Privacy Policy

• Account information — your first name, email address and password when you create an account. Passwords are handled by our authentication provider; we never see them in plain text.
• Fitness profile — information you enter during setup, such as your goal, age, sex, height, weight, training experience, available days and session length, equipment, daily steps, stress level, eating-out habits, meals per day, foods you enjoy or dislike, and dietary restrictions.
• Training records — workouts you complete, sets, reps, loads, effort ratings, durations and notes, and your 28-Day Recomp program, schedule and progress.
• Nutrition records — food you log, nutrition targets and grocery lists.
• Progress information — body measurements you choose to record (for example weight, waist, chest, arm and thigh measurements, body-fat or muscle percentage) and weekly check-ins.
• Progress photos (optional) — Front, Side and Back photos you choose to upload, for example at the start and end of 28-Day Recomp. See "Progress photos" below.
• Purchase information — when you buy 20MIN FIT Pro or 28-Day Recomp: the email used at checkout, the amount, currency and payment status, Stripe transaction references (such as checkout, payment and customer IDs) and relevant dates (purchase, refund, dispute and claim dates). We do not receive or store your full card number or card security code; Stripe handles payment details.
• AI Coach conversations — the messages you send to the in-app AI Coach and its replies.
• Free Guide sign-up — your first name, email address and your consent to receive emails.
• Coaching applications — your name, email address, goal, what you're struggling with, what you'd like help with, and your consent to be contacted about your application.
• Messages to us — anything you send when you contact support.

Some of this information, such as weight, body measurements and dietary restrictions, relates to your health. Please only enter what you're comfortable sharing. It is used to personalize your fitness and nutrition experience.

• Basic technical information sent by your browser, such as IP address, browser type (user agent) and the page you came from.
• Campaign information in links you clicked, such as UTM tags, and Meta advertising identifiers (the _fbp and _fbc browser cookies).
• In-app usage events, such as completing a workout or starting a plan, used to understand and improve the product.

We use browser storage (cookies and local storage) to keep you signed in, remember your in-progress workout and app settings, and remember how you arrived at the site. We also use the Meta Pixel, described below. You can clear or block cookies in your browser settings; parts of the app, such as staying signed in, may not work without them.

We use Meta (Facebook/Instagram) advertising tools to measure our ads. The Meta Pixel runs on our website and records page views. When you sign up for the Free Guide, create an account or make a purchase, we may also send that event to Meta from our server (the Conversions API). Those events can include an encrypted (hashed) version of your email address and an internal account ID, plus your IP address, browser type, the page address and Meta cookie identifiers. For a 28-Day Recomp purchase, the Meta browser identifiers (the _fbp and _fbc cookies) present when you started checkout may be stored with the purchase and sent with the Purchase conversion event, along with the purchase amount and currency. We do not send your workout, nutrition, body measurement or progress photo information to Meta. Meta's use of this information is governed by Meta's own privacy policy.

• Stripe processes 20MIN FIT Pro subscriptions and 28-Day Recomp purchases. You enter payment details directly with Stripe; 20MIN FIT does not store your payment card information.
• We use purchase information to process purchases, handle refunds and payment disputes, and securely associate a purchase with your 20MIN FIT account.
• If you buy 28-Day Recomp without being signed in, you claim it by signing in and entering a one-time code we email to the address used at checkout. Codes expire quickly and are stored only in hashed (scrambled) form, never as the readable code.
• We keep records of claim requests and attempts, and short-lived rate-limit records, only as long as needed for security and to prevent abuse.

• Progress photos are optional. You choose whether to upload Front, Side or Back photos.
• Your photos are private to your account. They are kept in private storage and are not public.
• Photos are not analyzed by AI, are not used for marketing and are not shared publicly.
• When you view your photos, the app uses short-lived secure links that expire after a few minutes.
• Location, camera and other embedded metadata is removed when a photo is processed.
• Photos remain until you delete them in the app or your account is deleted. Replacing a photo deletes the previous one.

• To create and secure your account and let you sign in.
• To build and adapt your workouts, 28-Day Recomp program, nutrition targets and recommendations.
• To show your history and progress.
• To answer your questions through the AI Coach.
• To give you access to included resources, such as Recomp bonus guides.
• To review coaching applications and contact you about them.
• To send the emails you asked for, such as the Free Guide, and account emails.
• To process Pro subscription and 28-Day Recomp payments, refunds and disputes, and to link purchases to your account.
• To measure our advertising and improve the product.
• To prevent misuse and meet legal obligations.

We do not sell your personal information.

We rely on service providers to run 20MIN FIT. They receive only the information needed to do their job:

• Supabase — database, sign-in and private file storage (through Lovable Cloud).
• Lovable — website hosting, and the AI gateway that sends AI Coach questions and the relevant plan context to AI model providers to generate answers.
• Stripe — payment processing for 20MIN FIT Pro subscriptions and 28-Day Recomp purchases. You enter card details directly with Stripe; we don't store them.
• MailerLite — email list and emails for the Free Guide.
• Lovable email — delivery of account, purchase and claim-code emails.
• Resend — delivery of certain account emails.
• Meta — advertising measurement, described above.
• USDA FoodData Central and Open Food Facts — food and barcode lookups. Only the search term or barcode is sent, not your account details.

These providers may store or process information outside Canada.

We may share information if required by law, to protect the rights, safety or property of our users or others, or as part of a sale or transfer of the business. We may also share information with your permission.

We use access controls designed to limit access to personal records to authorized users and systems, and private files such as Recomp resources and progress photos are delivered through short-lived secure links. No online service can be guaranteed to be completely secure, so we can't promise absolute security.

We keep your account information and training history while your account is active so you can see your progress. Coaching applications and Free Guide sign-ups are kept while they're needed for those purposes. Progress photos are kept until you delete them or your account is deleted. Purchase and billing records may be kept longer where needed for financial or legal reasons. If you ask us to delete your account, we delete or de-identify associated 20MIN FIT data where reasonably possible, except where we need to retain certain records for legal, security, fraud-prevention, billing or other legitimate purposes.

• You can view and update your profile and records in the app.
• You can unsubscribe from marketing emails at any time with the unsubscribe link in any email.
• You can request access to, correction of, or deletion of your personal information by emailing chris@averagejoesfitness.com. Account deletion is currently handled by request.

20MIN FIT is designed for adults. It is not intended for children, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we'll delete it.

We may update this policy as 20MIN FIT changes. The date at the top shows the latest version. If we make significant changes, we'll let you know on the site or by email.

Questions about this policy or your information: chris@averagejoesfitness.com. Operator: Chris Friesen, operating as Average Joe's Fitness. The best way to reach us is by email at chris@averagejoesfitness.com.

See also our Terms of Use.