We collect the minimum data needed to run Northern Armor. We don't sell your data, show ads, or share your workout information with third parties for marketing purposes.
1. Who We Are
Northern Armor is a subscription-based fitness tracking application available at neurojarvis.cc and on Android via Google Play. We are operated from Edmonton, Alberta, Canada.
This Privacy Policy applies to both the web app and Android app. It complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and includes provisions for users in the European Union under the General Data Protection Regulation (GDPR).
Email address — Used for authentication, password resets, and service communications.
Display name — Used to personalize your in-app experience.
Fitness & Health Data
Age — Used to calibrate strength standards and workout recommendations.
Biological sex — Used for strength benchmarks and program personalization.
Height — Used for body composition calculations.
Body weight logs — Tracked over time to monitor body composition trends.
Workout sessions — Exercises, sets, reps, weights, RPE ratings, and session notes you log.
Strength levels — Progress metrics and personal records computed from your logged data.
Program data — Custom workout programs you build or import, including PDF/spreadsheet content processed for import.
Payment Information
Payment processing is handled by Stripe (web) and RevenueCat / Google Play (Android). We do not store credit card numbers. We receive subscription status and transaction identifiers only.
AI-Generated Content
Workout plans and AI coach responses — Generated by our AI coach powered by Anthropic's Claude API. Your fitness profile data (goals, equipment, history) is sent to Anthropic's API to produce personalized recommendations. AI-generated content is stored in your account until deletion.
Technical & Device Information
Device type and operating system — Collected for compatibility and support.
Browser or app version — Used for troubleshooting.
IP address — Logged by our infrastructure provider (Supabase) for security purposes.
App preferences — Unit system (lbs/kg), rest timer settings — stored locally on your device.
3. How We Use Your Information
To provide and operate the Northern Armor service
To generate AI-powered workout recommendations based on your goals and history
To sync your data across devices via Supabase
To process subscription payments via Stripe or RevenueCat/Google Play
To send transactional emails (password resets, subscription receipts) — no marketing emails
To improve app performance, debug issues, and ensure security
Legal bases for processing (GDPR): Contract performance (delivering the service you signed up for), legitimate interests (security, fraud prevention, service improvement), and consent where explicitly given (e.g., AI-powered features).
4. Third-Party Services
We share your data only with the service providers necessary to operate Northern Armor. We do not sell, rent, or trade your personal information to third parties for marketing purposes.
Supabase — Database hosting and authentication. Your workout data and account information is stored on Supabase-hosted infrastructure with row-level security. Privacy Policy →
Stripe — Payment processing (web). Stripe handles all billing and stores your payment method securely. We never see or store your card details. Privacy Policy →
Anthropic (Claude API) — AI workout generation and AI coach. Relevant fitness context (your goals, equipment, history, uploaded program text) is sent to Anthropic's API to generate responses. Privacy Policy →
Google Play — App distribution and in-app purchases (Android). Privacy Policy →
5. Data Storage & Security
Your data is stored on Supabase servers with row-level security policies ensuring only you can access your own data. All connections are encrypted in transit via HTTPS/TLS. Preference data is also cached locally on your device for offline access.
No system is 100% secure. In the unlikely event of a breach affecting your data, we will notify you as required by applicable law.
6. International Data Transfers
Our infrastructure (Supabase) may process data in the United States and other countries. Supabase implements appropriate safeguards for international data transfers, including standard contractual clauses where required by GDPR.
7. Data Retention
Account data (name, email): Retained until account deletion
Fitness data (workouts, weight logs, strength levels): Retained until account deletion
AI-generated content: Retained until account deletion
Payment records: Retained for 7 years as required by Canadian tax law
Technical logs: Retained for up to 90 days
When you delete your account, your data is permanently deleted from our systems within 30 days. Stripe and RevenueCat may retain billing records as required by applicable law.
8. Your Rights
For All Users (PIPEDA)
Under Canada's Personal Information Protection and Electronic Documents Act, you have the right to:
Access your personal information we hold
Correct inaccurate or incomplete information (editable directly in the app)
Withdraw consent to certain data processing (may limit service functionality)
Request deletion of your account and personal data
For EU/EEA Users (GDPR)
If you are located in the European Union or European Economic Area, you additionally have:
Right to erasure ("right to be forgotten")
Right to data portability — receive your data in a structured, machine-readable format
Right to object to certain processing activities
Right to restrict processing
Right to lodge a complaint with your local Data Protection Authority
Exercising Your Rights In-App
Export your data: Settings → Data (exports workout history as JSON)
Delete your account: Settings → Account → Delete Account
Update your profile: Editable directly in the app
9. Data Deletion Requests
To request deletion of your account and all associated personal data, or to exercise any other privacy right not supported directly in-app, email:
We will respond within 30 days. Identity verification may be required.
10. Children's Privacy
Northern Armor is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us at privacy@neurojarvis.cc and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy when our practices change. We will update the "Last Updated" date and, for material changes, notify you via email or an in-app notice. Continued use of the App after changes constitutes acceptance of the updated policy.