App Privacy Policy

1. Who We Are

Phoenix Protocol ("we," "us," or "our") operates a platform that connects nutrition coaches ("Coaches") with their clients ("Clients") to facilitate nutrition tracking, goal setting, and communication. This policy applies to the Phoenix Protocol website, mobile app, and any related services (together, the "Services").

2. Information We Collect

Account information. When you create an account, we collect your name, email address, role (Coach or Client), and authentication credentials.

Health and nutrition data. Clients may provide information such as body weight, measurements, dietary preferences, allergies, meal logs, progress photos, and goals. Coaches enter coaching notes, meal plans, and feedback related to their Clients.

Communications. Messages exchanged between Coaches and Clients through our in-app messaging feature, and any related email notifications.

Payment information. If you purchase a subscription, our payment processor (see Section 4) collects payment details necessary to process the transaction. We do not store full payment card numbers on our own servers.

Device and usage data. We collect information such as device type, operating system, app version, crash logs, and general usage patterns to maintain and improve the Services. If you enable notifications, we collect a device push token to deliver them.

Optional device features. If you use barcode scanning to log food items, we access your device camera only while that feature is in use; we do not store camera images.

3. How We Use Your Information

• To provide, maintain, and personalize the Services, including AI-assisted meal planning based on the data you and your Coach provide.
• To enable communication and coaching relationships between Coaches and Clients.
• To process payments and manage subscriptions.
• To send service-related notifications, such as messages from your Coach or Client, and, where applicable, product updates.
• To monitor, secure, and improve the performance and reliability of the Services.
• To comply with legal obligations and enforce our Terms of Service.

4. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

• Between Coaches and Clients. A Client's health, nutrition, and progress data is shared with the Coach(es) they are connected to, for the purpose of receiving coaching. Clients may revoke a Coach's access to their data at any time through account settings.
• Service providers. We use third-party providers to operate the Services, including Supabase (database and authentication), and Firebase Cloud Messaging (push notifications). These providers process data on our behalf and are contractually restricted from using it for other purposes.
• AI processing. Meal-planning requests may be sent to a third-party AI provider to generate meal plan suggestions. We do not knowingly send full account credentials or payment information to this provider.
• Legal and safety. We may disclose information if required by law, or to protect the rights, safety, or property of Phoenix Protocol, our users, or the public.
• Business transfers. If Phoenix Protocol is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.

5. Data Security

We use industry-standard measures, including encrypted data transmission and access controls, to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time — see Section 7.

7. Your Rights and Choices

• Access and correction. You can review and update most of your account information directly within the app.
• Revoking Coach access. Clients can revoke a connected Coach's access to their data at any time in account settings.
• Account deletion. You may permanently delete your account and associated data at any time, whether or not you have the app installed. See how to request account deletion for instructions.
• Notifications. You can disable push notifications in your device settings at any time.

8. Children's Privacy

The Services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. International Data Transfers

Your information may be processed and stored in countries other than your own, including where our service providers operate their infrastructure. By using the Services, you consent to this transfer, storage, and processing.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email, and update the "Effective Date" above.

11. Governing Law

This Privacy Policy is governed by the laws of Egypt, without regard to its conflict of law provisions.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at: