Zenith Software LLC, a Missouri limited liability company doing business as BYGG ("BYGG," "we," "our," or "us"), operates the BYGG application. This policy explains what we collect, why, who we share it with, and what control you have.
If you have questions, email support@byggfitness.app.
1. Who Can Use BYGG
BYGG is for adults. You must be at least eighteen (18) years old. We ask for your date of birth during setup and refuse to generate a program for anyone who reports being under eighteen.
We do not verify age. The date you enter is self-reported and we do not check it against any document or database. We do not knowingly collect information from anyone under eighteen. If you believe a minor has created an account, contact us and we will delete it.
2. What We Collect
2.1 Information you give us
Account: email address, and a password (stored only as a cryptographic hash we cannot reverse). If you sign in with Google, we receive your email address, name, and profile picture from Google — we do not receive your Google password.
About you: display name, date of birth, sex, height, body weight, and optionally body-fat percentage.
Health and training information:
- injuries, their severity, and any notes you add about them
- training experience and technique confidence
- available equipment
- training goals and body-composition direction
- sleep quality, stress level, job activity level, and other physical activity
- pregnancy or breastfeeding status, if applicable
- pull-up capability, where relevant
- free-text notes you choose to write
What you log: every set — exercise, weight, repetitions, and reps-in-reserve — plus session timing, completion, perceived exertion, and body-weight readings over time.
Meals you build: names and ingredient lists for meals you save. We do not record what you eat. BYGG has no food diary and no daily intake log.
Progress photos. If you take progress photos in the App, they're private to your account. They're stored encrypted, and no other user can see them. We never share them and never use them for anything — including advertising or analytics — unless you give permission for a specific photo. Deleting a photo removes it immediately. Deleting your account removes all of them.
Payment: your subscription status and billing history. We never see or store your full card number — payments are handled by Stripe.
Your agreement to our documents: when you tick the boxes at sign-up, we record which documents you accepted, the version of each, the date and time, and the IP address you accepted from. We keep that record because it is the proof that you agreed, and proof you can dispute later is not proof. It is kept for as long as your account exists and is removed when you delete it.
2.2 Information collected automatically
- basic technical information needed to serve the App (IP address, browser and device type)
- authentication events (sign-ins, password resets)
- error and performance logs
- which app version your device is running
On our public website — byggfitness.com, and our sign-up and sign-in pages — we also use cookies and similar technologies for analytics and advertising. These are described in Section 6.
We do not run advertising, remarketing, or analytics trackers on any page you see after signing in. Once you are signed in to the App, no advertising technology loads and no advertising company receives anything about what you do there. We do not show advertising in the App.
2.3 Sensitive information
Some of what we collect — injuries, body weight, body-fat percentage, pregnancy status — is health-related information. We treat it as sensitive and use it only to generate and adjust your program and targets. We never sell it, never share it with any advertising or marketing platform, and do not disclose it except as described in Section 5. No injury, body measurement, pregnancy status, training record, or nutrition target is ever sent to an advertising company.
We are not a health-care provider and are not a HIPAA covered entity. Your information is not protected health information under HIPAA.
3. Why We Collect It
| What | Why |
|---|---|
| Date of birth | Eligibility (18+) and the calorie equation |
| Sex, height, weight, body fat | Calorie and macronutrient estimates |
| Injuries | Removing exercises that would aggravate them |
| Equipment | Selecting only exercises you can perform |
| Goals, schedule, experience | Generating your program |
| Sleep, stress, activity | Adjusting training volume and calorie targets |
| Logged sets | Setting next week's weights and showing your progress |
| Body weight over time | Correcting your calorie estimate from what actually happens |
| Email address | Account access, password reset, service notices |
| Payment status | Providing the subscription you paid for |
| Consent record, including IP address | Showing which documents you agreed to, and when |
| Website activity, if you opted in to cookies | Measuring our advertising and improving the site |
| Email address, and that you're a customer | Sending you email about BYGG, until you unsubscribe |
We process this information to perform our contract with you, to comply with legal obligations, and — for security and service improvement — on the basis of our legitimate interests.
4. What We Do Not Do
- We do not sell your personal information for money.
