Privacy & Cookie Policy

Effective October 25, 2026 | C01-EN-REV06

 

1. Who we are and how to contact us

 

 

Gear-Apps LLC operates TITANS FACTORY and The Hercules App ("we," "us," or "our"). This Privacy Policy explains how we handle personal information through our website, app, member community, coaching services, inquiries, and business support channels. Our services are intended for customers in the United States.

 

For privacy questions or requests, email sgarcia@gear-apps.com. Our technical administrator coordinates requests, with support from Manny, our trainer, when needed.

 

This policy covers information handled through www.titansfactory.com, app.titansfactory.com, our member features, and our business contact channels. It explains our practices; it does not itself authorize a recurring payment, promotional messages, public use of your photographs, or a use of health information that requires separate permission.

 

2. Information we collect

 

 

The information we handle depends on the features you use and what you provide:

 

• Account and identity information: email address, names, age, member and account identifiers, account status, and sign-in information managed by our authentication providers.

• Inquiries and communications: name, email address, phone number and country code, social profile information, and the messages or attachments you send through our forms, business email, social accounts, or direct contact with the trainer.

• Questionnaire and planning information: age, sex assigned at birth, height, weight and recent changes, goals, exercise experience, schedule, equipment, activity, sleep, meal preferences, allergies, and restrictions you provide. We also create and store related information such as calorie and macronutrient targets, recommendations, and plans.

• Training, nutrition, and progress information: saved programs, goals, workouts, exercises, sets, loads, repetitions, notes, weight entries, meals, quantities, favorites, custom foods, shopping lists, and assessments.

• Purchases and service access: plan, order and subscription identifiers, transaction and payment status, coverage dates, and billing or support records. Payment services collect payment details through checkout.

• Community and coaching content: profiles, membership requests, posts, comments, progress photographs you send directly to Manny's phone, and other materials you choose to provide for requested coaching or share with a community audience.

• Technical and operational information: browser, device, network, session, preference, security, error, and service-event information used to operate and protect the website and app.

We do not need your full payment-card number, security code, password or a copy of a medical record in an ordinary inquiry. Complete payment and sign-in steps through the relevant secure interface. If additional information is needed for a request, we will explain what is needed and how to provide it.

 

3. Where information comes from

 

 

We receive information directly from you; from the devices and browsers you use; from membership, payment, communications, and infrastructure providers supporting our services; and from the trainer in the course of your requested coaching. We also derive planning and progress information from the data you supply. When you contact us through a social platform, we receive the profile and message information that the platform makes available to us.

 

4. How we use information

 

 

We use relevant information to create and protect accounts; connect membership and app access; answer inquiries; check service eligibility; generate, display, and manage requested programs; maintain your progress and activity history; deliver agreed coaching; administer subscriptions and billing; provide support; operate community features; diagnose failures and prevent misuse; and meet applicable legal obligations.

 

The planning tool processes your answers to produce recommendations. Some requests do not qualify for automated delivery; contact us about any available individual review. A message indicating that review is needed does not mean that a trainer has already reviewed your request. Automated generation is not a medical assessment or personal review of each plan by a trainer. You can contact us if your information is incorrect or a result needs attention.

 

Submitting an inquiry requests a response about that inquiry. It does not by itself subscribe you to promotional messages or authorize us to use your identity or results in advertising.

 

Client follow-up is handled by people through text messages, WhatsApp, Instagram and the agreed service channels. Organic marketing and personal communication do not eliminate technical information handled by website, sign-in, payment or communications providers.

 

5. Who receives information

 

 

Our technical administrator and Manny may access information relevant to administration, support, and requested coaching. App access depends on the role and client assignment; a trainer role does not provide unrestricted access to every user's records. Both responsible individuals can read and respond to the shared business email and Instagram/Facebook messages. In the App, access by an assigned coach for requested coaching also requires the relevant active health-processing choice and permission for the current coach assignment. A new assignment requires a new permission before that coach accesses the records; the technical administrator's limited support or rights-handling access is separate from coaching.

