PRIVACY POLICY
7 Day Home Workout - Pro Free
Android package: com.sevendaysworkoutproplus.app
Effective date: 1 August 2026
Last updated: 1 August 2026
1. WHO WE ARE
This app ("the App", "we", "us", "our") is operated by:
Legal entity: BrotechSolutions
Contact email: brotechsolution0107@gmail.com
Privacy contact: brotechsolution0107@gmail.com
For users in the European Economic Area and the United Kingdom, we act as the data controller for the personal data described below.
2. SUMMARY
We collect the account details you sign in with, the fitness and health information you enter, and the activity the App records (workouts, water, weight, steps). We use it to run the App, sync your data across your devices, show you your progress, process payments, show advertising, and fix crashes.
We do not sell your personal data. We do not use your health data to target advertising.
Your workout, water, weight and step data is stored on your device first. The App works offline. Syncing to our servers is a background convenience, not a requirement for the App to function.
3. WHAT WE COLLECT
3.1 Account and identity data
Collected when you create an account or sign in:
• Your name, used to display and greet you in the App
• Your email address, used for account identity, sign-in and support
• Your profile photo URL, only if your sign-in provider supplies one
• A Firebase user ID, the internal identifier that links your records
• The sign-in method you used, so we can sign you back in the same way
Sign-in is handled by Firebase Authentication. Depending on the method you choose, your name and email are shared with us by Google, Apple or Meta (Facebook). We never receive or store your password for those accounts. If you register with an email and password, that password is handled and stored by Firebase Authentication, not by us.
3.2 Health and fitness data
You enter this during setup and while using the App:
• Gender
• Age
• Height
• Current weight, starting weight and goal weight
• Your self-reported fitness level
• Your preferred unit system (metric or imperial)
• Your daily water goal
We treat this as sensitive personal data. In the EEA and UK it is "data concerning health" under Article 9 of the GDPR, and we process it only on the basis of your explicit consent, which you give by entering it. You are never required to enter it to install the App, and you can change or delete it at any time.
3.3 Activity and usage data recorded by the App
• Completed and abandoned workout sessions, including the day number, exercises completed, duration and estimated calories burned
• Water intake logs, with the amount and time
• Weight logs, with the value, date and any note you add
• Daily step count, and estimated calories and distance
• Your current day in the programme, current streak and best streak
• Badges and achievements you unlock
• The reminder times and intervals you choose
• Workout plans you save to your library, including plans generated by the AI assistant
3.4 Step counting and physical activity
On Android the App asks for the Physical activity permission (ACTIVITY_RECOGNITION) so it can read your device's built-in step counter.
• Steps come from your phone's hardware step sensor.
• We do not collect location data. The App requests no location permission at all. Distance is estimated by multiplying your step count by an average stride length, not by tracking where you go.
• If you deny this permission, everything else in the App keeps working. Only the step counter is unavailable.
3.5 Device and technical data
• Platform (Android or iOS)
• App version
• Device model and operating system version
• Crash reports, stack traces and diagnostic logs
• Advertising identifier (see section 3.7)
• Your IP address, which is an unavoidable part of any internet request to our servers
3.6 Payment data
If you buy a subscription or a one-time upgrade:
• Razorpay (card, UPI, netbanking and wallets, primarily India): we receive and store only the Razorpay order ID, payment ID and signature, so we can verify and restore your purchase, together with the product purchased, the amount and the currency.
• Google Play Billing and Apple In-App Purchase: we receive a purchase token or receipt and the product identifier.
WE NEVER RECEIVE, SEE OR STORE YOUR FULL CARD NUMBER, CVV, UPI PIN OR BANK CREDENTIALS. Those go directly to the payment provider, who is responsible for processing them.
3.7 Advertising data
The free version of the App shows advertising through Google AdMob.
• AdMob may access your device's advertising ID (the Google Advertising ID on Android, or the IDFA on iOS) and other device signals in order to select and measure ads.
• On Android the App declares the com.google.android.gms.permission.AD_ID permission for this purpose.
• On iOS we show Apple's App Tracking Transparency prompt before any tracking, and we honour your answer.
• In the EEA, UK and Switzerland we show a Google-certified consent form before serving personalised ads. You can reopen it at any time from Settings, then Privacy, then Ad privacy options, and change your choice.
• If you decline personalised ads you will still see ads, but they will be non-personalised.
We do not share your health, weight or workout data with advertising networks.
