Privacy Policy
Last updated: October 1, 2026
The short version: we collect what Regimen needs to plan your training and nutrition, store it in Canada, never sell it, never show ads, and let you export or delete it. Progress photos are private to you.
Who we are
Regimen (“Regimen”, “we”, “us”) is a fitness and nutrition planning app available at regimenfit.ca, operated by MCreative Studio in Canada. Questions or requests: support@regimenfit.ca.
What we collect
| Type | Examples | Why |
|---|---|---|
| Account | Email address, password (stored hashed by our authentication provider), or your Google account name and email if you sign in with Google | To create and secure your account |
| Profile and goals | Name, age, sex, height, weight, goal, activity level, training days, equipment, food preferences, allergies | To calculate your targets and build your plan |
| Training | Workout plans, schedule, logged sets, weights, reps, personal records | To track progress and set next-session targets |
| Nutrition | Meals, foods, portions, recipes, water, grocery lists | To plan meals and track intake |
| Progress | Check-ins, body measurements, progress photos | To show your progress over time |
| Subscription | Plan, trial and renewal status. Card details are handled by our payment provider and never reach us. | To give you access to Regimen Pro |
| How you found us | The website or campaign that brought you to Regimen (for example “instagram”), saved once when you sign up | To understand which channels bring people to Regimen |
| Technical | IP address and basic request logs kept by our hosting providers | Security, abuse prevention and keeping the service running |
Body measurements, photos and health-related goals can be sensitive. We use them only to provide Regimen to you.
How we use it
- To provide the app: your plan, calculations, schedule, reminders and analytics.
- To manage your subscription and send essential account emails (for example, sign-in links and password resets).
- To keep Regimen secure and fix problems.
We do not sell or rent your personal information, we do not use it for advertising, and we do not use your data to train AI models.
Where it's stored and who processes it
Your account data and progress photos are stored with Supabase in its Canada (Central) region. Photos are kept in private storage and are only shown to you through short-lived links. We use these service providers, who process data only to provide their service to us:
- Supabase: database, authentication, file storage and server functions (Canada).
- Stripe and RevenueCat: subscription checkout, billing and subscription status. Your card details go directly to Stripe.
- Google: only if you choose “Continue with Google”, to sign you in.
- GitHub Pages and Cloudflare: hosting and delivering this website.
- Google Fonts: the typeface used on this website.
- USDA FoodData Central: food searches are sent through our server; only the search words are shared, not who searched.
- Open Food Facts: barcode numbers you scan are looked up in this public food database.
Some providers may process data outside Canada (for example, in the United States), where it may be accessible to authorities under local law. We choose providers with strong security practices and contractual privacy commitments.
Calendar sync
If you turn on calendar sync, Regimen creates a private link to your workout schedule. Anyone with the link can see your workout names, times and exercises, so keep it private. You can turn it off anytime in the app, which makes the link stop working.
Your choices and rights
- Access and export: download your data from Fitness Settings → Data & privacy → Export my data.
- Correct: edit your profile and entries at any time in the app.
- Delete: delete selected history in Fitness Settings → Data & privacy, or email us to delete your account and all its data.
- Withdraw consent: stop using Regimen and ask us to delete your account at any time.
We respond to requests within 30 days. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.
Retention
We keep your data while your account is open. If your subscription ends, your data is kept so you can pick up where you left off. When you delete your account, we delete your data from our live systems within 30 days; backups are overwritten on a rolling basis.
Security
Data is encrypted in transit. Every table is protected so that a signed-in user can only read and write their own records. No method of storage or transmission is completely secure, but we work to protect your information.
Children
Regimen is intended for adults and is not directed to children under 16. We do not knowingly collect information from children under 16.
Cookies and local storage
We don't use advertising or tracking cookies. The app stores your sign-in session and a local copy of your data in your browser so it loads quickly and works offline.
Changes
If we make material changes to this policy, we will update the date above and let you know in the app or by email.
Contact
Email support@regimenfit.ca.