Baadia – Privacy Policy

Last updated: May 1, 2026

This Privacy Policy explains how Byrie Apps LLC, a Virginia limited liability company and the operator of the Baadia mobile application ("Baadia", "we", "us", or "our"), collects, uses, shares, and protects information when you use the Baadia app (the "App").

By using the App, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the App.

1. Summary

A short, plain-language summary (the rest of this Policy controls if there's a conflict):

• Who we are: Byrie Apps LLC, the team behind Baadia – a fitness app for tracking workouts, body composition, and squad-based fitness challenges.
• How you sign in: Sign in with Apple or Google. We don't store your password.
• What we collect: account info, profile details (name, photo, gender, date of birth, timezone), self-reported body metrics, workout activity (rep counts, session metadata), body composition photos and measurements, and limited device info.
• What we don't collect: raw camera video. Pose detection used for AI rep counting runs on your device. Only derived data (e.g., counts, session metadata) leaves the device.
• Who we share with: other users you choose to share with (your crew/squad, friends), and service providers (Supabase, Apple, Google, Expo) who help us run the App.
• Your controls: edit your profile, leave crews, remove friends, disable notifications, and delete your account from the App.

2. Information We Collect

2.1 Information you provide

• Account information. When you sign in with Apple or Google, we receive a unique identifier and, depending on what you allow the provider to share, your name and email address.
• Profile information. Display name, profile picture, gender, date of birth, height, weight, body fat percentage, and other body metrics; your selected coaching/voice preferences; and your timezone.
• Body composition data. Photos you take for body fat estimation, body measurements you enter (e.g., waist, neck, hip), and the body fat estimate produced from them.
• Workout data. Exercise type (e.g., push-ups, sit-ups, squats), session start/end, rep counts, max reps, and session metadata generated while you use the AI rep counter.
• Social data. Crews/squads you create, join, or leave; your role in those crews; the friends you add; friend requests you send and receive; and accolades/badges you earn.
• Communications. Information you provide when you contact us (e.g., support emails), and any feedback you submit.

2.2 Information collected automatically

• Device and technical information. Device model, operating system version, app version, language, and crash and diagnostics information.
• Usage information. App events (e.g., screens viewed, features used), session timestamps, and error logs.
• Push tokens. A push notification token (e.g., Expo push token) so we can send you and your crewmates notifications.
• Approximate timezone derived from your device.

2.3 Information processed on your device only

• Live camera frames used for AI rep counting and pose detection are processed on your device using on-device models (e.g., TensorFlow Lite via VisionCamera). Raw frames and video are not transmitted to our servers; only derived information (such as rep counts and session metadata) is stored.
• Motion sensor data used to compare phone tilt with your saved camera angle is processed on your device.

2.4 Information from third parties

• Authentication providers (Apple, Google). Identifiers and basic profile information you authorize them to share.
• App stores and platform services (Apple, Google, Expo). Crash and analytics data, delivery receipts for push notifications.

We do not knowingly collect more information than we need to provide and improve Baadia.

3. How We Use Information

We use information to:

1. Provide the App – authenticate you, create and maintain your profile, run AI rep counting, generate body fat estimates, track workout progress, and operate crews/squads, friends, accolades, and notifications.
2. Personalize your experience – display the right content, units (metric/imperial), badges, dials, and progress visualizations.
3. Send notifications – about your activity and your crewmates' completions.
4. Communicate with you – respond to support requests and send transactional messages about your account or important changes to the App.
5. Maintain safety and security – detect, prevent, and respond to fraud, abuse, security incidents, and Terms violations.
6. Improve the App – understand how the App is used, fix bugs, and develop new features. We use aggregated and de-identified data wherever possible.
7. Comply with law – meet legal obligations and respond to lawful requests.

Legal bases (EEA / UK users)

If you are in the European Economic Area, the UK, or another jurisdiction with similar laws, we rely on the following legal bases:

• Performance of a contract – to provide the App you requested.
• Legitimate interests – to secure, maintain, and improve the App, in ways that don't override your rights.
• Consent – for things like push notifications, camera and photo library access, and processing of body composition data and photos. You can withdraw consent at any time.
• Legal obligation – when we must process information to comply with the law.

