Privacy Policy — StrongHER by AFJ
**Last Updated:** April 4, 2026
**Effective Date:** April 4, 2026
StrongHER Nutrition LLC ("we," "us," "our") operates the StrongHER by AFJ mobile application (the "App"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our App.
By using StrongHER by AFJ, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the App.
---
I. Who We Are
StrongHER Nutrition LLC is a California limited liability company headquartered in Rancho Cucamonga, California. We operate the StrongHER by AFJ mobile application, a subscription-based nutrition, training, and wellness platform designed for women.
**Contact:**
Email: [email protected]
---
II. Age Requirement
StrongHER by AFJ is designed for adults aged 18 and older. You must be at least 18 years old to create an account and use the App. We verify your age during account setup and do not knowingly collect personal information from anyone under the age of 18.
If we become aware that we have collected personal information from a user under 18, we will promptly delete that information and terminate the associated account. If you believe a minor has provided us with personal information, please contact us at [email protected].
---
III. Information We Collect
A. Account Information
- Email address
- Display name
- Username
- Profile photo
- Date of birth
- Social media handles (Instagram, TikTok, YouTube — optional)
B. Health, Nutrition, and Wellness Data
- Daily food logs, meal entries, serving sizes, and macronutrient data (calories, protein, carbohydrates, fat)
- Macro targets and personalized nutrition calculations based on your goals, body measurements, and activity level
- Nutrition journal snapshots
- Binge and urge logs, including emotional state, triggers, what you were doing before the urge, and what you ate
- Binge-free streak tracking data
- Mood ratings (1–5 scale)
C. Training and Fitness Data
- Workout logs including exercises performed, sets, repetitions, and weight used
- Personal records (PRs)
- Exercise favorites
- Workout programs and training plans
D. User-Generated Content
- Community posts (text, photos, and videos up to 60 seconds)
- Journal entries (text, photos, and videos)
- Comments on community posts
- Direct messages to other users (text and images)
- Reports submitted about other users or content
E. AI Chat Data
- Conversations with Sora, our AI wellness assistant (both casual and SOS mode)
- See Section VII for detailed information about AI data processing
F. Body Measurement Data
- Height
- Weight
- These measurements are used solely for macro calculations and are never shared publicly
G. Device and Technical Data
- Push notification tokens (used solely to deliver notifications you have opted into)
- Device type and operating system (for push notification delivery and app compatibility)
- IP address (processed by Cloudflare for bot protection during sign-up and login only — not stored by us)
H. Transaction Data
- Subscription status and plan type
- Purchase receipts (processed by Apple and RevenueCat — we never receive or store your credit card or payment details)
---
IV. How We Use Your Information
We use your information to:
- Provide and operate the App's features (macro tracking, workout logging, journal, community, AI assistant, direct messaging)
- Create and maintain your account
- Calculate personalized macro targets based on your goals, body measurements, and activity level
- Deliver push notifications you have opted into
- Process subscription payments through Apple's In-App Purchase system
- Moderate community content and enforce our Community Guidelines
- Respond to your support requests
- Improve the App and develop new features
- Comply with legal obligations
We do **not** use your information to:
- Sell your personal information to third parties
- Serve targeted advertising
- Make automated decisions about you without human oversight
- Train AI models (see Section VII)
---
V. How We Share Your Information
We do not sell your personal information. We share your data only with the following third-party service providers, and only as necessary to operate the App:
| Service Provider | Purpose | Data Processed |
|-----------------|---------|----------------|
| **Supabase** (supabase.com) | Database hosting, user authentication, file storage, serverless functions | All user data including account information, health/nutrition data, content, messages, and uploaded media |
| **Anthropic** (anthropic.com) | AI processing for the Sora AI assistant | Chat messages sent during AI conversations. Anthropic processes messages via their API but does not retain user data for model training per their API data usage policy. |
| **RevenueCat** (revenuecat.com) | Subscription and in-app purchase management | User ID, purchase receipts, subscription status, and transaction history |
| **Apple** (apple.com) | Payment processing via App Store In-App Purchase | Payment and transaction information. We never receive or store your credit card or payment details — Apple handles all payment processing directly. |
| **Resend** (resend.com) | Transactional email delivery (account confirmation, password reset) | Email address and email content |
| **Cloudflare** (cloudflare.com) | Bot protection and CAPTCHA verification (Turnstile) | IP address and browser/device fingerprint, processed by Cloudflare to verify human users during sign-up and login |
We may also disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of StrongHER Nutrition LLC, our users, or the public.
---
VI. Sensitive Health Data
We recognize that much of the data collected by StrongHER by AFJ — including nutrition logs, binge/urge logs, mood ratings, body measurements, and AI wellness conversations — constitutes sensitive personal information and/or consumer health data under applicable law.
We treat all health-related data with heightened protections:
- Health data is stored securely with encryption in transit and at rest
- Health data is never sold, rented, or shared for advertising purposes
- Health data is accessible only to you (and to our admin team for support/moderation purposes only when necessary)
- Other users cannot see your nutrition data, workout data, body measurements, or AI conversations unless you explicitly choose to share specific content to the community
- Privacy toggles allow you to control the visibility of your journal, nutrition, and training data on your profile
---
VII. AI Assistant (Sora)
StrongHER by AFJ includes an AI-powered assistant called "Sora" that provides general wellness support and encouragement. Sora is available in two modes: casual conversation and SOS mode for moments of binge urges or emotional distress.
