MVP Privacy Policy

1. Who we are

MVP is a fitness and nutrition tracking app developed and operated by OSD Labs. This policy covers the App and this website.

2. Information we collect

We collect information in the following categories, based on what you actually use in the App:

Account & authentication

• Email address, used to create and sign in to your account.
• Authentication data handled by our backend provider (Supabase), including one-time passcodes used to verify your email and session tokens used to keep you signed in.

Profile & fitness information

• Goal (e.g. lose weight, build muscle, general fitness), training experience level, and weekly schedule.
• Training location and available equipment.
• Physical limitations you choose to tell us about (e.g. knee, shoulder), used only to avoid recommending unsuitable exercises.
• Height, current weight and target weight, in the unit you choose.
• Daily activity level, muscle-group priorities and similar preferences you set during onboarding.

Workout data

• Your generated workout plans.
• Workout sessions, exercises and individual sets you log — including which exercises were completed, skipped, or partially completed.
• Derived progress information such as training consistency and your MVP Training Level, calculated from the workout history above.

Nutrition data

• Your nutrition profile and daily targets.
• Food you log, including custom foods you create and meals you save.
• Foods you mark as disliked and meal preferences, used to avoid suggesting them back to you.
• Recipes you save.

Recovery & body-weight tracking

• Recovery check-ins (e.g. muscle soreness you report).
• Weight entries you log over time.

Subscription & entitlement information

• Whether you have an active MVP Pro subscription, its status (active, canceled, expired, in a billing grace period) and renewal date.
• This comes from Apple App Store or Google Play via our subscription provider, RevenueCat — MVP never receives your card details.

Device & sensor information (only if you grant permission)

• Step count, read from Apple Health or Health Connect, to show your daily step progress. This is read-only — MVP does not write to your health data.
• Camera access, used only to scan packaged-food barcodes for nutrition logging. No photos or video are captured or stored.

3. How we use this information

• To create and maintain your account and keep you signed in.
• To generate and adapt your personalised workout and nutrition plans.
• To show you your own workout history, progress, Training Level and analytics.
• To provide MVP Pro features to subscribers and manage entitlement state.
• To provide customer support when you contact us.
• To maintain the security and reliability of the App.

4. Third-party service providers

We share the minimum information necessary with the following providers, each acting on our behalf:

• Supabase — our backend provider. Hosts our database, handles authentication, and stores the data categories described above.
• RevenueCat — manages subscription/entitlement state on our behalf, based on purchases made through the Apple App Store or Google Play.
• Apple App Store / Google Play — process in-app purchases directly; MVP never receives or stores your payment card details.

We do not use any other third-party data processor at this time.

5. How we store and protect your data

Your data is stored in a managed Postgres database operated by Supabase, protected by row-level security so your data is only accessible to your own authenticated account, and transmitted over encrypted (HTTPS) connections. Account deletion and other destructive operations run through server-side functions that verify your identity from your session — never from a value the app simply tells the server.

No system is perfectly secure, and we cannot guarantee that data will never be exposed through circumstances outside our reasonable control. We take reasonable, industry-standard steps to protect your information and will act promptly to address any issue we become aware of.

6. Data retention

We retain your data for as long as your account is active, so the App can function. If you delete your account, the data categories listed in Section 2 are permanently deleted from our active database — see our Delete Account page for exactly what that covers. Routine infrastructure backups may retain a copy for a limited operational period before they are fully purged; we do not use backups to keep a deleted account's data active or accessible in the App.

7. Your rights & account deletion

You can request a copy of your data or ask us questions about it by contacting Support. You can permanently delete your account and associated data at any time — directly in the App (Profile → Account → Delete Account) if you're signed in, or through our Delete Account page if you no longer have access. Deleting your MVP account does not automatically cancel an active Apple or Google subscription — see that page for how to manage store subscriptions separately.

8. Health & medical disclaimer

MVP is a fitness and wellness product. It is not a medical device and does not provide medical advice, diagnosis, or treatment. Information in the App — including workout plans, nutrition guidance and progress tracking — is for general fitness purposes only and is not a substitute for professional medical advice. Speak with a qualified healthcare provider before starting any new exercise or nutrition program, particularly if you have an existing health condition.

9. Children's privacy

MVP is not directed at children and is not intended for use by anyone under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate action.

10. Changes to this policy

We may update this policy as MVP evolves. If we make material changes, we will update the "Last updated" date above. Continued use of MVP after a change means you accept the updated policy.

11. Contact us

Questions about this policy or your data can be sent to our support team — see the Support page.