Privacy Policy

Vorrex LLC ("Vorrex," "we," "us," or "our") operates the Vorrex mobile application and website at vorrex.fit (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, what we share with other users, and the choices you have.

By using the Service, you agree to the collection and use of information in accordance with this policy.

Account Information

When you create an account, we collect your email address and a password (stored as a secure hash). You may optionally provide a display name and profile picture.

Fitness Profile

To generate personalised workout and nutrition plans, we collect your age, biological sex, height, weight, fitness goals, experience level, and preferred workout schedule. You may update or delete this at any time.

Workout and Nutrition Logs

We store the workout sessions you log (exercises, sets, reps, weight, RPE) and any food items you track (calories, macros, meal type). This data is used to power your progress charts and improve AI-generated recommendations.

Body Measurements and Progress Photos

If you choose to log body measurements or upload progress photos, these are stored securely and used only to populate your progress screens.

Community and Social Data

If you use community features, we collect and store:

• Hub memberships — which private Hubs you belong to and your role within them
• Posts and comments — content you publish within Hubs
• Direct messages — messages exchanged with other users via the in-app messaging system
• Workout and PR shares — fitness data snapshots you choose to share with other users
• Block relationships — records of users you have blocked (and users who have blocked you), used to enforce mutual visibility restrictions
• Reports — if you submit a content or user report, we record the report details, the content flagged, and the outcome
• Online presence — whether you are currently active in the app, used to display presence indicators to your contacts

Apple Music Data

If you connect Apple Music, we store a Music User Token on your device to access your recently played tracks and personalised recommendations. We do not store your listening history on our servers — it is used in-session only to select workout music. You can disconnect Apple Music at any time in Settings.

Form Analysis Images

If you use the form analysis feature, video frames are sent to Google's Gemini API for analysis. These images are not stored by Vorrex after the analysis is complete.

Usage Data

We collect basic usage information such as app version, device operating system, and session timing to diagnose crashes and improve performance. We do not use third-party analytics SDKs.

Age Verification

During signup, we ask you to confirm that you are 13 years of age or older. We record this confirmation. We do not independently verify your age, but providing a false confirmation constitutes a violation of our Terms of Service.

• To provide, maintain, and improve the Service
• To generate AI-powered workout plans and coaching responses via Anthropic's Claude API
• To analyse exercise form via Google's Gemini API
• To personalise workout music via Apple's MusicKit
• To sync your data between the mobile app and your web portal
• To enable community features — Hubs, direct messaging, workout sharing, and social presence
• To process and review content moderation reports submitted by users
• To enforce our Terms of Service, including account suspension and banning
• To send important service notifications (e.g., subscription renewal reminders, moderation actions)
• To respond to your support requests

We do not sell your personal data to third parties. We do not use your data for advertising.

Because the Service includes social and community features, some of your information is visible to other users. Here is what is and is not shared:

Visible to other users

• Display name and profile picture — shown to other users in Hubs you share, in direct messages, and on your public profile
• Online presence — whether you are currently active in the app, visible to users who can message you
• Hub posts and comments — visible to all members of the Hub where you posted
• Workout and PR shares — visible to the specific user or Hub you shared with

Never visible to other users

• Your email address
• Your fitness profile data (age, weight, height, goals) — unless you explicitly share a post that includes this information
• Your workout logs, nutrition logs, body measurements, or progress photos — unless shared via a workout share feature
• Your billing information or subscription status
• Who you have blocked
• Reports you have submitted

Direct messages are visible only to you and the recipient. Vorrex staff do not read private messages in the ordinary course of business, but may access message content if required by law or to investigate a credible Terms of Service violation.

Vorrex integrates with the following third-party services, each governed by their own privacy policy:

• Anthropic (Claude API) — processes your profile and chat messages to generate fitness plans and coaching responses. Privacy Policy
• Google (Gemini API) — processes exercise video frames for form analysis. Privacy Policy
• Apple (MusicKit) — provides music playback and personalised track recommendations. Privacy Policy
• Supabase — provides authentication and cloud database infrastructure. Data is stored in the US. Privacy Policy
• Stripe — processes subscription payments. Vorrex does not store payment card details. Privacy Policy

Your data is stored on Supabase infrastructure hosted in the United States. We use industry-standard encryption for data in transit (TLS) and at rest. Access to personal data is restricted to authorised personnel only.

While we implement reasonable security measures, no method of transmission over the internet is 100% secure.

We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, including your profile, fitness logs, Hub memberships, and direct messages. You may request earlier deletion at any time by contacting us.

Community content — posts and comments you authored will be deleted or anonymised within 30 days of account deletion. Direct messages will be deleted from your thread view immediately; copies held by recipients are subject to their own account lifecycle.

Moderation records — if your account was banned following a Terms of Service violation, we retain a record of the violation for up to 3 years to prevent circumvention via new accounts. This record contains only the violation type, date, and account identifiers — not your fitness data.

Billing records (transaction IDs, subscription history) are retained for up to 2 years after account deletion for accounting and dispute resolution purposes. These records do not include payment card details, which are held solely by Apple, Google, or Stripe.

Security logs (authentication events, failed login attempts) are retained for 90 days to detect and respond to security incidents, then deleted.

Inactive accounts: If you have not logged in for 24 consecutive months, we will send a warning email to your registered address. If no login occurs within 30 days of that notice, your account and all associated personal data will be permanently deleted. Billing records and security logs are still subject to the retention periods above.

To delete your account, use the in-app account deletion flow or contact us at privacy@vorrex.fit.

Depending on your location, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — update inaccurate or incomplete data (available directly in-app)
• Deletion — request deletion of your account and associated data
• Portability — request your data in a portable format
• Objection — object to certain types of processing

To exercise any of these rights, contact us at privacy@vorrex.fit. We will respond within 30 days.

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. During account creation, users are required to confirm they are 13 or older. If you believe a child under 13 has provided us with personal data, please contact us immediately at privacy@vorrex.fit and we will delete the account and associated data promptly.

The Vorrex website uses cookies and local storage for the following purposes:

• Authentication — Supabase stores your session token in a cookie to keep you logged in. This is essential for the portal to function and cannot be opted out of while using the Service.
• Preferences — we store your cookie consent choice in local storage.

We do not use advertising or tracking cookies.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice at least 14 days before they take effect. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your data, contact us at:

Vorrex LLC
Email: privacy@vorrex.fit