Privacy Policy

Core+ by Edward Granados · Last updated September 30, 2026

This policy explains what the Core+ app ("Core+", "we") collects, why, who it is shared with, and how you can delete it. Questions: coreplushelp@gmail.com.

What we collect

Account

• Your email address and name, and a sign-in identifier if you use Sign in with Apple or Google.

Your profile and plan

• What you tell us during setup: goals, age, height, weight, activity level, how often and how long you can train, available equipment, and any joints you want us to protect (for example knees or lower back).
• Your workouts: which sessions you do, sets and reps, ratings, and baseline results, so we can build and adjust your plan.

Nutrition

• Meals you log, including food photos, barcodes and label photos you scan, and custom foods you create.
• Food photos are sent to our server and analysed by an AI service (Google Gemini) to estimate nutrition. Photos are saved to your device's photo library only with your permission.

Health data (Apple Health and Google Health Connect)

• Only with your permission, Core+ reads active and resting energy burned, steps, walking and running distance, heart rate, and exercise sessions.
• We use this to calculate calories burned and net calories, and to estimate calories for your workouts.
• Raw health records are not uploaded to our servers. Workout summaries you complete in Core+, including the calorie figure, are stored with your account so your history follows you between devices.
• Health data is never used for advertising or marketing, never sold, and never shared with advertising partners.
• You can turn off access at any time in the Health app (iOS) or Health Connect (Android).

Location

• Only if you look for nearby stores that sell a meal alternative, and only with your permission, Core+ uses your location for that search. It is not used for anything else.

Usage and device information

• Which screens you view and which features you use, app version, device type and operating system, and crash information. We use this to fix problems and improve the app.
• A push notification token, if you allow notifications.

Purchases

• Your subscription status. Payments are handled by Apple or Google; we never see or store your card details.

Advertising measurement

Core+ includes the TikTok Business SDK so we can tell whether our TikTok ads lead to installs. It reports app installs and launches and a small set of in-app milestones: account created, setup completed, free trial started and workout finished. It does not receive your name, email, health data or meal data.

On iPhone, Core+ asks for permission to track. If you allow it, the SDK may use your device's advertising identifier. If you decline, it does not, and Apple's privacy-preserving SKAdNetwork reporting is used instead. On Android you can reset or delete your advertising ID in your device settings.

Who we share data with

We do not sell your personal information. We share data only with the service providers that run Core+:

• Supabase: database, sign-in and server functions where your account and app data are stored.
• Google (Gemini): AI analysis of food photos and nutrition questions.
• RevenueCat, Apple and Google Play: subscriptions and purchases.
• HeyCatch: product analytics (your user ID, email and name, plus feature usage).
• TikTok: ad measurement, as described above.
• Apple and Google: sign-in and push notifications.

We may also disclose information if the law requires it.

How long we keep it

We keep your data while your account is active. When you delete your account, we delete your personal data within 30 days, except where we must keep something for legal or security reasons.

Your choices and rights

• Delete your account in the app (Account → Delete account), or at coreplusct.com/delete-account, which works even if you have uninstalled the app.
• Ask for a copy of your data, or for corrections, by emailing coreplushelp@gmail.com.
• Turn off health access, location, notifications or tracking at any time in your device settings.
• Cancel your subscription in your Apple ID or Google Play account settings.

Security

Data is encrypted in transit and stored with access controls so that each account can only read its own data.

Children

Core+ is not for children under 13, and we do not knowingly collect their data. If you think a child has used Core+, contact us and we will delete it.

Changes

If this policy changes, we will update the date above and, for significant changes, tell you in the app.

Contact

Edward Granados · coreplushelp@gmail.com