Privacy Policy

Bazu Fitness LLC ("Bazu!", "we", "us", or "our") is a strength-training and fitness-tracking application. We are committed to protecting your privacy and being transparent about how we collect, use, and safeguard your information.

This Privacy Policy describes how we collect, use, store, and share your information when you use:

• Bazu! Workout App (iOS 18+)
• getbazu.com and related subdomains
• Any other services or features provided by Bazu Fitness LLC

If you disagree with any part of this Policy, please discontinue using Bazu!.

Bazu! is a fitness and workout tracking app. Bazu! is not a medical device, medical app, healthcare provider, or digital therapeutic. Bazu! does not provide medical advice, diagnosis, treatment, injury rehabilitation, recovery guidance, or disease-management services.

If you have health concerns, medical conditions, injuries, or questions about starting or changing an exercise program, consult a qualified healthcare professional.

Geographic Availability

Bazu! may be available to users in the United States and other countries or regions. If you access or use Bazu! from outside the United States, your information may be transferred to, stored in, or processed in the United States or other countries where Bazu Fitness LLC or our service providers operate.

Privacy rights and legal requirements may vary depending on where you live. Where required by applicable law, we provide additional rights and disclosures for users in certain regions, including the European Economic Area, the United Kingdom, Switzerland, California, Nevada, and other jurisdictions with privacy laws.

1. Information We Collect

We collect the following categories of information to provide and improve the service.

Where required by applicable law, Bazu! obtains your consent before processing sensitive personal information, such as health and fitness data, Apple Health data, demographic/body attributes, or other sensitive data. You may withdraw consent where applicable by changing app settings, Apple Health permissions, device settings, or contacting support@getbazu.com.

2. How We Use Your Information

We use the information we collect to:

3. Legal Basis for Processing (GDPR-Aware)

For users in the EEA, UK, or similar regions, we process data under these legal bases:

• Performance of Contract: To provide the app you requested
• Consent: Apple Health/HealthKit permissions, app notifications, newsletters, waitlists, marketing communications, and website analytics controls where available.
• Legitimate Interests: Improving the app, security, diagnostics, aggregated or pseudonymous app analytics, product improvement, and limited service or product update communications where permitted by applicable law.
• Legal Obligation: Responding to lawful requests

4. How We Share Your Information

We do not sell your personal data. We share information only with trusted third-party processors needed to operate Bazu!.

5. Data Retention

We retain data only as long as necessary to provide the service, comply with legal obligations, resolve disputes, and maintain security.

For inactive accounts, identifiable workout data and account information may be retained for a period of 2 years from the last activity date, after which it may be anonymized or deleted, unless legally required otherwise.

Offline Data Integrity

Bazu is designed for offline-first functionality. When you work out without internet:

• All data is saved locally on your device
• Automatic sync occurs when connectivity returns
• Visual "pending sync" indicator shows unsynced data

While we make best efforts to prevent data loss, we cannot guarantee sync success in all scenarios (for example, device failure, app deletion before sync completes). Maintain periodic internet connectivity to ensure data synchronization.

6. Your Rights & Choices

This Privacy Policy is intended to provide a broad privacy notice for users in the United States and other regions where Bazu! may be available. Some jurisdictions provide additional privacy rights. Where required by applicable law, we will honor applicable access, correction, deletion, portability, objection, consent withdrawal, opt-out, appeal, and complaint rights.

• By using Bazu!, you also agree to the dispute resolution provisions, including any arbitration and class action waiver clauses, outlined in our Terms of Service.
• Access the data we hold about you
• Request correction
• Request deletion
• Data portability: Request a copy of your personal data by emailing support@getbazu.com. We will respond within 30 days.
• Withdraw consent
• Analytics controls: Bazu! does not currently provide an in-app Firebase Analytics opt-in or opt-out setting. Where available, you may limit analytics through website controls, browser privacy settings, device-level privacy settings, or future in-app controls.
• Opt out of non-essential marketing emails
• Opt-out of notifications
• Restrict processing (where applicable)

To make a request, email support@getbazu.com.

If applicable law gives you the right to appeal a privacy request decision, you may appeal by emailing support@getbazu.com with "Privacy Appeal" in the subject line. We will review and respond within the timeframe required by applicable law.

You may opt out of non-essential marketing emails at any time by using the unsubscribe link in an email or by contacting support@getbazu.com. Opting out of marketing emails does not prevent us from sending required account, security, legal, transactional, or service-related messages.

You can delete your account from inside the Bazu! app or by contacting support@getbazu.com. Account deletion removes associated account information, profile details, demographic/body attributes, workout history, routines, goals, custom exercises, and other user-created workout data from active production systems immediately or as soon as technically practicable.

Deleted data may remain in encrypted backups for up to 7 days before those backups expire or are overwritten. We may retain limited information where required for legal, security, fraud-prevention, tax, accounting, App Store, dispute-resolution, suppression-list, email-deliverability, or compliance reasons.

Apple Health data stored in Apple Health remains controlled by Apple Health and your device settings. You can manage Apple Health permissions or delete Apple Health data through Apple Health or iOS Settings.

If you are located in the EEA, UK, Switzerland, or another region with similar privacy rights, you may also have the right to lodge a complaint with your local data protection authority.

We will respond within 30 days for general requests and within 45 days for US-state privacy laws (for example, CCPA/CPRA).

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including:

• Encryption in transit using TLS
• Encryption at rest through Firebase and Google Cloud defaults
• Access control and least-privilege principles
• Secure authentication and session management
• User-scoped Firebase security rules designed to restrict workout, profile, and account data to the authenticated account owner and authorized service operations
• Reasonable security practices and internal access controls

No system can be guaranteed 100% secure, but we work to protect personal information using safeguards appropriate to the nature of the data we process.

If we become aware of a security incident affecting personal information, we will notify affected users as required by applicable law, which may include email, in-app notice, website notice, or other legally required methods.

8. International Data Transfers

Bazu Fitness LLC is based in the United States. Because Bazu! uses Firebase and Google Cloud services provided by Google, your information may be transferred to, stored in, or processed in the United States and other countries where Google, its affiliates, or its subprocessors operate.

If you are located outside the United States, your information may be processed in countries that may not provide the same level of data protection as your home country.

Email marketing and list-management information is processed by Brevo, which is established in the European Union (France) and processes data in accordance with GDPR. Brevo and its subprocessors may also operate in other countries.

For users in the EEA, United Kingdom, and Switzerland, international transfers are protected through appropriate transfer mechanisms where required, which may include Standard Contractual Clauses, the UK International Data Transfer Addendum where applicable, adequacy decisions where applicable, and Google's participation in the EU-U.S. Data Privacy Framework, Swiss-U.S. Data Privacy Framework, and UK Extension to the EU-U.S. Data Privacy Framework where applicable.

9. Children's Privacy

Bazu! is not intended for users under 16 years old. We do not knowingly collect personal information from anyone under 16.

If you believe data was collected from a child under 16, contact us immediately.

10. Third-Party Links

The app or website may contain links to external sites. We are not responsible for their content or privacy practices.

11. Changes to This Privacy Policy

We may update this Policy periodically. If changes are material, we will notify users via in-app notice, email (if appropriate), or an update banner on the website. The “Last updated” date will always reflect the latest version.

12. Contact Us

Bazu Fitness LLC
Email: support@getbazu.com
For privacy-specific inquiries: support@getbazu.com