own data. Authentication tokens are stored securely on your device.

5. Third-Party Services

We use the following third-party services:

Supabase — Authentication, database, and serverless functions (supabase.com/privacy)
Google Sign-In — Optional sign-in method (policies.google.com/privacy)
Google Play Billing — Subscription payment processing (policies.google.com/privacy)
Google Gemini AI — AI-powered content generation (ai.google.dev/terms)

We do not sell your personal data to any third party.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data (profile, workout logs, meal logs, progress data) will be permanently deleted from our servers within 30 days.

7. Your Rights

You have the right to:

Access your personal data through the App
Update your profile information at any time
Delete your account and all associated data by contacting us
Export your data by contacting us

8. Children's Privacy

Nexal is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected data from a child under 16, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy within the App. Your continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Email: hello@blumint.com.au