Privacy policy

• Account information. Name, email, and login credentials.
• Fitness and nutrition data. Stats and preferences you enter (like age, height, weight, goals, and dietary preferences), plus the workout and meal data you generate using the app.
• Health-related logs you choose to keep. The app includes optional personal trackers: a food diary (foods you log, portions, and the calorie and macro figures we calculate from them), a daily water log, body measurements, and a supplement and compound log where you record the name, amount, and timing of anything you are already taking. These logs are entered by you, stored under your account, visible to you, your assigned trainer, and MilSpec Wellness staff who support your account, and deleted with your account. We do not recommend, supply, or advise on any supplement or compound, and we never share these logs with advertisers or data brokers.
• Messages. Messages between you and your assigned trainer, if you have one.
• Feedback. If you choose to tell us why you are cancelling, or send us a suggestion, we keep your answer and any note you add with your account so Spec Fitness HQ can read it and reply.
• Forms and spam limits. When you send us a form on this site (a support message, a trainer access request, or saving your quiz match), we keep what you sent to answer you, and a scrambled form of your IP address for one day to stop spam. The quiz uses the same scrambled IP address, kept for one day, to limit spam.
• Subscription status.Whether you're in a trial or paid period, and your renewal date, as reported by the Apple App Store, Google Play, or our web payment processor, Square. We don't receive or store your card number or other payment details.
• App usage and device data. We collect analytics about how the app is used: screens viewed, features used, and neutral funnel events such as starting a workout or completing onboarding. With these events we collect a Firebase app instance ID and, for ad measurement only, your device advertising identifier. On iPhone we use that identifier only if you allow it in the tracking prompt. On Android we use your advertising ID unless you delete it, or opt out of ads personalization, in your device's Google settings. These events never include your name, your email, or anything about your body, your condition, or your goals.
• Quiz page (app.milspecwellness.com/start). The answers you pick, the program you were matched to, and your email if you choose to save your match with it. We also record four quiz steps (starting the quiz, finishing it, tapping to get the app, and seeing our help note when the app store did not open), the ad campaign tags in the link you followed, and a random ID for that visit. If you sign in to the app within 30 days with the same email, and we can confirm the email is yours (for example, you signed in with Google or Apple), the app fills in its setup questions with your saved answers, and you can change any of them. On Android, a short code for your answers, made of numbers only, goes through Google Play to the app when you install it, so the app can skip the questions you already answered. If your browser sends a Global Privacy Control signal, that code is not sent.

• To create and run your account
• To build, match, and display your training and nutrition plans
• To connect you with your assigned trainer and deliver messages between you
• To confirm your subscription status and give you access to the app
• To understand how the app is used and improve it, and to measure whether our own advertising works
• To respond to support requests

We don't use your fitness or nutrition data to train third-party AI models.

Your data is stored with Supabase, hosted in the United States. We use RevenueCat to validate purchases made through the Apple App Store or Google Play, and those stores handle the billing itself. On the web, subscriptions and coaching are billed by Square, which processes your payment; we do not receive or store your card number. We share only the information each processor needs to do its job.

We use Google Firebase Analytics to understand how the app is used, and the Meta SDK to measure whether our own advertising works. The Meta SDK counts app installs and a few in-app events, such as starting a trial or subscribing, and shares them with Meta for ad measurement. On iPhone it does this even if you tell the tracking prompt no, but then without your device advertising identifier. It uses that identifier only if you allow tracking. On Android it uses your advertising ID unless you delete it, or opt out of ads personalization, in your device's Google settings. Your health-related logs are never part of these events.

On our quiz page only (app.milspecwellness.com/start), we use the Meta Pixel to measure whether our own ads bring visitors. It sets Meta cookies (_fbp, and _fbc when you arrive from a Meta ad) and tells Meta about the page view and three quiz steps: starting the quiz, finishing it, and tapping to get the app. It never sends your answers, your email, or the program you were matched to. Our server also sends Meta those same three steps (never your answers, email, or program) with your IP address, browser details, the Meta cookie or ad click IDs, and the random visit ID, so Meta can match them to the ad you came from, unless your browser sends a Global Privacy Control signal. On the same page we use OpenPanel, a cookie-free analytics service, to count those same steps, and whether our help note for a store that did not open was shown, along with the ad campaign tags in the link you followed. If your browser sends a Global Privacy Control signal, neither one loads. No other page on this site uses either one, including the member pages.

When you search the food database, the words you type are sent to our food data providers (USDA FoodData Central, Open Food Facts and, where enabled, FatSecret) to return matches. Nothing that identifies you is sent with the search, and we do not keep a history of your searches. Food data shown in the app comes from USDA FoodData Central, Open Food Facts (licensed under the Open Database License) and, where enabled, is powered by fatsecret.

• We don't sell your personal data.
• We don't run ads in the app.
• We don't otherwise track you across other apps or websites. The exceptions are our own ad measurement, described in sections 01 and 03: the Meta Pixel on our quiz page, and the Meta SDK in the app. On the web, turning on Global Privacy Control in your browser keeps the pixel off. On iPhone, the Meta SDK counts installs and a few in-app events even if you tell the tracking prompt no, but it uses your device advertising identifier only if you allow tracking. You can turn tracking off any time in your device settings (Settings ->Privacy & Security ->Tracking). On Android you can delete your advertising ID, or opt out of ads personalization, in your device's Google settings. Deleting your account ends our collection entirely. Your health-related logs are never part of ad measurement and are never shared with advertisers or data brokers.

We keep your data while your account is active. You can delete your account and its data at any time, either in the app (Profile -> Delete account) or on the web (Settings -> Delete account).

When you delete your account, we remove your profile, fitness stats and preferences, and workout and meal data. Messages you've sent are kept as a permanent record but are unlinked from your identity. We also keep records we're legally required to retain, such as audit logs.

You can review and update most of your information directly in the app or on the web. For anything else, including a request to access or export your data, contact us and we'll respond.

Spec Fitness is not directed to and may not be used by anyone under 18. We don't knowingly collect information from minors.

We may update this policy from time to time. Material changes will be reflected by an updated effective date, and we'll notify you through the app or by email where appropriate.

MilSpec Wellness LLC
312 S Fern Pl
Broken Arrow, OK 74012
Email: care@milspecwellness.com