Privacy Policy

1. Controller

The controller responsible for data processing on this website and in the Prime Progression app is:

Software Technologies Oskar Brunner
Waterloostr. 57
86165 Augsburg
Germany

Email: support@prime-progression.com

2. Website Hosting

This website is hosted via Firebase Hosting (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). When you visit this website, Firebase Hosting automatically logs standard server data including your IP address, browser type, referring URL, and access time. These logs are used solely for security and operational purposes and are deleted after a short retention period. The legal basis is our legitimate interest in the secure and reliable operation of the website (Art. 6(1)(f) GDPR).

Firebase Hosting is covered by the EU Standard Contractual Clauses. For more details, see Google's privacy policy at policies.google.com/privacy.

3. Fonts

This website uses the Outfit typeface, which is served directly from our own hosting infrastructure. No requests are made to Google Fonts CDN or any other third-party font service. No font-related data is transferred to external servers.

4. Cookies and Tracking

This website does not use tracking cookies, analytics cookies, or advertising cookies. We do not use Google Analytics, Meta Pixel, or any similar tracking tool. Only technically necessary mechanisms (such as session storage for UI state) may be used — these do not collect personal data and do not require consent under GDPR.

5. Mobile App — Data Processing

Workout and Nutrition Data

All workout logs, nutrition entries, body measurements, and training plans you create in the Prime Progression app are stored locally on your device using SQLite. This data does not leave your device unless you explicitly enable cloud sync.

Cloud Sync (Firebase)

If you create an account and enable sync, your fitness data is encrypted in transit (TLS) and stored in Firebase Firestore. This allows you to restore data after reinstalling the app. You can delete your account and all associated data at any time from within the app's settings. The legal basis is contract performance (Art. 6(1)(b) GDPR).

AI Coach

The AI Coach feature uses Google Gemini (Google LLC). When you send a message to the AI Coach, your query and relevant fitness context (e.g. recent workout data) are sent to Google's Gemini API to generate a response. No personally identifiable information beyond what you explicitly share in the chat is transmitted. The legal basis is contract performance (Art. 6(1)(b) GDPR).

Health Data (HealthKit)

On iOS, Prime Progression may request access to Apple HealthKit data (heart rate, sleep, HRV, resting heart rate) to calculate your recovery score. This data is read from HealthKit locally on your device and is never uploaded to our servers. You can revoke HealthKit permissions at any time in iOS Settings → Privacy & Security → Health.

In-App Purchases

Premium subscriptions are handled by RevenueCat (RevenueCat, Inc., 633 Tasman Drive, San Jose, CA 95134, USA) and Apple's App Store. We receive anonymized purchase confirmation; payment details are handled exclusively by Apple and RevenueCat. For details, see RevenueCat's privacy policy at revenuecat.com/privacy.

6. Your Rights under GDPR

You have the following rights regarding your personal data:

Right of access (Art. 15 GDPR) — you can request a copy of all personal data we hold about you.

Right to rectification (Art. 16 GDPR) — you can request correction of inaccurate data.

Right to erasure (Art. 17 GDPR) — you can request deletion of your data ("right to be forgotten").

Right to restriction (Art. 18 GDPR) — you can request that we limit processing of your data.

Right to data portability (Art. 20 GDPR) — you can request your data in a machine-readable format.

Right to object (Art. 21 GDPR) — you can object to processing based on legitimate interests.

To exercise any of these rights, contact us at support@prime-progression.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

7. Data Retention

Local app data is retained on your device until you delete it or uninstall the app. If you have an account with cloud sync, your data is retained until you delete your account. Server logs from Firebase Hosting are typically deleted within 30 days. We do not retain personal data longer than necessary for the stated purposes.

8. Contact

For privacy-related inquiries, please contact:

Software Technologies Oskar Brunner
Waterloostr. 57, 86165 Augsburg, Germany
Email: support@prime-progression.com