3.8 Analytics and crash reporting
• Firebase Analytics, for screens viewed, features used and aggregate engagement
• Firebase Crashlytics, for crash reports and diagnostic data so we can fix bugs
• Meta (Facebook) App Events, for app install and activity events used in advertising measurement and attribution
3.9 AI assistant conversations
The App includes an AI fitness assistant. When you send it a message:
• Your message, along with the recent conversation context, is sent to OpenRouter (openrouter.ai), which routes it to a third-party large language model.
• Please do not enter information you would not want processed by a third party. In particular, do not enter medical records, diagnoses, prescriptions, government identifiers or payment details.
• Plans you choose to save from the assistant are stored on your device and, where sync is available, on our servers.
• OpenRouter and the model providers it routes to handle your messages under their own privacy terms, at https://openrouter.ai/privacy
The AI assistant does not provide medical advice. See section 9.
3.10 What we do not collect
• Precise or approximate location
• Contacts, calendar, SMS or call logs
• Photos, camera or microphone access
• Health data from Apple Health, Google Fit or Health Connect
4. WHERE YOUR DATA IS STORED
On your device. Your profile, sessions, water, weight, step history, badges, saved plans and settings are written to a local database and to standard app preferences, inside the App's private storage area. This is the primary copy, which is why the App works with no network connection. This data is protected by your device's own storage encryption and by operating system app sandboxing. The App does not apply a separate encryption layer of its own on top of that.
On our servers. When you are signed in and online, the App also syncs the data listed in sections 3.1 to 3.3, 3.5 and 3.6 to our backend at our server, hosted in [hosting region or country]. Syncing is one-directional and best-effort. If it fails, nothing in the App breaks.
With our processors. Google (Firebase) stores your authentication record and analytics data. See section 6.
5. WHY WE PROCESS YOUR DATA, AND OUR LEGAL BASIS
For users in the EEA and UK, we rely on the following legal bases:
• Creating and securing your account: performance of a contract
• Delivering workouts, tracking and progress features: performance of a contract
• Storing and syncing your health and fitness inputs: your explicit consent
• Sending the reminders and voice reminders you set up: your consent
• Reading your step count: your consent, given through the Android permission
• Processing payments and honouring your purchases: performance of a contract, and legal obligation for tax records
• Crash reporting and security: our legitimate interest in a working, secure app
• Analytics: your consent where required, otherwise our legitimate interests
• Personalised advertising: your consent, given through the consent form or the iOS tracking prompt
• Non-personalised advertising: our legitimate interests
• AI assistant replies: performance of a contract, at your request
You may withdraw consent at any time. Withdrawing consent for health data means you can no longer use the tracking features that depend on it.
6. WHO WE SHARE DATA WITH
We do not sell personal data. We share it only with the following recipients, and only as needed:
Google and Firebase, for authentication, database, analytics and crash reporting. They receive your account data, analytics events and crash data. Their policy: https://firebase.google.com/support/privacy
Google AdMob, for advertising. It receives your advertising ID and device signals. Their policy: https://policies.google.com/technologies/ads
Google Play Billing, for purchases on Android. It receives the purchase token and product ID. Their policy: https://policies.google.com/privacy
Apple, for Sign in with Apple and In-App Purchase on iOS. It receives an account identifier and receipt. Their policy: https://www.apple.com/legal/privacy/
Meta Platforms, for Facebook login and app events. It receives an account identifier and app events. Their policy: https://www.facebook.com/privacy/policy
Razorpay, for payment processing. It receives payment and order identifiers and the amount. Their policy: https://razorpay.com/privacy/
OpenRouter, for routing AI assistant messages. It receives your assistant messages. Their policy: https://openrouter.ai/privacy, for backend hosting. It hosts all synced data.
We may also disclose data where we are legally required to, such as under a court order or a lawful request from a public authority, to enforce our Terms, or in connection with a merger or acquisition. In the last case we will notify you before your data becomes subject to a different privacy policy.
7. INTERNATIONAL TRANSFERS
The providers listed above may process your data outside your country, including in the United States and India. Where we transfer personal data out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision, as applicable.
8. HOW LONG WE KEEP YOUR DATA
• Account and profile data: until you delete your account
• Workout, water, weight and step history: until you delete your account, or delete the individual entry
• Data stored locally on your device: until you delete it in the App, clear the app's storage, or uninstall
• Purchase records: up to [7] years, where tax and accounting law requires it
• Crash reports: up to 90 days
• Analytics events: up to 14 months
• AI assistant messages: not retained by us beyond the conversation. See OpenRouter's policy.
