Vira Fitness ("Vira," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how it is stored, who can see it, and how we keep sensitive information private. It applies to our mobile application and website at vira-fitness.com.

Account Information

• Your name and profile picture when you create an account
• Your email address, stored privately in Firebase Authentication and never exposed to other users; if you contact us via the in-app support forms, your email is stored alongside your message solely to allow us to respond and is never visible to other users
• Authentication credentials managed securely by Firebase Authentication

Fitness Data

• Workout plans you create
• Workout logs including exercises, sets, reps, and weights
• Body weight entries and fitness goals (stored in a private, owner-only location)
• The exercises you track for progress and your preferred time periods for each (stored in a private, owner-only location)

Social Data

• Posts, comments, and likes you create
• The users you follow and who follow you (including the specific relationships, not just counts)

Usage Data

• App usage analytics (screen views, feature usage) collected via PostHog. PostHog receives your user ID, display name, and email address to associate events with your account. PostHog also collects your IP address, which it uses to derive an approximate geographic location (city/country level).
• Push notification tokens used to deliver notifications to your device

Visible to other Vira users (public accounts)

• Your name and profile picture
• Your follower and following counts, and the specific list of who you follow and who follows you
• Workout posts you share
• Workout logs attached to posts you share
• Workout plans you create (visible on your profile)
• Comments and likes on posts

Private — visible only to you

• Your email address
• Your body weight entries and goal weight
• The exercises you track for progress and your preferred time periods for each
• Workout logs you have not chosen to post
• Your push notification token
• Your in-app notification inbox

You can switch your account to private at any time in Settings → Private Account.

When your account is private:

• New users who want to follow you must send a follow request. You can approve or decline each request individually from your Notifications screen
• Only approved followers can see your posts, workout plans, and workout logs
• Your existing approved followers are not affected — they continue to see your content without needing to re-request
• Your name, profile picture, and follower/following counts remain visible to all Vira users regardless of private mode

When you switch back to public:

• Your posts, workout plans, and workout logs become visible to all Vira users immediately
• Any pending follow requests you haven't reviewed are automatically approved

We use your information to:

• Provide, maintain, and improve the Vira app and its features
• Enable social features such as following users, sharing workouts, and commenting
• Send push notifications about activity relevant to you (likes, comments, follows) — notification delivery is handled server-side so your device token is never exposed to other users
• Analyze usage patterns to improve the user experience
• Respond to support requests and feedback

Your data is stored securely using Google Firebase infrastructure. We enforce Firestore security rules so that sensitive data — including body weight history, exercise tracking preferences, email, and push notification tokens — is readable only by the account owner. Push notifications are sent via a server-side Cloud Function; no other user's app can read your device token. We do not sell your data to any third party.

We use the following third-party services to operate the app:

• Firebase / Google Cloud — Authentication, database, file storage, hosting, and server-side Cloud Functions
• Expo / EAS — App build, delivery, and over-the-air update infrastructure
• PostHog — Product analytics. When you use the app, PostHog receives your user ID, display name, and email address alongside usage events (screen views, feature interactions). PostHog also collects your IP address, which it uses to derive an approximate location (city and country level) for analytics purposes. PostHog's privacy policy is available at posthog.com/privacy.
• Apple Sign-In — Optional authentication method
• Google Sign-In — Optional authentication method

These services have their own privacy policies and may collect data as described in their respective policies.

• Access and update — You can view and edit your profile information at any time within the app
• Delete your account — You can permanently delete your account and all associated data from the Settings page. This action is irreversible and removes all your workout data, posts, body weight history, and social connections
• Data portability — Contact us at support@vira-fitness.com if you need a copy of your data

Vira is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice within the app or on our website. Your continued use of the app after changes are posted constitutes your acceptance of the updated policy.

If you have questions about this Privacy Policy or your data, email us at support@vira-fitness.com or visit our FAQ.