Privacy Policy

Vorrex Inc. ("Vorrex," "we," "us," or "our") operates the Vorrex mobile application and website at vorrex.fit (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using the Service, you agree to the collection and use of information in accordance with this policy.

Account Information

When you create an account, we collect your email address and a password (stored as a secure hash). You may optionally provide a display name and profile picture.

Fitness Profile

To generate personalised workout and nutrition plans, we collect your age, biological sex, height, weight, fitness goals, experience level, and preferred workout schedule. You may update or delete this at any time.

Workout and Nutrition Logs

We store the workout sessions you log (exercises, sets, reps, weight, RPE) and any food items you track (calories, macros, meal type). This data is used to power your progress charts and improve AI-generated recommendations.

Body Measurements and Progress Photos

If you choose to log body measurements or upload progress photos, these are stored securely and used only to populate your progress screens.

Apple Music Data

If you connect Apple Music, we store a Music User Token on your device to access your recently played tracks and personalised recommendations. We do not store your listening history on our servers — it is used in-session only to select workout music. You can disconnect Apple Music at any time in Settings.

Form Analysis Images

If you use the form analysis feature, video frames are sent to Google's Gemini API for analysis. These images are not stored by Vorrex after the analysis is complete.

Usage Data

We collect basic usage information such as app version, device operating system, and session timing to diagnose crashes and improve performance. We do not use third-party analytics SDKs.

• To provide, maintain, and improve the Service
• To generate AI-powered workout plans and coaching responses via Anthropic's Claude API
• To analyse exercise form via Google's Gemini API
• To personalise workout music via Apple's MusicKit
• To sync your data between the mobile app and your web portal
• To send important service notifications (e.g., subscription renewal reminders)
• To respond to your support requests

We do not sell your personal data to third parties. We do not use your data for advertising.

Vorrex integrates with the following third-party services, each governed by their own privacy policy:

• Anthropic (Claude API) — processes your profile and chat messages to generate fitness plans and coaching responses. Privacy Policy
• Google (Gemini API) — processes exercise video frames for form analysis. Privacy Policy
• Apple (MusicKit) — provides music playback and personalised track recommendations. Privacy Policy
• Supabase — provides authentication and cloud database infrastructure. Data is stored in the US. Privacy Policy

Your data is stored on Supabase infrastructure hosted in the United States. We use industry-standard encryption for data in transit (TLS) and at rest. Access to personal data is restricted to authorised personnel only.

While we implement reasonable security measures, no method of transmission over the internet is 100% secure.

We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days. You may request earlier deletion at any time by contacting us.

Billing records (transaction IDs, subscription history) are retained for up to 2 years after account deletion for accounting and dispute resolution purposes. These records do not include payment card details, which are held solely by Apple, Google, or Stripe.

Security logs (authentication events, failed login attempts) are retained for 90 days to detect and respond to security incidents, then deleted.

Inactive accounts: If you have not logged in for 24 consecutive months, we will send a warning email to your registered address. If no login occurs within 30 days of that notice, your account and all associated personal data will be permanently deleted. Billing records and security logs are still subject to the retention periods above.

No law requires us to retain your fitness, nutrition, or coaching data after you delete your account — we keep it only while you actively use the Service.

To delete your account, contact us at privacy@vorrex.fit.

Depending on your location, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — update inaccurate or incomplete data (available directly in-app)
• Deletion — request deletion of your account and associated data
• Portability — request your data in a portable format
• Objection — object to certain types of processing

To exercise any of these rights, contact us at privacy@vorrex.fit. We will respond within 30 days.

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us immediately at privacy@vorrex.fit.

The Vorrex website uses cookies and local storage for the following purposes:

• Authentication — Supabase stores your session token in a cookie to keep you logged in. This is essential for the portal to function and cannot be opted out of while using the Service.
• Preferences — we store your cookie consent choice in local storage.

We do not use advertising or tracking cookies.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your data, contact us at:

Vorrex Inc.
Email: privacy@vorrex.fit