TJFit
Privacy Policy

Privacy Policy

Last updated: April 2026 | Contact: tjfit.org@gmail.com

1. WHO WE ARE — TJFit ("we", "us", "our") operates the website tjfit.org. We provide AI-powered fitness programs, nutrition plans, and coach marketplace services.

2. WHAT DATA WE COLLECT — (a) Account data: email address, display name, profile photo, username. (b) Health & fitness data: weight, height, age, fitness goals, workout logs, meal tracking. (c) Payment data: processed entirely by Paddle. TJFit never stores card numbers or CVV. (d) Usage data: pages visited, features used, session duration. (e) Communications: messages sent through TJFit messaging system. (f) AI interaction data: TJAI quiz answers and generated plans.

3. HOW WE USE YOUR DATA — To provide and improve TJFit services. To generate personalized fitness and nutrition plans via TJAI. To process payments through Paddle. To send transactional emails (receipts, verification). To send newsletters (with your consent). To display your public profile to other TJFit members.

4. WHO WE SHARE DATA WITH — We do NOT sell your personal data. We share with: Paddle (payment processing) — paddle.com/privacy. Supabase (database hosting) — supabase.com/privacy. Resend (email delivery) — resend.com/privacy. Anthropic/Claude API (AI plan generation — anonymized prompts only, no personal identifiers sent). Coaches on TJFit see: your username and messages you send them. Coaches do NOT see your email, payment details, or private data.

5. YOUR RIGHTS (GDPR) — Access: request a copy of all data we hold. Correction: update incorrect data via profile settings. Deletion: delete your account and all associated data. Portability: export your data in machine-readable format. Objection: opt out of non-essential data processing. Withdraw consent: unsubscribe from marketing anytime. To exercise rights: email tjfit.org@gmail.com. We respond within 30 days.

6. DATA RETENTION — Active accounts: data retained while account is active. Deleted accounts: personal data deleted within 30 days. Anonymized analytics: retained indefinitely. Payment records: retained as required by tax law (7 years).

7. HEALTH DATA — Body metrics, weight logs, and fitness data are sensitive. We store them encrypted. We never sell health data. TJAI sends anonymized prompts to Claude API. No personally identifiable information is sent to Anthropic.

8. COOKIES — Essential cookies for login sessions and preferences. Analytics cookies to understand site usage (anonymized). You can disable non-essential cookies in your browser settings.

9. CHILDREN — TJFit is not intended for users under 16. If we discover a user is under 16, we delete their account immediately.

10. SECURITY — Industry-standard encryption (HTTPS, encrypted database). Passwords are hashed and never stored in plain text. We regularly review our security practices.

11. CHANGES — We may update this policy. We notify users by email for major changes. Continued use after changes = acceptance.

12. CONTACT — Privacy questions: tjfit.org@gmail.com

Last updated: April 2026