- We do not sell, rent, or give your email address to another company for their own marketing.
- We never share health or training information for advertising. Injuries, body measurements, pregnancy status, logged sets, nutrition targets, and saved meals are never sent to an advertising or marketing platform.
- We do not run advertising or analytics trackers inside the App, on any page you see after signing in.
- We do not record or replay your screen or session.
- We do not upload our user list to Google, Meta, or any other platform to build advertising audiences.
- We do not show advertising in the App.
- We do not log what you eat.
- We do not share your health information with employers, insurers, or data brokers.
- We do not use your information to make automated decisions with legal or similarly significant effects.
5. Who We Share It With
We share your information only with service providers who need it to run the App, each bound by contract to protect it:
| Provider | Role | What it handles |
|---|---|---|
| Supabase | Database and authentication | All account and training data. Stored in the United States (US East). |
| Vercel | Application hosting | Serves the App; processes requests and holds operational logs. |
| Stripe | Payment processing | Card details, billing. We never receive your full card number. |
| Optional sign-in | Only if you choose Google sign-in. | |
| Resend | Email delivery | Confirmation, password-reset, service notices, and marketing email. |
| Cloudflare | Storage, domain routing, and security | Stores exercise demonstration videos and, in a private bucket, any progress photos you take. Also handles traffic routing, DNS, and protection against abuse. |
We may also disclose information where required by law, to enforce our Terms, to protect rights or safety, or in connection with a merger or sale of assets — in which case we will notify you before your information becomes subject to a different policy.
6. Advertising, Analytics, and Marketing
The line we draw. We advertise BYGG, and we measure whether our advertising works. We do that on our public website only. Nothing about your training, your body, or your health is ever used for advertising, and no advertising technology runs on the pages you see after you sign in.
6.1 On our public website
On byggfitness.com and on our sign-up and sign-in pages, we and our advertising and analytics partners use cookies, pixels, tags, and similar technologies to:
- understand how people find and move through the site;
- measure whether an advertisement led to a sign-up; and
- show BYGG advertisements to people who visited the site but did not subscribe, a practice commonly called remarketing.
The partners we work with fall into these categories, and the specific companies in each may change over time:
| Category | What it does | Examples |
|---|---|---|
| Tag management | Loads and manages the tags below | Google Tag Manager |
| Website analytics | Measures site traffic and behavior | Google Analytics |
| Advertising and remarketing | Delivers and measures our ads | Google Ads, Meta, LinkedIn |
| Customer relationship management | Manages inquiries and marketing contacts | Our CRM provider |
These partners may set their own cookies and may combine what they collect on our site with information they hold from other websites. This is considered "sharing" for cross-context behavioral advertising under California law, and you can opt out — see Section 8.
To measure whether an advertisement produced a sign-up, we may send an advertising platform a scrambled, irreversible version of your email address. We never send your name, your health information, or anything about your training.
6.2 Inside the App
No advertising, remarketing, or third-party analytics technology runs on any page behind sign-in. We do not record or replay your screen. We do not upload our user list to any advertising platform to build audiences or lookalikes.
The only companies that receive your account information are the service providers listed in Section 5, each of which needs it to run the App.
6.3 Marketing email
If you have a BYGG account, we may email you about our own product — new features, training content, and offers on BYGG. This is the only marketing we do with your information, and it comes from us.
What we use for it: your email address, and the fact that you are a BYGG customer. Nothing else. We do not use your training history, your injuries, your body measurements, your progress photos, or anything else about your health to decide what to send you or whether to send it.
We do not sell or share your information for anyone else's marketing. Your email address is not sold, rented, licensed, or given to another company for their own use, and we do not upload it to an advertising platform to build audiences.
You can unsubscribe at any time, using the unsubscribe link in any marketing email or by emailing support@byggfitness.app. Unsubscribing does not affect your subscription, your program, or anything else about your account — it stops the marketing email and nothing more. You will still receive transactional email: receipts, password resets, and service notices, which we have to send to operate your account.
6.4 Your choices
- Cookies. Our website presents a cookie choice on your first visit. You can change it at any time through the "Your Privacy Choices" link in the site footer, and you can block or delete cookies in your browser.
