TeamUpFit Privacy Policy

Last updated: 15 November 2026

This policy describes how TeamUpFit (the “app”), developed by Meridia (“we”, “us”), handles information about the people who use it. TeamUpFit is a workout log that works without an account: by default, everything is stored on your device. Data is stored on our server only if you choose to create an account. The app shows no ads and uses no analytics tools.

1. Controller and contact

Data controller: Meridia. Contact for any privacy matter: labsmeridia@gmail.com.

2. Data stored on your device

To work, the app stores on your device:

• Profile: the name you choose, the profile type and, if you turn on pair mode, your training partner’s name.
• Workouts: routines, sessions (name, date, time and duration, total volume) and sets (exercise, weight, reps, whether it is bodyweight, notes and the effort rating you select).
• Settings: rest times, recommendations and other preferences.

If you do not create an account, this data never leaves your device and is deleted when you uninstall the app or clear its data from your system settings.

3. Backups and reports

You can export a backup (JSON file) or a report of your workouts (HTML file) and import them later. These files are created on your device and are only sent where you choose through the system share menu (for example, your cloud storage or a messaging app). From then on, how they are handled depends on the service you choose.

4. Optional account and cloud sync

You can create an account to use cloud features. In that case we process:

• Account data: your email address, your password (stored only as a salted hash; we never know it in plain text), your plan (free or Pro), its expiry date and the date the account was created.
• Sessions: a random session identifier, of which we store only a hash, with its creation and expiry date (60 days).
• Synced data (Pro plan only): if you use sync, a copy of your profile, routines, sessions and sets, as described in section 2, is stored on the server. When you delete an item, only a deletion marker with its identifier and date remains on the server, without its content, so your other devices know to delete it too.

Purpose and legal basis: we use this data only to give you access to your account and to sync your workouts across devices, that is, to provide the service you ask for (performance of a contract, Art. 6(1)(b) GDPR). We do not use it for advertising or profiling, and we do not sell it or share it with third parties.

Where it is stored: the server runs on Cloudflare (Cloudflare, Inc.), which acts as our processor. The database is hosted in Western Europe. Like any internet service, Cloudflare processes your IP address to deliver connections and protect them against abuse. Cloudflare may process data outside the EEA under the safeguards provided by the GDPR, such as standard contractual clauses. All communication with the server is encrypted (HTTPS).

5. How to delete your account and data

• In the app: go to Ajustes › Cuenta y nube › Eliminar cuenta y datos de la nube (Settings › Account and cloud › Delete account and cloud data). Your account, your sessions and all data stored on the server are deleted immediately.
• By email: if you no longer have the app, write to labsmeridia@gmail.com from your account’s email address and we will delete it within 30 days at most.
• Data on your device: deleted when you uninstall the app or clear its data from your system settings. Deleting your account does not remove the data on your device, and uninstalling the app does not delete your account.

6. Retention

Account data and synced data are kept for as long as the account exists and are deleted when you delete it. Sessions expire after 60 days or when you log out. You control the data on your device.

7. Other people’s data (pair mode)

If you turn on pair mode, you record another person’s name and workouts. Only do so with their knowledge. That person can also contact us to exercise their rights over any data held on our server.

8. Information we do not collect

• We do not show ads or use advertising identifiers.
• We do not use analytics or tracking tools.
• We do not access your location, contacts, photos, microphone or camera.
• We do not read data from other health or fitness apps.
• We do not sell personal data.

9. Your rights

Under the GDPR and other applicable law, you can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to labsmeridia@gmail.com. The app’s export feature also lets you get your data in a reusable format. You have the right to lodge a complaint with your data protection authority (in Spain, the AEPD).

10. Children

TeamUpFit is not directed at children under 14, and an account should not be created before that age. If you believe a child has given us data, contact us and we will delete it.

11. Security

Passwords are stored with a salted PBKDF2 hash, session identifiers only as a hash, and all communication is encrypted. Local data stays in the app’s private storage, protected by the Android system.

12. Changes to this policy

We may update this policy, for example if we add new features or payment methods. The date above shows the latest version. Significant changes will be published at this same address.

13. Data summary (Google Play)