Privacy Policy

Information We Collect

When you use Dextra, we collect information to provide and improve our personalized fitness coaching services. This includes:

• Account Information: Your name, email address, and password when you create an account.
• Profile Data: Age, gender, height, weight, and fitness goals you provide to personalize your experience.
• Health & Medical Information: Pre-existing health conditions (e.g., diabetes, hypertension, cardiovascular issues), current or past injuries, medications you are taking, and physician clearance status. This information is collected during onboarding and check-ins to ensure your training and nutrition programs are safe and appropriate for your individual needs.
• Body Measurements: Body weight, body fat percentage, and other physical measurements you record to track your fitness progress over time.
• Progress Photos: Photos you voluntarily upload to visually track your physical progress. These images are stored securely and are only accessible to you and your assigned coach.
• Workout & Nutrition Data: Exercise logs, workout history, performance metrics, nutrition plans, meal logs, and progress data you record through the app.
• Check-in Data: Responses to periodic questionnaires sent by your coach, including feedback on training, recovery, nutrition adherence, and overall well-being.
• Device Information: Device type, operating system, app version, and unique device identifiers. We also collect crash reports and performance diagnostics through Firebase Crashlytics to improve app stability.
• Usage Data: How you interact with our app, including pages visited, features used, and session duration.
• Camera & Photos: When you choose to take or upload photos (e.g., progress photos or images shared with your coach), we access your device camera and/or photo library solely for that purpose. We never access your camera or photos without your explicit action.
• Microphone & Voice Messages: When you choose to send a voice message to your coach, we access your device microphone to record the audio. Voice recordings are uploaded securely and are only accessible to you and your coach. We never record audio in the background.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our personalized fitness coaching services.
• Enable your assigned coach to create and adjust training programs and nutrition plans tailored to your goals, health conditions, and progress.
• Personalize workout recommendations and meal plans based on your goals and health profile.
• Track your fitness progress over time through measurements, photos, and performance data.
• Facilitate communication between you and your coach through check-ins and notifications.
• Send you push notifications about workouts, check-ins, and coaching updates via Firebase Cloud Messaging (with your consent).
• Analyze usage patterns to enhance app performance and user experience.
• Process payments and manage your subscription.
• Detect, prevent, and address technical issues and security threats.

Data Sharing

We do not sell your personal information to third parties. We may share your data in the following limited circumstances:

• Your Fitness Coach: When you are assigned a coach through Dextra, your coach will have access to your profile data, health information, body measurements, progress photos, workout logs, nutrition data, and check-in responses. This access is necessary to provide you with personalized coaching services. Coaches are bound by confidentiality obligations and may only use your data for the purpose of delivering coaching services.
• Service Providers: We work with trusted third-party services that help us operate Dextra, including: cloud hosting (for data storage), payment processing (for subscriptions), Firebase (for push notifications and crash reporting), and analytics providers. These providers only access data necessary to perform their services and are contractually obligated to protect your information.
• Legal Requirements: We may disclose information when required by law, court order, or governmental regulation.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
• With Your Consent: We may share data when you explicitly authorize us to do so.

Third-Party Services We Use

Our app integrates the following third-party services. Each has its own privacy policy governing how they handle data:

• Firebase (Google): We use Firebase Analytics to understand how users interact with the app, Firebase Crashlytics to detect and fix crashes, Firebase Cloud Messaging (FCM) to deliver push notifications, and Firebase Remote Config to manage app features. Firebase may collect device identifiers and usage data. See Firebase Privacy Policy.
• Google Sign-In: If you choose to sign in with Google, we receive your name and email address from Google. See Google Privacy Policy.
• Sign in with Apple: If you choose to sign in with Apple, we receive your name and email address (or Apple's anonymized relay address) from Apple. See Apple Privacy Policy.
• Cloudflare: We use Cloudflare R2 for secure cloud storage of media files (voice messages, images) and Cloudflare Images for image delivery. See Cloudflare Privacy Policy.

Health & Fitness Platform Data

With your permission, the Dextra app can read some health and fitness data from Apple Health (iPhone) or Health Connect (Android), and can save the workouts you finish in Dextra there. This connection is optional: Dextra works without it, and you can always log everything by hand.

• Your Choice: Dextra reads nothing until you tap Connect in the app. Your phone then shows its own Apple Health or Health Connect permission screen, where you choose which data types to allow. Dextra can only read or write the types you allow there.
• Data We Read: Steps; sleep (time actually asleep, not time in bed); active energy burned; distance; and floors climbed. On iPhone, distance means your walking and running distance. Health Connect does not separate distance by activity, so on Android it is the distance recorded in Health Connect. On iPhone only, Dextra also reads workouts recorded in Apple Health, solely to pick up the energy your watch measured during a workout you did in Dextra. On Android, Dextra does not read workouts.
• Data We Write: Workouts you finish in Dextra, saved as exercise sessions with their workout type, start time and duration. Dextra does not write distance, never writes calories, and writes no other health data.
• What Reaches Our Servers: Daily totals for each type you allow, not individual readings: up to 30 days back when you first connect, then each new day. For a workout you do in Dextra, we also receive one energy figure when your phone or watch measured one, and we record which data types you have allowed. All of this travels over an encrypted connection to Dextra's own servers.
• How We Use It: To show your daily activity and sleep in Dextra, with trends over time, and to show the measured energy of your Dextra workouts. If a coach is assigned to you in Dextra, they can see these figures to follow your progress. We never sell data from Apple Health or Health Connect, never use it for advertising, and never share it with third parties.
• Revoking Access and Deleting Data: You can revoke access at any time: on Android in Health Connect, under App permissions; on iPhone in Settings, under Privacy & Security, then Health. Dextra then stops reading new data. Data Dextra has already received stays in your account until it is deleted. To delete it, delete your account from your Profile in the app, or email support@dextra.tn. Deletion follows the Data Retention section below.
• Security: Data from Apple Health and Health Connect is encrypted in transit between the app and Dextra's servers.

Data Security

We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS/SSL), regular security audits, and access controls. Health-profile and assessment information you share with us during onboarding and check-ins also carries an additional layer of field-level encryption while stored. Health and medical data is treated with additional care and access is restricted to authorized personnel only. While no method of transmission or storage is 100% secure, we strive to use commercially acceptable means to protect your data.

Data Retention

We retain your personal data for as long as your account is active and as needed to provide you with our services. If you request account deletion, we will permanently delete your personal data, including health information, progress photos, and workout data, within 30 days of your request. Some data may be retained longer where required by law (e.g., billing records for tax compliance).

Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data, including all health and medical information.
• Export your data in a portable format.
• Opt out of marketing communications and push notifications at any time.
• Withdraw consent for data processing where consent is the legal basis.
• Request that your data no longer be shared with your coach.

To exercise any of these rights, please contact us at support@dextra.tn.

Children's Privacy

Dextra is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal data, please contact us at support@dextra.tn.

Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies help us remember your preferences, understand how you use our platform, and improve our services. The mobile app does not use cookies but may use similar local storage technologies for session management. For more detailed information, please see our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the “Last updated” date. For significant changes affecting how we handle health data, we will provide additional notice through the app or via email.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

• Email: support@dextra.tn
• Company: Dextra Fitness SARL, Tunis, Tunisia (online service)