- Global Privacy Control. If your browser sends a GPC signal, we treat it as an opt-out of sharing for advertising.
- Advertising platforms. You can also opt out through optout.aboutads.info and through the ad and privacy settings offered by Google and Meta.
- Email. Unsubscribe from any marketing email, or email us. This does not affect your subscription.
7. How Long We Keep It
While your account is active: we keep your information for as long as you have an account, so your training history and progress remain available across programs.
When you delete your account: deletion is immediate and permanent in our live database. We remove your profile, goals, settings, injuries, equipment, body measurements, programs, sessions, logged sets, nutrition targets, saved meals, streaks, volume history, strength estimates, any progress photos you took, and your login credentials. There is no archive and no soft delete. We cannot restore a deleted account.
Your subscription. If you have an active subscription, deleting your account cancels it immediately and no further charges will be made. Cancellation takes effect at once rather than at the end of your paid month — because the account no longer exists, there is no remaining access to keep.
Backups. Our database provider takes automatic daily backups retained for seven (7) days. Deleted information persists in those backups until they age out, after which it is gone. We do not restore individual records from backups.
Logs. Operational and authentication logs are retained for seven (7) days.
Billing records. Stripe retains transaction records under its own policy, and we retain records of payments as required by tax and accounting law — typically seven years. These contain billing information, not training or health data.
On your device. Deleting your account clears your locally queued workout data, your saved email address, and your session. A small amount of non-identifying interface state — such as which tips you dismissed — may remain until you clear your browser data.
Google sign-in. If you signed in with Google, deleting your BYGG account does not revoke Google's authorization. Revoke it at myaccount.google.com/permissions.
8. Your Rights and Choices
Access and correction. You can view and edit your name, date of birth, sex, height, weight, and units in the App at any time. Training answers can be updated when you start a new phase.
Deletion. You can delete your account and all associated data from within the App. This is immediate and permanent.
Export. You can download a complete copy of your information at any time from Settings. You can also email support@byggfitness.app and we will send you one.
Marketing email. We may send you email about BYGG while you have an account. You can stop it at any time — use the unsubscribe link in any marketing email, or email us. This does not affect your subscription. Transactional email — receipts, password resets, and service notices — continues either way.
Advertising. You can opt out of cookie-based advertising on our website through the "Your Privacy Choices" link in the site footer, or by sending a Global Privacy Control signal from your browser. See Section 6.4.
State privacy rights
Depending on where you live, you may have rights to know what we collect, to obtain a copy, to correct it, to delete it, to opt out of the sale or sharing of it for advertising, and not to be treated differently for exercising these rights.
California residents. We do not sell your personal information for money. We do "share" limited website activity for cross-context behavioral advertising as the CCPA/CPRA defines that term — this is the cookie-based advertising on our public website described in Section 6.1, and you can opt out through the "Your Privacy Choices" link, through a Global Privacy Control signal, or by emailing us. We do not share sensitive personal information, including health information, for advertising, and we never have.
To exercise any right, email support@byggfitness.app. We will verify your identity through the email address on your account and respond within the time required by applicable law.
9. Security
We protect your information with:
- encryption in transit (HTTPS) and at rest
- database-level access rules ensuring your rows are readable only by your account
- password hashing — we never store passwords in a readable form
- restricted administrative access
No system is perfectly secure. We cannot guarantee absolute security. You are responsible for keeping your password confidential and for notifying us of any suspected unauthorized access.
If a breach affects your personal information, we will notify you and any required authorities as the law requires.
10. Children
BYGG is not directed at anyone under eighteen and we do not knowingly collect information from minors. If we learn we have, we will delete it promptly. Parents or guardians who believe a minor has provided information should contact us.
11. International Users
BYGG is operated from the United States and intended for use in the United States. Your information is stored and processed in the United States, which may not provide the same level of protection as your home country. By using the App you consent to that transfer.
12. Changes to This Policy
We may update this policy. Material changes will be notified by email or in-app notice before taking effect, and the "Last Updated" date above will change. Continued use after the effective date constitutes acceptance.
13. Contact
Zenith Software LLC dba BYGG 905 McGee St Suite 167 Kansas City, MO 64106
Email: support@byggfitness.app