4. How We Share Information

We do not sell your personal information. We share it only in the limited ways below.

4.1 With other users

• Crews/squads. Your display name, profile picture, accolades, daily completion status, and progress visualizations are shown to other members of crews you join.
• Friends. When you connect with a friend, certain profile and activity information becomes visible to them.
• Public profile lookup. If you enable or use public/peer profile features, limited profile fields may be discoverable by other users searching for you.

4.2 With service providers

We share information with vendors that help us run Baadia, under contracts that limit how they can use it:

• Supabase – database, storage (for profile pictures and body composition photos), authentication, and edge functions.
• Apple – Sign in with Apple and Apple Push Notification service.
• Google – Sign in with Google.
• Expo / EAS – app updates, crash reporting, and Expo push notifications.
• Hosting and analytics providers as needed to operate the App.

4.3 For legal reasons

We may disclose information if we believe in good faith that doing so is necessary to:

• comply with a law, regulation, legal process, or governmental request;
• enforce our Terms of Service;
• detect, prevent, or address fraud, security, or technical issues; or
• protect the rights, property, or safety of Baadia, our users, or others.

4.4 Business transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such transaction and any choices you have.

4.5 With your direction

We will share your information with third parties when you direct us to (for example, by enabling an integration in the future).

5. Data Retention

We retain your information for as long as your account is active and as long as needed to provide the App. After you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we need to keep it to:

• comply with legal obligations,
• resolve disputes,
• enforce our agreements, or
• maintain backups and security logs (which are retained for a limited period and then overwritten or deleted).

Body composition photos and measurements may be deleted earlier from within the App's body composition history; doing so removes the associated record from our active systems.

6. Security

We use industry-standard administrative, technical, and physical safeguards designed to protect your information, including encryption in transit (HTTPS/TLS), access controls, and isolated storage buckets for sensitive content such as body composition photos and profile pictures.

No method of transmission or storage is perfectly secure. You are responsible for keeping your device and authentication accounts (Apple ID, Google Account) secure.

7. Your Choices and Rights

7.1 In-app controls

• Profile. Edit your display name, profile picture, body metrics, and other profile details.
• Crews and friends. Leave crews, delete crews you created, accept or reject friend requests, and remove friends.
• Body composition. Review and delete body composition photos and measurements from history.
• Notifications. Enable or disable push notifications in your device settings.
• Camera, photo library, and motion permissions. Manage these in your device settings; revoking them will limit related features.
• Account deletion. Request account deletion from within the App or by emailing us (see Section 13).

7.2 Privacy rights

Depending on where you live, you may have rights to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete your personal information;
• Restrict or object to certain processing;
• Port your data to another service;
• Withdraw consent where we rely on it; and
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact us at the address in Section 13. We will verify your identity before responding and will respond within the timeframe required by applicable law.

7.3 Sale or "sharing" of personal information

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act ("CCPA").

8. Children's Privacy

Baadia is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can delete it.

If you are between 13 and the age of majority in your jurisdiction, please use Baadia only with the involvement of a parent or legal guardian.

9. International Data Transfers

We and our service providers may process your information in countries other than the one in which you live. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) to protect your information in cross-border transfers.

10. Third-Party Services

The App uses or links to third-party services such as Apple, Google, Supabase, and Expo. Their handling of your information is governed by their own privacy policies, which we encourage you to review.

11. Sensitive Information

Baadia processes information that may be considered sensitive in some jurisdictions, including health-related information (such as body measurements and body fat estimates) and photos of your body. We process this information to provide the features you have requested, store it with restricted access, and we do not use it for advertising. Where required by law, we will obtain your explicit consent before processing sensitive information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you in the App or by other reasonable means before they take effect. The "Last updated" date at the top of this Policy shows when it was last revised. Your continued use of the App after the changes take effect means you accept the updated Policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, or if you want to exercise your privacy rights, contact us at:

Byrie Apps LLC (operator of Baadia) Email: support@baadia.app

If you are in the EEA or UK, you may also have the right to contact your local data protection authority.

Appendix A – Data Categories at a Glance