Privacy Policy

Last updated: March 8, 2026

Fishlimpia ("we", "us", or "our") operates the Fishlimpia mobile application and website at fishlimpia.com. This Privacy Policy explains how we collect, use, and protect your personal information.

1. Information We Collect

Account Information

• Email address
• Full name
• Password (stored securely using bcrypt hashing)
• Google account information (if you sign in with Google): Google ID, name, email, and profile photo

Training & Performance Data

• Body weight
• Physical test results (strength measurements, force data, training metrics)
• Training plans, sessions, and exercise logs
• Strength records (maximum strength values, personal records)
• Session notes and feedback

Media

• Exercise demonstration videos uploaded by coaches
• Images attached to notifications

Device Information

• Push notification device tokens (to send you notifications)
• Device platform (iOS, Android, or web)
• Bluetooth data from connected Tindeq devices (for strength measurements)

Usage Preferences

• Language preference
• Notification preferences (which types of notifications you want to receive)
• Audio and interface preferences

2. How We Use Your Information

• Provide our service: Track your training progress, manage training plans, and facilitate coach-athlete communication
• Authentication: Verify your identity and secure your account
• Notifications: Send push notifications about training updates, feedback, and personal records
• Translation: Translate training content between Spanish, English, and Portuguese
• Error monitoring: Detect and fix technical issues in production
• Email communication: Send account verification emails

3. Third-Party Services

We use the following third-party services to operate Fishlimpia:

Service	Purpose	Data Shared
Google OAuth	Account sign-in	Authentication credentials
OpenAI	Content translation	Exercise and training text (no personal data)
Firebase Cloud Messaging	Push notifications	Device tokens, notification content
Resend	Email delivery	Email address, name
DigitalOcean Spaces	Media storage	Uploaded videos and images
Sentry	Error tracking	Error logs, browser info

We do not sell your personal data to any third party.

4. Data Storage & Security

• Your data is stored on secure servers hosted on DigitalOcean
• Passwords are hashed using bcrypt and never stored in plain text
• All communication between the app and our servers is encrypted via HTTPS
• Authentication uses JWT tokens with automatic expiration

5. Data Retention

We retain your data for as long as your account is active. Training logs and performance data are kept indefinitely to preserve your training history.

Email verification tokens expire after 24 hours.

6. Data Deletion

When your account is deleted, all associated data is permanently removed, including:

• Account information and profile
• All training plans, sessions, and exercise logs
• All physical test results and strength records
• All feedback and notifications
• All coach-athlete connections
• Device tokens and preferences

To request account deletion, contact us at info@fishlimpia.com.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Change your notification preferences at any time
• Change your password

8. Analytics & Cookies

We do not use third-party analytics services (no Google Analytics, no tracking pixels). We use browser local storage to save your authentication token, language preference, and interface settings. We use a single cookie to remember your sidebar preference.

9. Payments and Billing

Paid subscriptions are purchased on our website and processed by Stripe, our payment processor. Your card details are entered directly into Stripe's payment form and never reach or get stored on our servers. To comply with tax rules we collect your billing country (and postal code where required) and share it with Stripe, which also issues your invoices. We keep subscription records (plan, status, renewal dates, invoice references) linked to your account for as long as required for accounting and tax purposes.

10. Children's Privacy

Fishlimpia is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. The "Last updated" date at the top reflects the most recent revision.

12. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

info@fishlimpia.com