Privacy Notice
Last updated: November 13, 2026
1. Who we are
Vigorous Lifestyle ("we", "us") operates Vigorous Home and is the data controller for the personal data described in this notice.
2. Data we collect
- Account data: name, email, login credentials, profile photo.
- Profile and fitness data: goal, sex, weight, height, workouts logged, meals logged.
- Content you create: community posts, messages to the AI coach.
- Usage and device data: pages viewed, features used, IP address, device and browser info, approximate location.
- Support communications: messages you send us.
3. How we use it
- Create and operate your account.
- Provide workouts, meal plans, AI coaching, and the community feed.
- Personalize content and improve the product.
- Protect against fraud, abuse, and security incidents.
- Send service emails and, with your consent, occasional product updates.
4. Legal bases
We process your data to perform our contract with you (providing the Service), for our legitimate interests (improving and securing the Service), where you have consented (e.g. marketing emails), and where required to comply with a legal obligation.
5. Who we share data with
- Service providers / subprocessors who help us run the Service — hosting, database, analytics, email delivery, AI model providers, and customer support tooling.
- Payment processors for subscription billing, tax compliance, invoicing, and fraud prevention.
- Google (Google Ads) — when advertising is allowed, our site loads Google's advertising tag. It sets advertising cookies and tells Google when someone arrives from one of our ads and when a free account is created, so we can measure and improve our ads (including Google's automatic ad optimisation). Google receives the page address, ad-click identifiers, device and browser information and your IP address. We do not send your name or email to Google. See how Google uses this data.
- Professional advisers (legal, accounting) where reasonably required.
- Authorities where required by law or to protect our rights.
We do not sell your personal data.
6. International transfers
Some of our providers process data outside your country. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
7. Retention
We keep personal data only as long as we need it to provide the Service and meet legal obligations. When no longer needed, we delete or anonymize it. You can request deletion of your account at any time.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent. To exercise these rights, email vigorouslifestylehome@gmail.com. You also have the right to complain to your local data protection authority.
9. Security
We use appropriate technical and organisational measures — including encryption in transit, access controls, and audit logging — to protect your data. No system is perfectly secure, so we cannot guarantee absolute security.
10. Cookies, analytics and advertising
We use strictly necessary browser storage to keep you signed in and remember your preferences.
Visitor analytics. Lovable's analytics uses no cookies, stores nothing on your device, doesn't keep IP addresses and doesn't identify visitors. It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors, and which buttons and links are clicked. Detailed data is kept for 90 days and daily summaries for a year. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.
When things are recorded. Clicks are recorded for visitors in the EU/EEA, the UK, Switzerland and Quebec only after they accept analytics; for everyone else, unless their browser sends Global Privacy Control; and never for visitors whose browser sends it, even after they accept. Page visits, time on page, page speed and errors are recorded for every visitor, without cookies and without identifying anyone.
Advertising (Google Ads). Visitors in the EU/EEA, the UK, Switzerland and Canada see a cookie notice, and Google's advertising tag loads for them only after they accept advertising. Elsewhere it loads unless you reject advertising in Cookie settings or your browser sends Global Privacy Control. It is used to measure which ads bring new sign-ups and to help Google show our ads to people likely to sign up.
Your choice is saved in your browser for up to 12 months (a refusal for about 6 months, after which we may ask again). You can change it any time with the Cookie settings link at the bottom of our pages; a refusal stops new advertising measurement straight away.
11. Children
The Service is not intended for children under 16. If we learn we have collected personal data from a child under 16 without parental consent, we will delete it.
12. Changes
We may update this notice. Material changes will be announced in the app or by email.