Privacy Policy
The Ultimate Exercise app and website · Dr Colas PLLC
Who this applies to
This Privacy Policy applies specifically to The Ultimate Exercise — the mobile app and the website at theultimateexercise.com — created by Dr Colas PLLC.
What we collect
- Account information: your email address, a unique user ID created when you sign up, and sign-in details handled by our authentication provider.
- Questionnaire responses, including your answers and the words you enter.
- Your Emotion Link selections and Ultimate Exercise work, including saved sessions, situations, REDs and GREENs, temporary admissions, secondary gains and concrete actions.
- Beliefs, feelings and reflections you write or save.
- Communication and relationship drafts.
- Habit and GREEN practice information, such as practice dates and durations.
- Other content you create and save in the app, such as purpose, goals and values.
- Full Access status (for example, purchased or not) from the store or payment provider you purchase through. We do not see or store your card number.
- Messages you send us through the Connect form or the account-deletion form (your name, email and message).
Why we use it
- To create and manage your account and let you sign in.
- To save and sync your work so it is there when you return, on any device.
- To provide the app's core features, such as ordering your beliefs from your own answers and selections.
- To check whether you have Full Access.
- To respond to your requests, including account deletion.
Who can see it
Your saved app content is private to your account. Access rules on our database allow each account to read and write only its own records. It is not visible to other users and is not publicly shared or scored.
Service providers
We use service providers to run the app. They process data on our behalf only to provide their service:
- Supabase (through Lovable Cloud) — database, sign-in and backend hosting.
- Lovable — app hosting, and an AI service used by some belief features to process text you submit there.
- Apple App Store and Google Play — in-app purchases made through those stores.
Security
Data is sent between the app and our servers over encrypted HTTPS/TLS connections. No system is perfectly secure, so we don't promise absolute security.
Retention and deletion
We keep your account and saved content while your account exists. You can request deletion at any time — from Account in the app, or on the Delete Your Account page, which works without the app. Deletion removes your account and the app data stored with it, except information we must keep for legitimate legal, security, fraud-prevention or regulatory reasons. Requests are processed manually.
Not a medical service
What you write may touch on health topics. It is treated as personal reflection content, not as medical records, and the app is not a medical service.
Children
The app is not directed to children.
Changes
We may update this policy as the app changes. Updates will appear on this page.
Contact
Privacy questions? Contact us through the Connect page.