Privacy Policy

Prime is a fitness app. To work, it needs to know things about your body and your training, which is sensitive information. We collect what the app needs to function, we do not sell it, we do not use it for advertising, and you can delete all of it at any time.

• Name and email address, either entered directly or received from Google when you sign in with Google
• A password, stored only as a salted hash, if you sign up with email
• Optional profile details you add: display name, bio, phone number, and avatar

This is the heart of the app, and it is the most sensitive category we handle. You choose what to enter, and you can edit or remove it at any time.

• Age, gender, height, weight, and body-fat percentage
• Fitness goal, experience level, preferred workout duration, and weekly schedule
• Workout sessions, exercises, sets, reps, loads, and personal records
• Streaks, XP, rank, achievements, and challenge progress
• Weight entries recorded over time

We do not share health and fitness data with advertisers, data brokers, or any third party for their own purposes.

Prime uses your camera to scan the QR code at your gym when you check in. Scanning happens on your device; the camera feed itself is never uploaded or recorded.

Separately, you can attach photos to your profile and your saved workouts. Those images are uploaded and stored in Cloudflare R2 under a folder tied to your account, and they are deleted when you delete your account.

Prime does not collect your location. Gym check-ins are verified by scanning a QR code at the gym, and we store only which gym you checked into and when — never GPS coordinates.

• A push notification token for each device, so we can send you reminders
• Crash reports and performance traces, including device model and OS version
• Basic technical data your device sends with each request, such as IP address

Diagnostic data is used to find and fix crashes. It is sampled, not collected from every session.

• Run the app: track workouts, streaks, XP, rank, and progress
• Verify gym check-ins and enforce one check-in per day
• Show your membership and check-in activity to the gym you have joined
• Send challenge reminders and achievement notifications you can turn off
• Process your membership payments
• Diagnose crashes and improve performance

We do not use your data for advertising, we do not sell it, and we do not build profiles for third parties.

We share data only with the service providers needed to run Prime. Each processes it on our instructions and for no other purpose:

• Google — sign-in, when you choose it. Google tells us your name, email, and profile picture.
• Paystack — subscription payments. Card details go directly to Paystack; we never see or store them.
• Cloudflare R2 — storage for the photos you upload.
• Sentry — crash and error diagnostics, hosted in the European Union.
• Resend — transactional email, such as verification codes.
• Expo — delivery of push notifications to your device.

We may also disclose data if the law requires it, or to protect the rights and safety of our users.

If you join a gym on Prime, that gym’s staff can see your name, email address, membership status, and your check-in history at their location through their management dashboard. They cannot see your body measurements, workout details, or photos.

Nothing is shared with a gym you have not joined, and you can leave a gym at any time.

We keep your data for as long as your account exists. When you delete your account it is erased immediately, apart from payment records that Paystack and we are legally required to retain for seven years.

You can delete your account and everything in it from Profile → Settings in the app, or from our account deletion page if you no longer have the app installed. Deletion is immediate and cannot be undone.

Depending on where you live, you may have the right to:

• Access — ask for a copy of the personal data we hold about you
• Correction — fix anything inaccurate, most of it directly in the app
• Deletion — erase your account and data at any time
• Objection — tell us to stop using your data for a particular purpose

To exercise any of these, email support@joinprime.app from the address on your account.

Passwords are stored as salted hashes and never in plain text. Sessions in the app are held in the device keychain, and web sessions use signed, HTTP-only cookies. Traffic is encrypted in transit. Card details never touch our servers.

No system is perfectly secure, but we work to protect your data and will notify you if a breach affects it.

Our providers operate in several countries, so your data may be processed outside the country you live in. We rely on standard contractual clauses and equivalent safeguards where required.

Prime is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us personal information, email support@joinprime.app and we will delete it.

We will update this page when our practices change and revise the date at the top. If a change materially affects how we use your data, we will tell you in the app or by email before it takes effect.

Questions about this policy? Email support@joinprime.app.