This Privacy Policy explains how FIVE×FIVE LLC (the "app," "we," "us," or "our"), a limited liability company organized under the laws of the State of North Carolina, USA, collects, uses, and protects your information when you use the FIVE×FIVE mobile application, the website at fivexfiveapp.com, and any related services (together, the "Service").
By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.
We collect the minimum data needed to run your account and your workouts. We never sell your data. Your workout history and body-weight logs are stored in your account so the app can show you progress. You can export or delete your data anytime from inside the app.
1. Who this policy applies to
The Service is intended for adults aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact info@fivexfiveapp.com and we will delete it.
2. Information we collect
2.1 Information you give us
- Account information. Your email address and a password (or an OAuth identifier if you sign in with Google or Apple). Optionally, a display name.
- Workout data. The lifts you log, weights, reps, sets, warm-ups, completion status, and timestamps.
- Body-weight logs. Optional weekly body-weight check-ins you enter yourself.
- Preferences. Settings such as unit (lb / kg), reminder times, warm-up defaults, and notification permissions.
- Support correspondence. If you email us, we keep the message and your email address so we can reply.
- Waitlist data. If you join the beta waitlist on our website, we store your email address and the page you signed up from.
2.2 Information collected automatically
- Device and technical data. Device type, operating system version, app version, language, time zone, crash logs, and basic usage events (e.g. "workout completed").
- IP address. Captured briefly by our backend providers for security and abuse prevention; we do not log or retain IP addresses for marketing purposes.
2.3 Information we do not collect
- We do not access your phone's contacts, calendar, photos, microphone, or location.
- We do not integrate with Apple Health, Google Fit, or other health-data platforms unless you explicitly opt in to a future integration.
- We do not collect biometric identifiers (e.g. face scans, fingerprints).
3. Health and fitness data
Your workout history and body-weight logs are personal fitness information. We treat them with extra care:
- They are stored encrypted in our database (provided by Supabase, which encrypts data at rest and in transit).
- They are visible only to you when signed in to your account.
- They are never used to train machine-learning models or shared with advertisers.
- You can export everything as CSV or JSON from the Account screen, and you can delete your account and all associated data at any time.
FIVE×FIVE is a general fitness tool, not a medical device. The data we store is not a medical record and is not governed by HIPAA. Do not rely on the app for medical advice.
4. How we use your information
We use the information we collect to:
- Provide the core app features — log workouts, calculate plate math, suggest progression, send reminders you've opted into.
- Maintain your account, authenticate you, and back up your data.
- Send transactional emails (sign-up confirmation, password resets, important service notices).
- Send beta-related emails if you join the waitlist (you can unsubscribe at any time).
- Diagnose crashes and improve stability.
- Detect and prevent fraud, abuse, and security incidents.
- Comply with legal obligations.
5. Subscriptions and billing
FIVE×FIVE is free during the closed beta. After public launch we plan to charge $7.99 / month or $59 / year for full access. Beta testers will receive 6 months free at launch as a thank-you.
- Who processes payments. Subscriptions are processed by the Apple App Store (iOS) or the Google Play Store (Android), or by Stripe if purchased through the web. We do not see or store your credit card number, CVV, or full billing address — those are handled entirely by the payment processor.
- What we do see. A subscription identifier, the plan you bought, the renewal date, and the country of purchase. This is what lets us unlock paid features in your account.
- Receipts and renewals. Receipts and renewal reminders come from the platform you bought through (Apple, Google, or Stripe). Manage or cancel your subscription in the same place — instructions are also in our Terms of Service.
- Promo codes. If you use a launch or family/friend code, we record which code you used so we can apply the correct discount.
6. Who we share information with
We do not sell or rent your personal information to anyone, ever. We share data only with the small set of service providers required to run the app, and only as needed to deliver the Service:
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Database, authentication, file storage | Account info, workout data, body-weight logs |
| Resend | Transactional + waitlist email delivery | Email address, email content |
| Vercel | Website hosting | Website request logs (IP, user agent) |
| Apple, Google, Stripe | Subscription billing | Subscription identifier, plan, renewal status |
| Crash reporting (when added) | Diagnose app crashes | Crash logs, device model, OS version |
We may also disclose information if required by law (e.g. valid subpoena or court order), to protect the rights, safety, or property of FIVE×FIVE or our users, or in connection with a sale or merger of the business — in which case we will notify users in advance.
