Privacy Policy

Effective Date: May 2, 2026 · Last Updated: May 2, 2026

PBG Solutions LLC (referred to as "we," "us," or "our"), operating under the brand name PBG Fitness, respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data when you use our mobile applications, websites, or related services (together, the "Service").

We collect sensitive health and fitness information. We treat that information with the heightened care it deserves. We do not sell it. We do not share it with advertisers, insurers, or data brokers. We give you full control to access, export, or delete it at any time.

By creating an account or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Who We Are

PBG Fitness is a fitness, nutrition, and body composition tracking application offered by PBG Solutions LLC, a limited liability company organized under the laws of the State of Georgia, United States.

Contact for privacy matters:
PBG Solutions LLC
Email: [email protected]
Website: pbgfitness.com

2. Information We Collect

We collect the following categories of information.

2.1 Information You Provide Directly

When you create an account or use features of the Service, you may provide us with:

• Full name (first and last)
• Email address
• Password (stored only as a salted, hashed value, never in plain text)
• Preferred language (English or Spanish)
• Date of birth or age (where required for age verification)
• Body weight, height, and body measurements
• Body composition data, such as body fat percentage and muscle mass estimates
• Progress photos and other images you upload
• Workout history including exercises, sets, repetitions, weights, and rest times
• Meal logs including foods consumed, portion sizes, photos of meals, and macronutrient details
• Recovery activity logs
• Personal goals such as target weight, training objectives, or injury notes
• Messages you send to our AI Assistant feature
• Feedback, support requests, and other communications you send us

2.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Device information, including device model, operating system, unique device identifiers, and mobile network data
• Usage information, including features accessed, time spent, screens viewed, and interaction patterns
• Diagnostic and crash data
• Approximate location based on IP address (we do not collect precise GPS location unless you explicitly grant that permission for a specific feature)
• Date and time stamps of your activity

2.3 Information from Third-Party Services

If you sign up or log in using a third-party service such as Apple Sign In or Google Sign In, we receive the basic profile information that service shares with us, typically your name and email address.

If you connect optional health platforms such as Apple Health or Google Fit, we may receive workout, weight, and activity data from those platforms with your permission.

2.4 Payment Information

When you purchase a subscription, payment is processed by Apple (through the App Store) or Google (through Google Play). We do not collect or store your payment card information. We receive limited transaction details from Apple or Google, including your subscription status, plan tier, and renewal dates.

3. How We Use Your Information

We use the information we collect to:

• Create and maintain your account
• Provide, personalize, and improve the Service
• Power the AI Assistant, AI Plan Builder, and meal photo analysis features
• Process subscription payments and manage your subscription status
• Send transactional communications such as email verification, password reset notifications, trial expiration reminders, and billing confirmations
• Respond to your support inquiries
• Detect, investigate, and prevent fraudulent, unauthorized, or illegal activity
• Comply with legal obligations and enforce our Terms of Service
• Generate aggregated, deidentified analytics about how the Service is used

We do not sell your personal information to third parties. We do not use your personal information for advertising targeting purposes. We do not share your health and fitness data with insurers, employers, advertisers, or data brokers under any circumstances.

4. AI Features and Third-Party AI Processing

PBG Fitness uses artificial intelligence to power certain features, including the AI Assistant chat, the AI Plan Builder, and the meal photo analysis feature. To deliver these features, we send the relevant inputs (such as your chat messages, the photo you submit, or the answers you provide during plan generation) to Anthropic, PBC ("Anthropic"), the operator of the Claude AI model.

Anthropic processes this data on our behalf as a service provider under our paid API agreement. Anthropic does not use your data to train its models when accessed through this integration. Anthropic's privacy practices are governed by its own policies, available at anthropic.com.

Important limitations of AI features:

• AI-generated content is not medical, nutritional, training, or therapeutic advice. It is information generated by an automated system and may be incomplete, inaccurate, or inappropriate for your specific situation.
• The AI Assistant is not a doctor, registered dietitian, certified personal trainer, physical therapist, mental health professional, or any other licensed expert.
• Always consult a qualified human professional before making decisions about your health, training, nutrition, supplementation, injury recovery, or medical care.
• AI responses may contain errors. Verify important information independently before acting on it.
• Conversations with the AI Assistant are stored to provide continuity and memory across sessions. You can delete this history at any time from within the application.

By using AI features, you acknowledge and accept these limitations and agree that PBG Solutions LLC is not liable for any decisions you make based on AI-generated output. See our Terms of Service for the complete liability terms.

5. Sensitive Health and Fitness Data

PBG Fitness collects information that may be considered sensitive health data under applicable laws. This includes body weight, body measurements, body composition estimates, workout activity, nutrition logs, recovery data, progress photos, and information you share with the AI Assistant about injuries, conditions, or symptoms.

We treat this category of data with heightened care.

5.1 How We Protect It

• Sensitive health data is encrypted at rest on our servers using platform standard encryption.
• Sensitive health data is encrypted in transit using TLS.
• Access to sensitive health data is limited to authorized personnel and automated systems strictly necessary to operate the Service.
• Progress photos can be additionally protected with a PIN code or biometric lock (Face ID or Touch ID) within the application, requiring authentication every time the photo section is accessed.
• We do not retain sensitive data we no longer need.

