Section 1
Data We Collect
Account & Profile Data
When you create an account or complete onboarding, we collect:
Email address — used for authentication via Firebase Auth.
Personal profile: name, age, gender, height, weight, fitness goals, experience level, injury status, dietary preferences, and preferred language — stored in your private cloud account on Google Firestore.
Health & Fitness Data
Mola stores your fitness activity data in your secure, private cloud account to enable AI personalization and progress tracking:
All of this data is stored in Google Firestore, a cloud database, and is accessible only by your authenticated account. No other user or third party can read your data.
Device & Technical Data
When you use the app, we may automatically collect device model, OS version, app version, and crash/stability data to maintain app performance.
Location Data (GPS)
If you use GPS-based cardio tracking, we access your device's precise location. Location is used solely for calculating distance, pace, and route data during recorded sessions. This requires ACCESS_FINE_LOCATION and FOREGROUND_SERVICE_LOCATION permissions on Android.
You may deny or revoke location permission at any time in your device settings. Core app functionality remains available without location access.
Camera & Photos
Nutrition Scan and Form Analysis (Pro) features require camera access. Images are processed via our secure AI pipeline for immediate feedback. Images are not permanently stored on our servers.
User Feedback & Support Submissions
If you submit feedback or a support request through the in-app "Contact Support" form, we collect the text of your message, your user ID, email address, and the app version. This data is stored in a secure Firestore collection and is used solely to respond to your inquiry and improve the Service.
Section 2
How We Use Your Data
| Purpose | Data Used |
|---|---|
| Account creation & authentication | Email, Firebase UID |
| AI-personalized workout & meal plans | Profile, workout history |
| Syncing fitness history across sessions | All fitness logs |
| Nutrition tracking & meal planning | Nutrition logs, food database |
| GPS cardio session tracking | Precise device location |
| Nutrition label & form analysis | Camera images (temporary) |
| Serving advertisements (free tier) | Device advertising ID, usage data |
| App stability & crash monitoring | Technical device data |
| Processing shop orders (future) | Name, shipping address, order details |
Section 3
AI Processing — Google Gemini
Mola uses Google Gemini (via Google Cloud Functions) to generate personalized workout programs, meal plans, mobility routines, and exercise alternatives.
This data is processed in-transit and used solely to return your personalized protocol. We do not use your data to train AI models.
Google's AI data handling is governed by Google's Cloud Services Privacy Notice.
Section 4
Advertising (Free Tier)
The free tier of Mola is supported by ads served through Google AdMob. AdMob may collect:
This data is used by Google to show relevant advertisements and measure ad performance. To opt out of personalized ads on Android: Settings → Google → Ads → "Opt out of Ads Personalization".
Advertising data is governed by Google's Privacy Policy.
Section 5
In-App Purchases
All in-app purchases — including Mola Pro subscriptions (Monthly, Yearly) and single-use AI analysis credits (Form Analysis, Physique Analysis) — are processed entirely through the Google Play Store or Apple App Store. We do not collect or store any payment card information. Prices are displayed in your local currency at checkout and may vary by region.
RevenueCat Subscription Management
Subscription management and purchase verification are facilitated by RevenueCat, Inc., a third-party subscription infrastructure provider. When you make a purchase or your subscription status is checked, RevenueCat receives:
This data is used solely to verify your entitlement to Pro features and to enable cross-platform subscription syncing (e.g., a purchase made on iOS is recognized on Android). RevenueCat does not receive your name, email, fitness data, or health information.
RevenueCat's data handling is governed by their Privacy Policy.
Section 5b
Shop & Print-on-Demand (Future Feature)
Mola Fitness has a planned in-app merchandise shop powered by a third-party Print-on-Demand (POD) fulfillment service. When the shop launches, we will collect the following additional data solely to process and fulfill your orders:
Full name · Shipping address (street, city, state/province, ZIP/postal code, country) · Email address (for order confirmation and tracking) · Items and quantities ordered
Third-Party Fulfillment
Your name and shipping address will be shared with our Print-on-Demand fulfillment provider solely for the purpose of manufacturing and delivering your order. We will disclose the specific provider when the shop is launched. The fulfillment provider's privacy practices are governed by their own privacy policy.
Payment Processing
Payment for physical goods will be processed by a third-party payment processor (such as Stripe or the respective app store). We do not collect or store your payment card number, CVV, or full billing details. We receive only an order confirmation and shipping details.
Order Data Retention
Order records (name, address, items purchased) are retained for a minimum of 3 years for legal, tax, and accounting compliance requirements, even after account deletion. You may request a copy of your order history by emailing fitcraftsdev@gmail.com.
Section 6
Firebase Infrastructure
Our backend is powered by Google Firebase, including:
| Service | Purpose |
|---|---|
| Firebase Authentication | Manages login sessions and user identity |
| Cloud Firestore | Stores your profile, workouts, logs, and nutrition data — encrypted, UID-isolated |
| Firebase Cloud Functions | Securely routes AI requests to Google Gemini without exposing API keys to the client |
| Firebase Crashlytics | Collects anonymous crash reports, stack traces, and device metadata to monitor app stability |
| Firebase Hosting | Serves the app's web assets |
Firebase's data handling is governed by Google's Firebase Privacy information. Your Firestore data is stored in the us-central region. Users in the EU should be aware their data is stored in the United States.
Section 8
Data Retention
| Data Type | Retention Period |
|---|---|
| Account & profile | Until account deletion request |
| Workout & fitness logs | Until account deletion request |
| Nutrition & water logs | Until account deletion request |
| Shop order records (name, address, items) | Minimum 3 years (legal/tax compliance) |
| Ad tracking data | Managed by Google AdMob (see their policy) |
You may request deletion of your data at any time by emailing fitcraftsdev@gmail.com with the subject "Data Deletion Request." We will process your request within 30 days.
Section 9
Your Rights
All Users
Access — Request a copy of your stored personal data.
Deletion — Request permanent deletion of your account and all associated data.
Correction — Update your profile data at any time within the app.
European Users (GDPR)
If you are in the EEA, UK, or Switzerland, you have additional rights:
Legal basis for processing: contractual necessity (to provide the service) and legitimate interests (app stability and improvement).
U.S. State Privacy Rights (Texas, California, Virginia, etc.)
Depending on your U.S. state of residence—including under the Texas Data Privacy and Security Act (TDPSA) and California Consumer Privacy Act (CCPA)—you have additional privacy rights. You have the right to confirm whether we process your data, access it, correct inaccuracies, obtain a portable copy, and request its deletion. You also have the right to opt out of processing for targeted advertising.
To exercise any of these rights, contact: fitcraftsdev@gmail.com
Section 10
Children's Privacy (Strict 18+ Policy)
In compliance with the Texas Securing Children Online through Parental Empowerment (SCOPE) Act and the Texas App Store Accountability Act (TASAA), Mola Fitness is strictly restricted to users who are 18 years of age or older. We do not permit users under 18 and do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us immediately for deletion.
Section 11
Security
We implement industry-standard security measures to protect your data:
Section 12
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you via in-app notification or email. The "Effective Date" at the top of this page reflects the most recent update.
Section 13
Contact Us
For questions, concerns, or data requests regarding your privacy:
Email: fitcraftsdev@gmail.com
This policy applies to the Mola Fitness mobile application available on the Google Play Store and Apple App Store, and the Mola Fitness website.