 

• Wix and Wix Payments: website, accounts and membership, forms, subscriptions, payment services, community features, and service communications. Billing-related information is also used by the app to recognize service access.

• Supabase: app authentication, database services, backend operations, and storage supporting account, planning, fitness, nutrition, and service records.

• OpenAI Sites and Cloudflare: hosting and delivery of the app and its assets, including technical information involved in delivering the service. Hosting the app does not by itself mean that questionnaire information is sent to a generative AI model.

• Google/Gmail: business email and notifications. Meta: communications through Instagram/Facebook and WhatsApp. Mobile carriers and relevant messaging services support text or picture messages where available. The information handled depends on the channel, content and configuration; the use of a provider does not mean that it can read every message.

• Microsoft OneDrive: private storage of progress photographs and service files, with authorized access by Manny and our technical administrator. Apple iCloud was used previously; existing copies remain within the retention and deletion process until reconciled. Providers process files and related account information under the applicable service terms and privacy notices. These are not public galleries.

We do not share consumer health data with another company under common ownership or control with Gear-Apps LLC. This does not remove the service providers described above from the recipient inventory.

 

Providers receive information relevant to the services they perform. Some providers also handle information under their own terms and privacy notices. Other members or visitors may see material you share with the audience permitted by a community feature. We may disclose information when required by law or, where legally permitted, to protect people, address fraud or misuse, or establish and exercise legal rights.

 

Our United States customer focus does not mean that all providers process or store information only within the United States.

 

The website registration form offers Google and Facebook sign-in options and uses reCAPTCHA to help prevent automated abuse. If you choose a social sign-in option, that provider processes the authentication under its own terms and privacy notice and sends the information needed for that option. Choosing social sign-in or contacting us on a social network does not authorize access to everything in your social account.

 

Member and community profiles can be visible beyond a private coaching conversation. The Wix registration flow can create a public member profile by default. Review the registration notice and available profile-visibility settings; do not assume that a profile, post or comment is private merely because an account is required. This visibility does not authorize us to publish private progress photographs or use your information in advertising.

 

6. Health-related information

 

 

Your questionnaire answers, weight, allergies, restrictions, goals, suitability answers and progress records can reveal information about your health. We use relevant information to provide the fitness, planning and coaching services you request. The App presents the applicable health notice and a separate affirmative health-data choice before collecting sensitive suitability answers, questionnaire drafts or other health records. General registration, Terms acceptance, a risk acknowledgment or payment does not replace that choice.

 

Provide only the information needed to determine whether the feature is within our supported scope. Do not upload medical records or list diagnoses here. You can indicate that you need an individual review without describing the underlying condition. If more information is necessary, we will explain what is needed and agree on an appropriate private channel. Avoid posting sensitive health information in community areas, and contact us to agree on a suitable private channel before sending sensitive attachments. Do not send passwords or full payment-card details through messages.

 

Progress photographs sent privately to Manny support the coaching or review you request. Microsoft OneDrive is the selected destination for business-held photo files. Access is limited to Manny and our technical administrator as needed. Previously stored iCloud copies, phone files and message attachments remain covered by our privacy, retention and deletion rules until their disposition is verified. Sending a photograph privately does not authorize publication or advertising use.

 

You may contact us by SMS/text message or Instagram direct message and through the app's available fields. For one-on-one coaching, you may communicate injuries or relevant health changes through SMS, WhatsApp or another direct channel agreed with us. This does not represent private in-app messaging or progress-photo upload as an available feature.

 

We do not use customer personal information in external AI tools to provide these services. We do not collect, use or sell personal information for training large language models. The app generates plans through software formulas and rules, not an external generative AI model. Coaching calls are not recorded or transcribed. These statements concern our handling of customer information; our providers must be assessed separately under their applicable terms and settings.

 

We do not sell client personal information. We do not use or disclose health information, weight, injuries, or program information for targeted advertising. Separate permission is required before using your name, image, progress photographs, or testimonial in our advertising. Opening an account or using a program does not grant that publicity permission.