5.2 What We Will Never Do With It

• We will never sell sensitive health data.
• We will never share sensitive health data with advertisers, ad networks, or data brokers.
• We will never share sensitive health data with insurance companies, employers, or background check services.
• We will never use sensitive health data to make decisions about credit, employment, or insurance eligibility.
• We will never use sensitive health data for any purpose unrelated to operating the Service for you, except as required by law.

5.3 Your Control

You can view, export, or permanently delete your sensitive health data at any time using the controls inside the Service. Account deletion permanently removes your data from our active systems within 30 days, with backup retention not exceeding 90 days.

6. Photos and Biometric Data

You may upload photos of yourself, your meals, or other content. Photos you upload remain associated with your account and are visible only to you unless you explicitly choose to share them through the Share feature (which generates a public link only when you initiate it).

We do not perform facial recognition on your photos. We do not extract or store biometric identifiers such as face geometry. The optional Face ID or Touch ID lock for the photos section uses your device's native biometric authentication, which is processed entirely on your device. We never receive or store biometric data.

Meal photos submitted to the AI meal scanning feature are sent to Anthropic for analysis, then discarded by the AI provider after processing. We retain the resulting nutrition data tied to your meal log entry.

7. How We Share Information

We share information only in the limited circumstances described below.

7.1 Service Providers

We share information with trusted third-party service providers who help us operate the Service. These include:

• Cloudflare, Inc. for cloud hosting, content delivery, and infrastructure
• Anthropic, PBC for AI processing (described in Section 4)
• Resend for transactional email delivery
• Apple, Inc. and Google LLC for app distribution, payment processing, and platform services
• Crash and analytics tools necessary for stability and improvement of the Service

Each provider is contractually obligated to protect your information and use it only to perform services for us.

7.2 Legal Requirements

We may disclose information if required by law, subpoena, court order, or other valid legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

7.3 Business Transfers

If PBG Solutions LLC is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will provide notice through the Service or by email before your information becomes subject to a different privacy policy.

7.4 With Your Explicit Consent

We may share information for purposes you specifically authorize, such as posting a workout to a social platform if we add that feature in the future.

We do not share your information for any other purpose.

8. Data Retention

We retain your information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements.

• Active account data is retained while your account exists.
• Deleted account data is removed from active systems within 30 days of deletion.
• Backup copies are retained for no more than 90 days after deletion.
• Anonymized, aggregated analytics that cannot identify you may be retained indefinitely.
• Email verification tokens, password reset tokens, and rate limit counters expire automatically within 24 hours, 1 hour, or 60 seconds, respectively.

9. Your Rights

You have the following rights regarding your personal information.

9.1 Universal Rights (All Users)

• Access: You can view all data tied to your account from within the Service at any time.
• Export: You can download a complete copy of your data in machine-readable format from your account settings.
• Correction: You can edit or correct your account information at any time from within the Service.
• Deletion: You can permanently delete your account and all associated data from your account settings.
• Withdrawal of consent: You can withdraw consent for any optional data processing at any time.

9.2 California Residents (CCPA and CPRA)

If you are a California resident, you have additional rights, including the right to know what personal information we collect, the right to request deletion, the right to correct inaccurate information, the right to limit the use of sensitive personal information, and the right not to be discriminated against for exercising these rights. We do not sell your personal information, so no opt-out of sale is necessary. To exercise California-specific rights, contact [email protected].

9.3 European Economic Area, United Kingdom, and Switzerland Residents

If you are located in the EEA, the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including the rights to access, rectification, erasure, restriction of processing, data portability, and objection. You also have the right to lodge a complaint with your local data protection authority. Our legal bases for processing include performance of our contract with you, your consent, our legitimate interests in operating the Service, and compliance with legal obligations.

9.4 Other Jurisdictions

Residents of jurisdictions with similar privacy laws (Virginia, Colorado, Connecticut, Utah, and others) have analogous rights. Contact [email protected] to exercise them.

10. Children's Privacy

The Service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, contact us at [email protected] and we will promptly delete the information.

For users between the ages of 13 and 17, we recommend parental review of this Privacy Policy and the Terms of Service before account creation.

11. Data Security

We implement reasonable administrative, technical, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption at rest and in transit, access controls, password hashing using PBKDF2 with industry-standard iteration counts, JWT-based authentication, and ongoing monitoring of our systems.

No method of electronic transmission or storage is one hundred percent secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for keeping your account password confidential and notifying us immediately of any unauthorized access.

12. International Data Transfers

PBG Fitness is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer. Where required by law, we use standard contractual clauses or other lawful transfer mechanisms.

13. Third Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of those third parties. Review their privacy policies before providing information to them.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email, through the Service, or by other reasonable means before the changes take effect. The "Last Updated" date at the top of this policy reflects the most recent revision. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

15. Contact Us

For questions, concerns, or requests related to this Privacy Policy or your personal information, contact us at:

PBG Solutions LLC
Email: [email protected]
Website: pbgfitness.com

We will respond to verifiable requests within the timeframes required by applicable law, generally within 30 days.

This Privacy Policy was last reviewed and updated on May 2, 2026.