7. Amazon affiliate links
Our Shop section and other pages may contain affiliate links to products on Amazon. As an Amazon Associate, FIVE×FIVE earns from qualifying purchases. When you click an Amazon link from our app or website, Amazon may set cookies or identifiers on your device to attribute any purchase to us. Those cookies are governed by Amazon's own privacy notice, not ours. We only receive aggregated reporting on clicks and earnings — we do not see who specifically clicked or what they bought.
8. Cookies and similar technologies
Our website uses a small number of strictly necessary cookies for routing and security (set by Vercel). We do not use third-party advertising cookies, fingerprinting, or session-replay tools. The mobile app does not use cookies but stores local data on your device (e.g. cached workout history) to keep the app fast offline.
9. Email and marketing
If you join the beta waitlist, we will send you transactional emails about your beta status, plus occasional product updates. Every marketing email includes a one-click unsubscribe link. Transactional emails (e.g. password resets, billing receipts) will continue regardless of your marketing preferences, because they are needed to operate your account.
10. Data retention
- Active accounts. We keep your data for as long as your account is active.
- Deleted accounts. When you delete your account, we permanently delete your workout data, body-weight logs, and personal profile within 30 days. Some records (e.g. billing receipts) may be kept longer if required for tax or legal compliance, in anonymized or pseudonymous form where possible.
- Inactive accounts. If an account has been inactive for 36 months and has no active subscription, we may delete it after emailing you 30 days in advance.
- Waitlist emails. Kept until you unsubscribe or for up to 24 months after launch, whichever comes first.
11. Your rights and choices
Regardless of where you live, you can:
- Access your data — visible inside the app, plus a one-tap export (CSV or JSON) from the Account screen.
- Correct your data — edit your profile, body-weight logs, and workout history directly in the app.
- Delete your data — use "Delete account" in Account → Settings, or email info@fivexfiveapp.com.
- Withdraw consent for marketing emails — unsubscribe link in every marketing email.
- Object to a use of your data or ask us to restrict it — email info@fivexfiveapp.com.
11.1 California (CCPA / CPRA)
California residents have the right to know what personal information we collect, to delete it, to correct it, and to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under California law. To exercise any of these rights, email info@fivexfiveapp.com. We will respond within 45 days. You may also designate an authorized agent to act on your behalf.
11.2 European Economic Area, United Kingdom, Switzerland (GDPR / UK GDPR)
If you are in the EEA, UK, or Switzerland, the lawful bases on which we process your data are: (a) contract — to deliver the Service you signed up for; (b) legitimate interests — to secure the Service and prevent abuse; (c) consent — for marketing emails and any optional integrations; and (d) legal obligations — to comply with applicable law.
You have the right to lodge a complaint with your local data-protection authority. We do not currently have an EU representative because we are below the threshold requiring one; we will appoint one if and when required.
12. International data transfers
Our service providers are primarily located in the United States. If you use the Service from outside the US, your information will be transferred to and processed in the US. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
13. Security
We use industry-standard practices to protect your data — TLS in transit, encryption at rest, hashed and salted passwords, row-level security on our database, and least-privilege access to backend systems. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. If we ever discover a breach affecting your data, we will notify you in accordance with applicable law.
14. Children
The Service is for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you learn that a minor has provided information to us, contact info@fivexfiveapp.com and we will delete it.
15. Changes to this policy
If we make material changes, we will notify you by email (if you have an account) and post a notice on this page at least 14 days before the changes take effect. The "Last updated" date at the top reflects the most recent revision.
16. Contact
Questions, requests, or complaints about this policy?
FIVE×FIVE LLC
Email: info@fivexfiveapp.com
Mail: mailing address available on request via email