**Important:** Sora is not a therapist, counselor, doctor, or licensed medical or mental health professional. Sora's responses are generated by artificial intelligence and may not always be accurate or appropriate for your specific situation. Sora is not a substitute for professional medical or mental health treatment.
**What we collect:** When you interact with Sora, your messages and Sora's responses are stored in our database to provide conversation continuity and improve your experience. Casual conversations are retained unless you delete your account. SOS conversations start fresh each session.
**How AI processing works:** Your messages are sent to Anthropic's Claude API for processing. Anthropic generates Sora's responses in real time. Per Anthropic's API data usage policy, messages sent through the API are not used to train AI models and are not retained by Anthropic after processing.
**Your conversations are never used to train AI.** Neither we nor Anthropic use your Sora conversations to train or improve AI models.
**Crisis resources:** If you are experiencing a mental health crisis, please contact:
- **988 Suicide & Crisis Lifeline** — Call or text 988
- **Alliance for Eating Disorders Helpline** — 1-866-662-1235
- **Crisis Text Line** — Text HOME to 741741
---VIII. Data Security
We implement industry-standard security measures to protect your personal information, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Row-level security policies on all database tables ensuring users can only access their own data
- Secure authentication with password complexity requirements
- CAPTCHA protection against automated attacks
- Role-based access controls for administrative functions
No method of electronic storage or transmission is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. If we become aware of a security breach affecting your data, we will notify you in accordance with applicable law.
---
IX. Data Retention and Deletion
**Retention:** We retain your personal information for as long as your account is active or as needed to provide you with the App's services. If your account is inactive for an extended period, we may contact you before taking any action regarding your data.
**Account Deletion:** You may delete your account at any time directly within the App by navigating to Settings > Delete Account. You may also request account deletion by emailing [email protected].
Upon account deletion:
- All personal data, posts, journal entries, messages, nutrition logs, workout logs, binge/urge logs, AI chat conversations, and uploaded media are permanently deleted
- Your profile is anonymized immediately (display name changed to "Deleted User," personal identifiers removed)
- Deletion is processed within 30 days of your request
- Some data may be retained where required by law or for legitimate business purposes (e.g., transaction records for tax/accounting compliance, anonymized data for aggregate analytics)
---
X. Your Privacy Rights
A. All Users
Regardless of where you live, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account and personal data
- Opt out of push notifications at any time through your device settings
To exercise any of these rights, contact us at [email protected].
B. California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- **Right to Know:** You may request the specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your data.
- **Right to Delete:** You may request that we delete your personal information, subject to certain legal exceptions.
- **Right to Correct:** You may request that we correct inaccurate personal information.
- **Right to Opt Out of Sale:** We do not sell your personal information. If this ever changes, we will provide a clear opt-out mechanism and update this policy.
- **Right to Limit Use of Sensitive Personal Information:** You may request that we limit the use of your sensitive personal information (including health data) to what is necessary to provide the App's services.
- **Right to Non-Discrimination:** We will not discriminate against you for exercising any of your privacy rights.
To submit a request, email [email protected]. We will verify your identity and respond within 45 days as required by law.
We honor Global Privacy Control (GPC) signals as valid opt-out requests under the CCPA/CPRA.
C. Washington Residents (My Health My Data Act)
If you are a Washington state resident, you have additional rights regarding your consumer health data under the Washington My Health My Data Act (MHMD). Consumer health data includes your nutrition logs, binge/urge logs, mood ratings, body measurements, and any other data that identifies your past, present, or future physical or mental health status.
Under the MHMD, you have the right to:
- **Know** what consumer health data we collect and how it is used
- **Withdraw consent** for the collection or sharing of your consumer health data
- **Request deletion** of your consumer health data
We collect health data to provide you with the core features of StrongHER by AFJ (macro tracking, workout logging, binge prevention support). We do not sell your consumer health data. We do not share your consumer health data except with the service providers listed in this policy, solely for the purpose of operating the App.
To exercise your rights under the MHMD, contact us at [email protected]. We will respond within 30 days.
D. European Economic Area / United Kingdom Residents (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):
- **Legal basis for processing:** We process your personal data based on your consent (which you provide when creating an account and accepting this Privacy Policy) and for the performance of our contract with you (providing the App's services).
- **Special category data:** Health-related data (nutrition logs, binge/urge logs, mood ratings, body measurements) is processed based on your explicit consent, which you provide during account setup.
- **Right of access, rectification, erasure, restriction, portability, and objection:** You may exercise any of these rights by contacting us at [email protected].
- **Data transfers:** Your data is processed in the United States. By using the App, you consent to the transfer of your data to the United States. We rely on Standard Contractual Clauses and other appropriate safeguards for international data transfers.
- **Data Protection Officer:** For GDPR-related inquiries, contact [email protected].
- **Supervisory authority:** You have the right to lodge a complaint with your local data protection supervisory authority.
---
XI. Children's Privacy
StrongHER by AFJ is not directed at children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are under 18, you may not use the App. We verify age during account setup and block account creation for users under 18.
If you believe that a child under 18 has provided us with personal information, please contact us immediately at [email protected], and we will take steps to delete such information and terminate the associated account.
---
XII. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by email before the changes take effect. Your continued use of the App after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
---
XIII. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
**StrongHER Nutrition LLC**
Email: [email protected]
---
*© 2026 StrongHER Nutrition LLC. All rights reserved.*
