Privacy Policy for BuffLog

Last updated: May 7, 2025

1. Introduction
BuffLog ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application BuffLog (the "App"). By installing or using BuffLog, you agree to the collection and use of information in accordance with this policy.

---

2. Information We Collect

2.1 Personal Information
    - Account Data: Email address, username (if you choose to create an account).
    - Device & Usage Data: Device model, operating system version, App usage logs, crash reports.

2.2 Health & Fitness Data
With your explicit consent, BuffLog may access and store:
    - Exercise Sessions: Workouts, sets, reps, weights (via Health Connect & Android Health APIs).
    - Heart Rate, Steps, Weight, Blood Glucose: Data imported from Google Health Connect or Android Health Connect.
    - Activity Metadata: Timestamps, durations, and segment details of exercise sessions.

2.3 Analytics & Diagnostics
    - Performance Metrics: Aggregate and anonymized analytics about App performance, feature usage, and errors to improve stability and user experience.

---

3. How We Use Your Information
    - Core Functionality: To track workouts, show performance analytics, load previous sessions, and export history.
    - Health Dashboard: To present a unified view of your exercise, heart rate, steps, weight, and glucose data.
    - Data Sync & Backup: To back up your workout logs to Firebase and sync sessions with Health Connect.
    - Improvements & Support: To troubleshoot issues, optimize features, and provide customer support.
    - Notifications & Updates: To send in-app notifications about new features, updates, or bug fixes (you may opt out at any time).

---

4. Data Sharing & Disclosure
    - Third-Party Services: BuffLog uses Firebase for secure cloud backup and Google Health Connect for health data integration. These services are bound by their own privacy policies.
    - Aggregate or De-identified Data: May be shared with analytics providers or for research, but such data cannot reasonably identify you.
    - Legal Requirements: We may disclose your information if required by law or to protect our rights, property, or safety (or those of our users).

---

5. Your Choices & Rights
    - Health Data Permissions: You can review, grant, or revoke health-related permissions (exercise, heart rate, steps, weight, glucose) in your device's permission settings at any time.
    - Account Information: If you created an account, you may update or delete your profile data via the App's Settings.
    - Export & Deletion: You may export your full workout history as CSV at any time. To permanently delete your data, contact us at privacy@bufflog.app.
    - Opt-Out: You may opt out of non-essential analytics and marketing communications via the App settings or by contacting us.

---

6. Data Security
We implement reasonable technical and organizational measures (e.g., encryption in transit and at rest, secure Firebase rules) to protect your data. However, no system can be 100% secure--please take care when sharing sensitive information.

---

7. Changes to This Privacy Policy
We may update this policy to reflect changes in our practices or regulations. When we do, we will revise the "Last updated" date and notify you via in-App notification or email (if you have an account).