 

A private coaching conversation, a community post and advertising are different uses. Before sharing in a community, check the audience shown by that feature. Other people may save or redistribute material they can see. A future website feature for public or private progress-photo posts is not currently part of our delivered service. Any launch must explain the audience and obtain the permissions needed for that use.

 

Health information may receive additional protection under state law. Our separate Consumer Health Data Privacy Policy supplies the applicable health-data disclosures and rights. Any required health-data consent or authorization remains separate; this general policy and acceptance of Terms do not replace it. Contact our privacy email for the applicable notice or information about your health data.

 

7. Promotional messages and your choices

 

 

We will send promotional email only if you separately choose to receive it. You may withdraw that choice using the unsubscribe instructions in a promotional email or by emailing sgarcia@gear-apps.com. An inquiry, purchase, or account registration alone does not provide that choice.

 

Withdrawing from promotional email does not stop messages needed to respond to your requests or administer an existing service, such as billing, security, or account notices. We will honor applicable limits on these communications.

 

We do not treat a training message, inquiry, purchase, private photograph or community post as permission to add you to a promotional mailing list. Withdrawing permission for advertising use of your image and unsubscribing from promotional email are separate requests; tell us which choice you want to change.

 

8. Cookies, browser storage and privacy controls

 

 

Cookies are small browser files. Local storage can remain on a device between visits; session storage supports a browsing session. Our website and app use these technologies for sign-in, security, session continuity and preferences. Providers also receive technical information needed to deliver the service, including network and browser information.

 

Blocking or clearing storage may sign you out, remove a preference or prevent a feature from working. It does not delete your account, cancel a subscription, erase records held on our servers or remove information already received by a provider. The website and embedded app operate on different origins, so a browser choice may need to be applied to both.

 

App storage and purpose: App sign-in session: hercules-auth
Browser location: Persistent local storage on the app origin; authentication handled by Supabase.
Persistence and control: Supports session persistence and renewal. There is no single fixed storage lifetime stated here; clearing site data removes the local copy. Server-session validity is a separate matter.

 

App storage and purpose: Temporary Wix sign-in: hercules-wix-login-v1
Browser location: Session storage on the app origin.
Persistence and control: Sign-in attempts expire after 10 minutes. Expiration of an attempt does not mean the browser entry is automatically erased at that exact time.

 

App storage and purpose: Nutrition-unit preference: hercules-nutrition-unit, with an account-specific suffix
Browser location: Persistent local storage on the app origin.
Persistence and control: The app does not set a time-based expiration. Change the preference or clear the corresponding site data.

 

App storage and purpose: Legacy shopping-unit preference: hercules-shopping-unit, with an account-specific suffix
Browser location: Persistent local storage on the app origin.
Persistence and control: Used as a fallback for the unit preference; no time-based expiration is set in the reviewed module.

 

Signing out removes the app authentication session but does not necessarily remove display preferences or delete account information on our servers. Temporary Wix sign-in data is removed on completion or a startup error; closing a normal tab session also clears its session storage. Browser restoration behavior can differ.

 

These app entries are not a complete list of cookies used by Wix or other providers. The website, sign-in, security, community, payment and media components can involve separate storage with their own purposes and lifetimes. Storage duration is different from the duration for which an account or provider retains information on its servers.

 

Use your browser settings to view, restrict or clear cookies and site data for the website and app. A private-browsing window may limit persistence on that device; it does not prevent all provider processing. Third-party cookie restrictions can affect embedded sign-in. Contact sgarcia@gear-apps.com for help locating the relevant privacy control.

 

Do Not Track and Global Privacy Control: the app's own code does not currently change its behavior in response to DNT or GPC. Wix and other service providers may operate separate mechanisms or process technical information under their own practices. DNT and GPC are different signals; this description does not waive or replace a privacy right or a required opt-out mechanism. You may contact our privacy email about an applicable opt-out; email is not a substitute for automatically processing a signal where the law requires that.

