Effective Date: August 4, 2025
App Name: Red Moon Fitness
Developer Contact: Roman Rabourn
Contact Email: roman@redmoonfitness.com
1. Introduction
Red Moon Fitness ("we", "us", "the App") is a community fitness app where a designated poster shares daily workouts, and users can interact via comments and optional blogs. This Privacy Policy explains what data we collect, how we use it, how we protect it, and your privacy rights. By using the App, you accept this policy and agree to the collection and use of information as described.
2. What Information We Collect
a) Account and Profile Information
- Email address: Used for authentication via Firebase Auth.
- Nickname: Displayed to others.
- Unique User ID: Created by Firebase to correlate account data.
- Profile photo (optional): Uploaded image stored on Firebase Storage for display in the app.
- About Me: A public profile section shown in its own app tab, editable only by the main poster/admin and visible to all users. Regular users do not have an About Me section.
b) User-Generated Content
- Workouts: Title, description, images, and any video content posted by the designated poster.
- Comments and replies: Text (and possible embedded image/video URLs) shared by users.
- Blog posts: Optional posting by the poster, with associated content.
c) Reporting Data
- If you report a user, workout, blog, or comment, we collect:
- Reporter's and reported user's nickname, email (from account), and profile image URL (optional).
- Reason for report and any selected offending comment(s).
- Additional note explaining why you were offended.
This data is saved in Firestore and triggers an email notification to our moderators via Firestore/Cloud Functions and Brevo SMTP service.
d) Analytics & Technical Data
- Usage analytics (non-identifying): screen visits, session lengths, and feature usage via Firebase Analytics.
- Crash reports & device model (anonymous) via Firebase Crashlytics.
- We do not collect health/biometric data, precise location, or advertising identifiers unless expressly indicated in the App.
e) Push Notification Tokens
- Device tokens for push and local notifications, stored so we can deliver workout reminders or alerts.
3. Why We Collect This Data
We use your information to:
- Authenticate and manage user accounts.
- Facilitate core functions like posting workouts, comments, and user profiles.
- Show workouts, comments, and blogs to the community.
- Send email notifications to app moderators when reports are submitted.
- Send push notifications for app activity or reminders.
- Improve app performance, detect glitches/crashes, and make usage improvements-via analytics.
- Moderate content, handle reports, and maintain app security and integrity.
We do not sell or rent your personal data to third parties or advertisers.
4. Data Sharing & Third-Party Processors
Your data may be processed by the following trusted services:
- Firebase by Google (Authentication, Firestore, Storage, Cloud Functions, Analytics, Crashlytics, AppCheck). Firebase acts only as a data processor.
- Brevo (Sendinblue): Used to send report notification emails via SMTP. We only share Firestore email documents; no credentials or personal data is exposed to Brevo staff.
- We may disclose information if required by law, to prevent misuse of the app, or to comply with legal obligations.
5. Data Retention
- Your account data, user-generated content, and reports remain stored until you delete your account or content. Deleted data may persist in backups for up to 60 days.
- We may retain report logs and emails for longer to comply with legal or moderation needs.
- Analytic data is anonymized and aggregated and not linked to personal identifiers whenever possible.
6. Your Rights & Controls
You are entitled to:
- View your nickname and profile photo within the app.
- Delete your account and all personal data from within the app (or email us to request deletion).
- Disable push notifications through your device settings.
- Opt out of analytics collection by contacting us (some minimal data may still be collected for crash reporting).
7. Children's Privacy (COPPA)
This App is not intended for use by children under 13. We do not knowingly collect data from a child under 13. If we gain knowledge of data collected inadvertently from a child under 13, we will delete it promptly.
Parents may request data deletion by contacting us.
8. Security Measures
- We use HTTPS encryption and strong authentication safeguards.
- Firebase Security Rules enforce access control on Firestore and Storage. We also enforce Firebase AppCheck to protect backend resources.
- Brevo SMTP credentials are stored as secrets and never included in client code. However, no system is flawless; use the app at your own risk.
9. International Users & Data Transfers
If you are in a country outside the U.S., your data may be transferred and processed on servers in the U.S. by Firebase and Brevo. By using the App, you consent to these transfers.
10. Legal Jurisdiction & Changes
- This Privacy Policy is governed by U.S. law.
- We may update this policy in response to changes in services or regulations. Any major updates will be highlighted in the app, and the Effective Date at the top will be revised.
11. Contact Information
If you have questions, concerns, or requests to access or delete your data:
Contact Name: Roman Rabourn
Email: roman@redmoonfitness.com
We use cookies to analyze website traffic and optimize your website experience. By accepting our use of cookies, your data will be aggregated with all other user data.