Privacy policy

1. Who we are

This Privacy Policy explains how Tici Commerce, Baku, Azerbaijan ("Tolyfit", "we", "us") collects, uses and protects your personal data when you use the Tolyfit mobile app (the "App"). We are the controller of that data.

We collect only what we need to run the App, plan your workouts and track your progress. We do not sell your personal data.

2. Data we collect

DataExamplesWhere it comes fromWhy
AccountName, email address, Apple or Google account IDSign in with Apple or GoogleCreate and secure your account
Profile and quiz answersFitness goal, experience level, equipment, training days, age, gender, height, weightYou, during onboarding and in SettingsGenerate and adjust your workout plan
Workout dataLogged workouts, sets, reps, weights, duration, notes, custom exercises and templatesYou, while using the AppSave your history, show progress and streaks, adjust your plan
Body measurementsBody weight and other measurementsYou, or Apple Health if you allow itTrack progress and estimate calories
Apple Health dataWorkouts, steps and body weightApple Health, only with your permissionShow your weekly activity and keep your weight history in sync
PurchasesSubscription status, product, trial and renewal dates (no card details)Apple or Google, via RevenueCatUnlock Tolyfit Pro and restore purchases
Device and notificationsPush notification token, time zone, app version, device model, OS versionYour deviceSend reminders and notifications, show the right times
Usage and diagnosticsScreens viewed, features used, crash reportsFirebase Analytics and CrashlyticsFix bugs and improve the App

We never see or store your payment card details. Apple or Google handles payment.

Share cards you create are generated on your device. They are saved to your photos or shared only when you choose to do so.

3. How we use your data

Legal bases (EEA and UK users). We process your data to perform our contract with you (providing the App and your subscription), with your consent (Apple Health access, push notifications, and health-related data such as body weight), and for our legitimate interests (security, analytics and improving the App). You can withdraw consent at any time.

4. Who we share data with

We share data only with service providers that help us run the App, under contracts that limit how they use it.

ProviderWhat it doesData it receives
Google Firebase (Auth, Realtime Database, Analytics, Crashlytics, Cloud Messaging)Sign-in, exercise library, usage analytics, crash reports, push notificationsAccount IDs, device and usage data, crash logs, notification token
Apple and GoogleSign-in and in-app paymentsSign-in and purchase data
RevenueCatSubscription managementAnonymous app user ID, purchase history
AnthropicWorkout plan generationQuiz answers and workout summaries, without your name or email
Google CloudHosts our servers at api.tolyfit.comAll data stored in your account

Apple Health data is never used for advertising, never sold, and never shared with third parties for marketing, in line with Apple's rules.

We do not sell your personal data and we do not show third-party ads. We may disclose data if required by law, or to a buyer if Tolyfit is sold or merged, in which case this policy continues to apply.

5. Retention, deletion and security

Retention. We keep your data while your account is active. Analytics and crash data are kept for up to [14 months] by Firebase.

Deleting your account. Go to Settings > Delete Account. We delete your profile, workouts, plans and measurements from our servers within [30 days], except where we must keep limited records by law (for example, purchase records). Data already written to Apple Health stays there until you remove it in the Health app. Deleting your account does not cancel your subscription; cancel it in your Apple or Google account settings.

Security. Data is encrypted in transit (HTTPS), and access to our servers requires your signed-in account token. No system is completely secure, but we take reasonable steps to protect your data.

International transfers. Our providers may process data outside your country, including in the United States. Where required, we rely on safeguards such as the EU Standard Contractual Clauses.

6. Your rights and choices

Depending on where you live (for example, under the GDPR, UK GDPR or California law), you can ask us to:

Email hello@tolyfit.com to make a request. We reply within 30 days. You can also complain to your local data protection authority.

Choices in the App and on your device:

7. Children, changes and contact

Children. The App is not intended for anyone under 16, and we do not knowingly collect data from them. If you believe a child has given us data, contact us and we will delete it.

Changes. We may update this policy. If the changes are material, we will tell you in the App before they take effect. The date at the top shows when it was last updated.

Contact. Tici Commerce, Baku, Azerbaijan, hello@tolyfit.com.