Privacy Policy

The Physical Operator ("we," "our," or "us") operates the mobile and web application known as The Physical Operator (the "App"). This Privacy Policy describes how we collect, use, store, share, and protect personal information when you use our App, and explains your rights with respect to that information.

By creating an account or using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please discontinue use of the App.

The Physical Operator is an AI-powered strength training, nutrition tracking, and performance analytics platform designed for serious athletes. Our registered contact for privacy matters is:

We collect the following categories of personal data:

3.1 Account & Profile Data

• Name and email address (required for account creation)
• Profile details: fitness experience level, training goals, preferred sport/category
• Body metrics: weight, age, and other optional stats you enter

3.2 Health & Fitness Data

• Workout logs: exercises, sets, reps, weights, RPE, duration, and session notes
• Strength metrics: squat, bench, deadlift, overhead press records and 1RM estimates
• Body weight and body composition entries

3.3 Nutrition Data

• Food entries: food name, calories, macronutrients (protein, carbs, fat), meal type, serving size
• Nutrition goals: daily calorie, protein, carb, and fat targets
• Barcode and meal scan results (processed transiently; images are not stored)

3.4 Payment Data

• Subscription plan and billing cycle (monthly/yearly)
• Payment processing is handled entirely by Stripe, Inc. We never receive or store full credit card numbers, CVV codes, or bank account details.
• We receive a Stripe customer ID and subscription status to manage your access level.

3.5 Technical & Usage Data

• Device type, operating system, and browser/app version
• IP address and general geographic location (country/region)
• Pages and features you interact with, session duration, and app performance metrics
• Error logs and crash reports for debugging

3.6 Camera Access

The App may request camera access for barcode scanning and meal scanning features. Camera access is used solely on your device in real-time. No images or video are uploaded or stored on our servers unless you explicitly choose to save a result.

We use collected information to:

• Create and maintain your account and provide core App functionality
• Generate personalized AI-powered training programs based on your goals and experience
• Track and display your workout, nutrition, and health progress over time
• Provide AI coaching feedback and performance insights
• Process subscription payments and manage billing through Stripe
• Send transactional emails (account confirmations, billing receipts)
• Send optional product updates and feature announcements (you may opt out at any time)
• Respond to customer support inquiries
• Diagnose technical issues and improve App performance and reliability
• Comply with applicable laws and legal obligations

We do not use your health or fitness data for advertising profiling or sell it to third parties.

For users in the European Economic Area (EEA) and United Kingdom, our legal bases for processing personal data are:

• Contract performance: To provide the services you signed up for
• Legitimate interests: To improve the App, prevent fraud, and ensure security
• Consent: For optional communications and health data entry (which you control)
• Legal obligation: Where required by applicable law

We do not sell your personal information. We share data only in the following circumstances:

6.1 Service Providers

• Stripe, Inc. — Payment processing. Subject to Stripe's Privacy Policy (stripe.com/privacy)
• Base44 (platform infrastructure) — Cloud hosting, database, authentication, and AI model invocations. Your data is stored on Base44's secure servers.
• OpenAI / Google AI — AI-generated program content and coaching feedback. Prompts may include fitness context data but not directly identifying information where possible.

6.2 Legal Requirements

We may disclose your information if required to do so by law, subpoena, court order, or governmental request, or to protect the rights, property, or safety of The Physical Operator, our users, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you via email and/or in-app notice before your data becomes subject to a different privacy policy.

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

• Account data: Retained until you delete your account
• Workout, nutrition, and health logs: Retained while your account is active and deleted upon account deletion request
• Payment records: Retained for 7 years for financial and tax compliance
• Technical logs: Retained for up to 90 days for debugging purposes

You can request deletion of your account and all associated data at any time from Settings → Account → Delete Account within the App.

We implement industry-standard security measures including:

• All data transmission encrypted via HTTPS/TLS
• Database access restricted by role-based permissions
• Authentication tokens are short-lived and securely managed
• Payment data handled entirely by PCI-DSS compliant Stripe infrastructure

While we take security seriously, no system is 100% secure. In the event of a data breach affecting your personal information, we will notify affected users as required by applicable law.

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate profile information (via Account Settings)
• Deletion: Request deletion of your account and all associated data
• Portability: Request your data in a machine-readable format
• Opt-out: Unsubscribe from marketing emails via the link in any email
• Restriction: Request that we limit how we process your data
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, contact us at jeffreyaapiek@gmail.com with your request. We will respond within 30 days.

As required by Google Play, here is a summary of our data practices:

The App uses cookies and local storage to maintain your session and remember preferences. We may use analytics tools to understand how users interact with the App. These tools collect aggregated, anonymized usage data.

You can clear cookies and app data through your device settings. This will log you out of the App.

The Physical Operator is intended for users aged 18 and older. We do not knowingly collect personal information from children under the age of 13 (or 16 in the EEA). If we become aware that we have collected data from a child without parental consent, we will delete that information promptly. If you believe a child has provided us with personal data, contact us at jeffreyaapiek@gmail.com.

Your data may be processed and stored in countries other than your own, including the United States and Canada. We ensure that such transfers comply with applicable data protection laws through appropriate safeguards such as standard contractual clauses where required.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For material changes, we will provide additional notice via email or an in-app notification. Your continued use of the App after changes take effect constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: