Privacy Policy

DudleyGym, a product wholly owned and operated by DH76 LLC (“we,” “our,” or “us”), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the DudleyGym application and website (collectively, the “Service”).

Account Information:

• Name and email address
• Password (stored as a cryptographic hash, never in plain text)
• Date of birth (optional)
• Phone number (optional, for SMS features)

Fitness Data:

• Fitness goals and experience level
• Height and weight (optional)
• Injury and limitation flags
• Workout history: exercises, sets, reps, weights, duration, and ratings
• Cardio session data: type, distance, speed, and calories

Gym and Equipment Data:

• Gym names and equipment inventory
• Shoe tracking data (brand, model, mileage)

AI Interaction Data:

• Trainer conversation logs (questions asked and responses given during workouts)
• Trainer preferences and selection history

Technical Data:

• IP address (collected for consent records)
• Browser type and device information
• Session tokens and authentication data

• Workout Generation: Your fitness profile, goals, injury flags, equipment, and workout history are sent to our AI system (powered by Anthropic Claude) to generate personalized workouts.
• Progressive Overload: Your historical workout data is used to automatically adjust weights and difficulty over time.
• SMS Notifications: If you opt in, your phone number is used to send post-workout summaries and nightly trainer previews via Telnyx.
• Workout Sharing: If you enable workout sharing, aggregate session statistics (duration, exercises, volume) are shared with friends you designate.
• Legal Compliance: Consent records and IP addresses are stored to comply with liability and waiver requirements.

We use the following third-party services to operate DudleyGym:

• Anthropic (Claude AI): Generates personalized workouts and trainer responses. Your fitness profile and workout history are shared with Anthropic to generate content. Anthropic's privacy policy applies to data processed by their systems.
• Neon: Serverless PostgreSQL database hosting. All user data is stored in Neon's infrastructure.
• Vercel: Application hosting and deployment platform.
• Telnyx: SMS messaging service (only if you opt into SMS features). Phone numbers are shared with Telnyx solely for message delivery.
• Auth.js: Authentication framework for secure sign-in.

We do not sell, rent, or trade your personal information. We share data only in these circumstances:

• With your consent: Workout summaries shared with designated Workout Buddies (opt-in only).
• Service providers: Third-party services listed above, solely to operate the Service.
• Legal requirements: If required by law, subpoena, or legal process.
• Safety: To protect the rights, safety, or property of DudleyGym or its users.

We retain your account and fitness data for as long as your account is active. Workout history is retained indefinitely to support progressive overload tracking and personal records. If you delete your account, all associated data is permanently removed within 30 days.

We implement industry-standard security measures including:

• Passwords hashed with bcrypt
• All data transmitted over HTTPS/TLS
• Database connections secured with SSL
• Authentication tokens with automatic expiration

No method of electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability (receive your data in a structured format)
• Withdraw consent for optional features like SMS notifications

To exercise any of these rights, visit our Contact page.

DudleyGym uses artificial intelligence to generate workout plans, exercise recommendations, and trainer responses. AI-generated content is based on evidence-based exercise science guidelines but is not a substitute for professional medical advice, diagnosis, or treatment. Always consult a qualified healthcare provider before starting any exercise program or if you have concerns about your health.

DudleyGym is not intended for users under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, visit our Contact page.