Privacy Policy

Last updated: August 8, 2026

1. Overview

my300fitness ("we", "us", or "our") provides an AI-powered fitness coaching platform accessible at https://app.300tech.cloud. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using my300fitness you agree to the practices described in this policy.

2. Information We Collect

Account information

When you register, we collect your email address and, if you sign in with Google, your Google account name and profile picture. We do not store your Google account password.

Profile and fitness data

We collect information you voluntarily provide to personalise coaching, including: height, weight, date of birth, gender, fitness level, fitness goals, injuries or limitations, and body measurements you record over time.

Workout data

Workout sessions, exercise sets, weights, reps, and notes you log via the app or via the AI coach chat interface.

Video recordings

Videos you upload for AI form analysis. Videos are stored in private, access-controlled cloud storage and are only accessible to you and the AI analysis service.

AI coach chat history

Messages you exchange with the AI coach are stored so that conversation history persists across sessions.

Google Calendar data

If you choose to connect Google Calendar, we access your Google Calendar solely to:

• Create workout schedule events on your behalf
• Read event times to detect scheduling conflicts and avoid overtraining

We store your Google OAuth access token and refresh token in our database (encrypted at rest) to maintain this connection between sessions. We do not read, copy, or use the content of your calendar events for any other purpose. Google Calendar access is entirely optional and can be revoked at any time.

3. How We Use Your Information

• Provide and personalise the fitness coaching service
• Generate AI-powered video form analysis and exercise recommendations
• Power the AI coach chat with relevant context (your profile, workout history, goals)
• Track progress toward fitness goals
• Sync workout events to Google Calendar (only if you have connected it)
• Maintain conversation and workout history across sessions
• Improve the accuracy and relevance of recommendations over time

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

4. How We Share Your Information

We share data only with the following service providers, strictly to operate the app:

• Supabase — database, authentication, and file storage. Data is encrypted at rest.
• Google Gemini (via Google Cloud) — AI analysis of workout videos and chat responses. Video data and chat context are sent to Google's API for processing and are subject to Google's data handling terms.
• Railway — application hosting. No user data is persistently stored on Railway; it is a compute layer only.
• Stripe — payment processing. We share only the information necessary to complete transactions. We do not store full card details.

We may disclose your information if required by law or to protect the rights, property, or safety of my300fitness, our users, or others.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

Videos you delete are removed from storage within 24 hours. Chat history can be cleared from within the app.

6. Your Rights and Choices

• Access and correction — you can view and edit your profile and data from the Settings page at any time.
• Deletion — delete your account at any time in the app under Settings → Delete account. That permanently removes your account and associated data (videos, workout logs, coach history, and related records) within 30 days, except where retention is required by law. You may also email privacy@300tech.cloud if you need help with deletion.
• Google Calendar disconnection — disconnect at any time in Settings → Google Calendar → Disconnect. To fully revoke access, also visit your Google Account permissions and remove my300fitness.
• Data portability — contact us to request an export of your data in a machine-readable format.

7. Security

We use industry-standard security measures including encrypted connections (HTTPS), encryption at rest for stored data (Supabase), and row-level security so each user can only access their own data. Optional Google Calendar OAuth tokens are stored server-side and are not shown in the app UI; Calendar access can be disconnected in Settings at any time.

No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at privacy@300tech.cloud.

8. Children's Privacy

my300fitness is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy at https://app.300tech.cloud/privacy and updating the "Last updated" date above. Continued use of the app after changes constitutes acceptance of the revised policy.

10. Contact

Questions about this Privacy Policy or requests regarding your data:

Email: privacy@300tech.cloud

Website: https://app.300tech.cloud