 

Links to Instagram, Facebook and other external services take you to services governed by their own privacy practices. The providers supporting account access, payment, security and media delivery may also process information when their components load. Their processing must be considered separately from a link you choose to open. We do not represent all provider storage as essential or promise that clearing browser storage removes provider records.

 

9. Retention, cancellation, and deletion

 

 

We retain information to support accounts and requested services, preserve relevant activity history, address support and disputes, protect the service, and meet applicable legal obligations. Retention differs by category and purpose. It also depends on whether an account or service is active, outstanding requests or disputes, and requirements that apply to particular records.

 

Record category: Ordinary inquiries
Our adopted retention requirements: Delete the business-held inquiry conversation 15 days after the person's last message. For example, a last message on October 8 gives an October 23 deletion date. An automated or promotional message from us does not restart that period.

 

Record category: Inactive accounts and associated fitness history
Our adopted retention requirements: Delete after 90 days without client activity, with an email notice 30 days before deletion. Send the initial notice on day 60. A client action such as signing in or recording activity restarts the inactivity period; automated processing does not.

 

Record category: Accounts with paid service or remaining paid-block access
Our adopted retention requirements: Do not delete for inactivity while paid service or the remaining released-block access described in the Terms remains in force. Paid coverage does not reset the inactivity clock. If it prevents a scheduled deletion, cancel that event. After the protected access ends, send a new notice: deletion must be at least 30 days later and no earlier than 90 days after the last client activity.

 

Before scheduled inactivity deletion, check for new client activity or renewed paid coverage. Paid-account protection applies to routine inactivity deletion; it does not prevent a valid deletion request. The schedule implements the selected business standards; it is not a statement of universal legal deadlines or proof of operating automation. These are our adopted retention requirements. They may be carried out manually or through automated controls; the method does not change the deadlines or your rights.

 

Inquiry-to-client records: if an inquiry leads to a service, transfer only the information needed to provide that service into the client record. The original inquiry conversation still follows the 15-day rule. Service records then follow the rules for their category and purpose; becoming a client does not permit indefinite retention of the original conversation.

 

The inactivity procedure covers the account and associated fitness history across relevant systems. Progress photographs and messages on phones, in OneDrive and in remaining legacy iCloud copies are personal information. Private storage and two-factor authentication do not create permission for indefinite retention. Keep copies only for a necessary, lawful purpose and include them in requests that cover them.

 

Billing, tax, consent, privacy-request, security or dispute records may require a different retention period. We retain only the information needed for the particular obligation or lawful purpose, limit its use, and remove it when that reason ends. The existence of such a record does not justify keeping an entire fitness history or photograph collection. A shorter mandatory deadline or a valid deletion request can require earlier action.

 

Canceling a paid subscription does not automatically delete your account or completed activity. A canceled program may retain access to already released planning until the later of its verified paid-through date and the scheduled end of its final paid block, as described in the Terms. Routine inactivity deletion and expired-plan cleanup must protect that remaining access. Only after the applicable access entitlement and recovery period end may expired planning be removed separately from your account and past activity, subject to applicable rights and retention rules. Removing or hiding an item in the interface does not necessarily erase all stored copies.

 

Email sgarcia@gear-apps.com to request deletion. We will identify the scope, verify the request as needed, and address related records and providers as required by applicable law. We will explain any lawful retention exception or permitted delay, including one affecting backups. These are not blanket exceptions for keeping health information. Removing information needed for a feature may prevent us from continuing that feature.

 

Deleting a business-held conversation or file does not necessarily remove a copy retained by its sender or by a provider acting independently. Our deletion procedure must address copies under our control, including synchronized storage and recovery folders where applicable. Backup or provider limitations must be assessed under the applicable law, not treated as a general exemption from deletion.