• Backups: deleted within [30] days of account deletion
9. HEALTH AND MEDICAL DISCLAIMER
THE APP IS NOT A MEDICAL DEVICE AND DOES NOT PROVIDE MEDICAL ADVICE.
Workouts, calorie estimates, step counts, distances, diet suggestions and anything produced by the AI assistant are general fitness information only. They are estimates produced by formulas and models, not measurements, and they may be inaccurate.
Consult a qualified physician before starting any exercise programme, especially if you are pregnant, recovering from injury or surgery, or have any cardiovascular, respiratory, musculoskeletal or metabolic condition. Stop exercising and seek medical help if you feel pain, dizziness or shortness of breath.
10. CHILDREN
The App is not directed at children. You must be at least [16] years old, or the minimum age of digital consent in your country if that is higher, to create an account. We do not knowingly collect personal data from children below that age. If you believe a child has given us their data, contact brotechsolution0107@gmail.com and we will delete it.
11. YOUR RIGHTS
Depending on where you live, you have some or all of the following rights:
• Access, to get a copy of the data we hold about you
• Rectification, to correct data that is wrong
• Erasure, to have your data deleted
• Restriction, to limit how we process your data
• Portability, to receive your data in a machine-readable format
• Objection, to object to processing based on legitimate interests, including direct marketing
• Withdrawal of consent, at any time, without affecting past processing
• Complaint, to your supervisory authority. In the EEA this is your national data protection authority. In the UK it is the ICO, at https://ico.org.uk. In India it is the Data Protection Board.
California residents. Under the CCPA and CPRA you have the right to know, delete and correct your personal information, and to opt out of its sale or sharing for cross-context behavioural advertising. We do not sell personal information. To opt out of sharing for personalised advertising, go to Settings, then Privacy, then Ad privacy options. We will not discriminate against you for exercising a right.
India. Under the Digital Personal Data Protection Act 2023 you have the right to access, correct, complete, update and erase your personal data, the right to nominate another person to exercise your rights, and the right to grievance redressal through our Grievance Officer named in section 1.
How to exercise your rights, in the App:
• Edit your profile and health data: Profile, then Edit profile
• Delete an individual weight or water entry: tap the entry
• Change ad personalisation: Settings, then Privacy, then Ad privacy options
• Turn off reminders: Settings, then Reminders
• Delete your entire account and data: Settings, then Delete account
By email: write to brotechsolution0107@gmail.com. We will respond within 30 days, or within one month in the EEA and UK. We may ask you to verify your identity first.
12. DELETING YOUR ACCOUNT
Using Settings, then Delete account, in the App will:
1. Delete your local data from the device.
2. Send a deletion request for your server-side records.
3. Delete your Firebase Authentication account.
Deletion is permanent and cannot be undone. Anonymous, aggregated analytics that can no longer be linked to you may be retained. Purchase records may be retained where the law requires it. Deleting your account does not refund purchases you have already made. See our Terms and the app store's refund policy.
13. SECURITY
We use HTTPS and TLS for data in transit, and short-lived Firebase ID tokens to authenticate requests to our backend. Data stored on your device sits in the App's private storage area and relies on your device's own storage encryption. Access to our backend is restricted to authorised personnel.
No system is perfectly secure. If a breach affects your personal data and poses a risk to you, we will notify you and the relevant regulator as required by law.
14. PERMISSIONS THE APP ASKS FOR, AND WHY
• Notifications, for workout, water and meal reminders. Optional.
• Physical activity, for reading your step count. Optional.
• Alarms and reminders, for firing reminders at the exact time you set. Optional.
• Ignore battery optimisations, to stop the operating system delaying your reminders. Optional.
• Run at startup, to restore your reminders after a reboot. Optional.
• Full-screen intent, to show a reminder like an alarm on the lock screen. Optional.
• Vibrate and wake lock, for reminder alerts and keeping the screen on during a workout. Optional.
• Internet access, for syncing, ads, the AI assistant and payments. Required.
• Advertising ID, for advertising in the free version. Based on your consent.
Every permission except internet access is optional. Denying one disables only the feature that needs it.
15. CHANGES TO THIS POLICY
We will update this page when our practices change, and move the "Last updated" date at the top. For material changes we will give notice in the App before they take effect. If a change requires your consent, we will ask for it.
16. CONTACT
BrotechSolution
General enquiries: brotechsolution0107@gmail.com
Privacy enquiries: brotechsolution0107@gmail.com
© 2026 7 Day Home Workout. All rights reserved.