Mobile App Privacy Policy

This policy covers the Pentagon Strength mobile app and its connected account and training services. It does not cover the public marketing website, online coaching intake, or in-person training records. See the Website Privacy Policy or the In-Person Training Privacy Policy for those services.

1. Who operates the app

Pentagon Strength is operated by Nerio Cedeno in Florida, United States.

Privacy questions and requests: nerio023@gmail.com.

2. Information handled by the app

Account and preferences

• Username, email address, optional name information, and account language.
• A one-way password hash for password-based accounts. Pentagon Strength does not store a readable copy of your password.
• An Apple account identifier when you choose Sign in with Apple.
• Training goal, weight-unit preference, and other settings needed to configure the app.
• Acceptance records for applicable app terms and notices, which may include timestamp and IP address.

Training and progress

The app stores information you or your coach use to deliver and record training, including assigned plans, sessions, exercises, sets, repetitions, weight, effort or RPE, completion state, personal records, and progress derived from those records.

Subscriptions and notifications

• Apple processes App Store purchases. We receive purchase and subscription confirmations and identifiers needed to provide entitlement; we do not receive your complete payment-card number.
• If you enable push notifications, the app and Apple provide a device token used to route those notifications. You can disable notifications in iOS settings.

Information stored on your device

Authentication tokens are stored in the iOS Keychain. Non-sensitive preferences and local interface state may be stored in iOS preference storage. Removing the app may remove local data, but it does not by itself guarantee deletion of server-side account records.

3. How we use information

• Create and authenticate your account, including password recovery and Sign in with Apple.
• Display assigned training, record completed work, and calculate progress and personal records.
• Allow an authorized coach to assign or review training where that service applies.
• Manage App Store subscription entitlement and deliver service-related notifications.
• Maintain security, consent, diagnostics, and service records reasonably needed to operate the app.

We do not sell app personal information. The app does not include the Google Analytics, Meta Pixel, or TikTok Pixel web scripts used on public marketing pages.

4. Service providers

The app may open or display third-party exercise resources when you choose them. The provider receives the information normally sent by your device when opening that resource and applies its own privacy policy.

5. Retention and account deletion

Account and training information remains available while needed to provide the app and preserve the training history you request. You may initiate account deletion from the account controls in the app or contact us for assistance.

Deleting your account immediately removes authentication, refresh tokens, the server-side push registration, profile, app access state, assigned plans, workout sessions, logged sets, and personal records. After server confirmation, the app makes two attempts to remove stored APNs identifiers and clears language, notification and weight-unit preferences, in-memory account details, and cached fitness history. If secure storage cannot remove an APNs identifier after those attempts, late notification callbacks cannot reactivate remote registration or the deleted session, and the retained identifier does not authorize account access. The app also removes in-memory authentication authority and makes two best-effort attempts to delete each JWT from the iOS Keychain. Even if secure storage reports a JWT deletion failure, the deleted account cannot refresh or use those tokens, and a later server rejection triggers local cleanup again.

Existing transaction, purchase, consent, and separately contracted coaching records are retained without a live app-account link. Account deletion does not cancel an App Store subscription; manage or cancel it through your Apple account settings. Deleting the app from a device is not the same as deleting the account.

A public-website Lead or form submission is a separate record, even when it uses the same email address. Deleting the app account does not automatically delete that record by email matching. Request access, correction, or deletion for website records separately through the contact below so identity and applicable exceptions can be reviewed.

6. Your choices and rights

You can view much of your account and training information in the app. You may request access, correction, deletion, or a copy of personal information associated with you by emailing nerio023@gmail.com. We may verify your identity before fulfilling a request. Rights and exceptions vary by location.

You can control push notifications in iOS settings and manage an App Store subscription through your Apple account settings.

7. Security

• Supported app-to-server traffic uses HTTPS.
• Passwords are stored as one-way hashes rather than readable passwords.
• Authentication tokens are stored in the iOS Keychain.
• Server-side access is restricted to authorized users and services.

No connected service can guarantee absolute security. We use layered safeguards, investigate suspected incidents, and will provide legally required notices if an incident affects personal information.

8. Adults only

The app is intended for adults aged 18 and older. Contact us if you believe a minor created an account or submitted personal information.

9. Changes and contact

We may update this policy when the app, its providers, or legal requirements change. The date above identifies the current version. Material changes will be communicated through an appropriate app, account, or email notice when required.

Contact: nerio023@gmail.com.