 

10. Privacy requests and rights

 

 

Use available account controls to review or correct information, or email sgarcia@gear-apps.com to request access, correction, a copy, or deletion. You may also contact us about withdrawing consent or objecting to a use. Depending on your location, the information involved, and the law that applies, additional rights may include information about recipients, portability, restrictions or opt-outs, an appeal, or a complaint to a regulator. You may also use Health Data Choices in the App to withdraw health-data consent or assigned-coach permission separately. Withdrawal stops processing that depends on that permission; it does not automatically cancel a subscription or delete records. Account and privacy-request options, and access to your own existing records as permitted by law, remain available without a new health-data grant.

 

Describe what you need and provide the email address, social profile, or other basic information reasonably needed to locate the relevant records. You do not need an account to make a privacy request. We may request reasonable verification or evidence of an authorized representative's authority. Do not send passwords or unnecessary medical records to verify a request.

 

We will respond within the applicable legal period and explain any permitted extension or refusal. If an applicable law provides an appeal, you may reply to the decision or email us with 'Privacy appeal' in the subject. We will explain the applicable review and regulator-contact options. Exercising a protected privacy right will not result in unlawful discrimination; a service may still depend on information needed to provide it.

 

Verification requirements depend on the request. We do not require identity verification for an opt-out request where applicable law does not permit it. These email instructions do not replace a request method or automated opt-out mechanism required by applicable law. A request to exercise a protected right does not require a purchase.

 

A useful request identifies the feature or channel involved, the email address or other identifier you used, and the action you want. Examples include a copy of questionnaire and progress records, correcting a measurement, deleting a closed account or withdrawing a specified permission. Do not include more sensitive detail than needed to find the records.

 

We review requests across the systems and business channels within their scope, rather than assuming an action in the app also changes Wix, email or the trainer's phone. When another provider independently controls relevant information, we will explain the appropriate contact or available next step. A request for deletion is separate from stopping future subscription renewals; tell us if you want both.

 

11. Age and eligibility

 

 

Our services are intended for United States customers aged 16 or older. We do not offer services to children under 16. Particular features may have additional eligibility requirements; the minimum participation age does not guarantee eligibility for automated program delivery.

 

Participants aged 16-17 must have a parent or legal guardian's permission before beginning one-on-one Personalized coaching. This service rule does not replace any privacy consent or other permission required by applicable law. Contact us if you believe an ineligible child has provided personal information so that we can investigate and take the steps required for the circumstances.

 

Automated program generation is available only to adults aged 18 or older who meet the supported feature checks. This feature boundary is different from the minimum age of 16 for available account and separately reviewed service options. An age of 18 or older does not guarantee support for every age, measurement or need. A review-required result does not mean that an individual review has already occurred.

 

For participants aged 16-17, any additional privacy permissions and restrictions required by the applicable state law still apply. Permission for one-on-one coaching does not authorize unrelated optional processing or publicity. Contact us if a child has provided information that the service should not hold.

 

12. Security and processing locations

 

 

We use access controls and safeguards designed to protect personal information. The administrator uses a personal OneDrive account with two-factor authentication for the selected business file storage. Business files require restricted access and appropriate sharing controls. No online service can guarantee absolute security. Protect your credentials and contact us promptly if you suspect unauthorized access.

 

In the app, access depends on the user's role and client assignment, as described in section 5. Use your own account, keep your device protected, and sign out when using a shared device. Our use of security measures is not a guarantee that every communication channel or recipient is equally protected. Contact us before sending sensitive attachments through a new channel.

 

Our services are intended for United States customers, but service providers and their authorized support or infrastructure may process information in other countries. A provider's brand name, the location of our business or the location of one database does not mean that every copy or processing activity stays in the United States.

 

13. Changes and contact

 

 

We will post the current policy on the website and identify its effective or last-updated date. For a material change, we will provide a prominent website or app notice and an additional direct notice when required by law or appropriate to the affected service. Where a new use requires permission, we will seek that permission before the new use; posting a revision is not a substitute.

 

For a privacy question, request, correction, deletion or applicable appeal, contact Gear-Apps LLC / TITANS FACTORY at sgarcia@gear-apps.com. Our technical administrator coordinates the response, and Manny assists when needed. If you need this policy in another accessible format, contact the same address.