Privacy Policy

Effective Date: April 12, 2026

Superphysio Technologies Inc. (“Superphysio,” “we,” “us,” or “our”) operates the Superphysio mobile application (the “App”) and the website at superphysio.co (the “Site”), collectively referred to as the “Services.” This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Services.

Superphysio Technologies Inc. is a federally incorporated Canadian corporation with its registered office in Toronto, Ontario, Canada. By using our App or Site, you consent to the practices described in this policy.

1. Information We Collect

Account Information

When you create an account, we collect your email address and, if provided, your first and last name. If you sign in with Apple or Google, we receive a limited authentication token and your email address from the respective provider. We also record your timezone and the authentication method you used.

Fitness Profile

During onboarding and use of the Services, you may provide fitness-related information including your gender, date of birth, height, weight, fitness experience level, training frequency goals, preferred workout split, workout duration preference, sets-per-exercise preference, gym type and available equipment, injury history, fitness goals, and target body composition areas.

Workout and Activity Data

As you use the Services, we collect the exercises you perform, sets, reps, weight used, rest times, workout completion status, performance history, activity streaks, and related statistics. This data is essential to providing you with personalized workout plans and tracking your progress.

Device Information

When you use the App, we automatically collect a device identifier generated by the App, your device platform (iOS or Android), and your device timezone. When you visit the Site, we may collect standard web analytics data such as browser type, pages visited, and referring URL. We do not collect your precise location, contacts, camera data, microphone data, or Apple HealthKit data.

Push Notification Tokens

If you grant notification permissions, we store a device push token to send you relevant notifications. You can revoke this permission at any time through your device settings. Tokens are deactivated when you log out or revoke notification permissions.

2. How We Use Your Information

We use your information to:

Provide and operate the Services and their features, including generating personalized, AI-powered workout plans based on your fitness profile; track your workout progress and display statistics; manage your account, authentication, and subscription; send push notifications you have opted in to; analyze usage patterns to improve the Services (anonymized); detect, diagnose, and resolve technical issues; and respond to your support requests.

3. AI-Powered Features and Data Processing

Superphysio uses artificial intelligence to generate personalized workout plans and exercise recommendations. To provide these features, portions of your fitness profile (such as your experience level, goals, available equipment, injury history, and performance data) are sent to third-party AI providers for processing.

Our primary AI provider is Anthropic (Claude). We also use OpenAI as a fallback provider to ensure service reliability. These providers process your fitness data solely to generate workout content for you. We do not send your name, email address, or other directly identifying information to these AI providers. Both Anthropic and OpenAI maintain their own privacy policies governing how they handle data received through their APIs.

4. Third-Party Service Providers

We use the following third-party services to operate and improve Superphysio:

RevenueCat manages subscriptions and in-app purchases. RevenueCat receives an anonymous app user identifier and subscription-related data (purchase history, entitlements, trial eligibility) to process and verify your subscription.

PostHog provides product analytics. We send anonymized event data (such as which features are used and onboarding step completion) to PostHog to understand how users interact with the Services. We do not send personally identifiable information to PostHog.

Sentry provides error monitoring. When the Services encounter a technical error, diagnostic information (error messages, app state, and breadcrumbs) is sent to Sentry so we can identify and fix issues. We do not send personal information to Sentry.

Apple and Google provide authentication services. If you sign in with Apple or Google, your authentication token is exchanged with their servers. Apple and Google’s respective privacy policies govern how they handle your sign-in data.

We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.

5. Data Retention

We retain your account and fitness data for as long as your account is active, or as needed to provide you with the Services. If you delete your account (available in the App under Profile > Delete Account), your account is marked for deletion and your associated data (schedules, workout logs, exercise lists, and goals) is removed. A brief recovery window of approximately 30 days may apply, after which data is permanently deleted.

6. Data Security

We take reasonable measures to protect your personal information. All data transmitted between your device and our servers is encrypted using HTTPS/TLS. Authentication tokens are stored securely on your device using platform-provided secure storage. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information, including the right to access the personal information we hold about you, request correction of inaccurate information, request deletion of your account and associated data, and withdraw consent to data processing. Canadian users have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA). To exercise any of these rights, please contact us at support@superphysio.co.

8. Children’s Privacy

Superphysio is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@superphysio.co.

9. International Data Transfers

Your information may be processed and stored on servers located outside of Canada, including in the United States, where our third-party service providers operate. By using the Services, you consent to the transfer of your information to these jurisdictions, which may have different data protection laws than your country of residence.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy in the App or on our Site with a revised effective date. Your continued use of the Services after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: support@superphysio.co

Superphysio Technologies Inc.
Toronto, Ontario, Canada