Privacy Policy — SOLO Hero

SOLO Hero ("we", "us", "the app") is a fitness app designed for children ages 5–12 and their parents. This policy explains what we collect, why, and your choices. It applies to the SOLO Hero web app and mobile apps operated by Solo Hero Fitness.

1. Information we collect

Account data: parent email address and password hash (via Lovable Cloud / Supabase Auth).
Kid profile data (parent-provided): nickname, avatar, birth year, favorite color. This is entered by the parent, stored under the parent's account, and never shared publicly.
Subscription data: plan, status, renewal date, and Stripe customer ID. Payment card details are handled entirely by Stripe and never touch our servers.
Safety & check-in data: when a child taps "Something hurts" or answers the post-mission check-in, we store the move name, mission name, how the mission felt, and whether anything hurt. It is visible only to the parent on their account and is never scored, ranked, or shared.
Coach voice requests: workout cue and countdown text is sent to our text-to-speech provider to generate audio. Cue text is preauthored — a kid's nickname is never included — and we do not store the generated audio on our servers.
Diagnostics: if the app hits an error, we may record the error message, page path, and browser type so we can fix it. We do not attach kid profile data to error reports.
Referral link data: if you arrive through a partner or QR link, we log the referral code, the page you landed on, the referring site, and a coarse country. We do not store your IP address alongside it and we do not use it for advertising.
Usage data (device only): voice, energy, and workout preferences saved in your device's local storage. This never leaves the device.

2. What we do NOT collect

No third-party advertising SDKs.
No behavioral tracking or cross-site profiles.
No microphone, camera, or location data.
No contact list, photo library, or file system access.

3. How we use data

Only to run the service: authenticate you, remember your kid profiles, deliver workouts, process subscriptions, provide support, and detect abuse.

4. Data sharing

We share data only with providers required to run the service:

Supabase / Lovable Cloud — authentication and database hosting.
Stripe — payment processing.
OpenAI — coach voice text-to-speech (workout cue text only; no personal data).
Lovable — app hosting and error diagnostics.

Affiliate partners receive only aggregate referral and conversion counts. They never receive your email, your kid profiles, or any safety data.

We do not sell data. We do not share data for advertising.

5. Data retention & deletion

You can delete your account at any time from Account settings, or by emailing privacy@soloherofitness.com from your account email address. Deletion timelines:

In-app deletion: your account and all kid profiles are removed from the live app immediately.
Email requests: verified and actioned within 7 days, and always completed within 30 days. We email you a confirmation when it's done.
Backend records: permanently purged from our production database within 30 days.
Encrypted backups: residual copies expire on our normal backup rotation within 90 days, after which they are unrecoverable. Backups are never used for marketing or analytics.
Billing / tax records: retained by Stripe for up to 7 years where required by U.S. tax and anti-fraud law. These contain no kid profile data.
Security / abuse logs: anonymized and retained up to 12 months.

While your account is active, we keep data only for as long as needed to operate the Service. Full instructions are on our Delete Your Account page.

6. Children's privacy

See our separate Children's Privacy Notice for COPPA-specific details.

7. Security

Data is transmitted over HTTPS. Passwords are hashed by Supabase Auth. Access to the production database is restricted to authorized administrators.

8. International users

Data is stored on servers operated by Supabase. By using the app you consent to the transfer and processing of your data in those regions.

9. Changes

We will post updates to this page and update the "Last updated" date above.

10. Contact

Solo Hero Fitness
Texas, USA (full address available on request via email)
Email: privacy@soloherofitness.com