Privacy Notice

Last updated: 2 October 2026

This is a courtesy translation. MellowFit operates in Mexico and the Spanish version is the binding one; if the two ever differ, the Spanish text prevails.

This Privacy Notice describes how MellowFit (“MellowFit”, “we”) collects, uses, shares, and protects your personal data, in compliance with Mexico’s Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations. By using our app or website, you accept what is described here.

1. Who is responsible for your data

The party responsible for processing your personal data is Antonio Gutiérrez Aguayo, a sole trader registered in Mexico, tax ID (RFC) GUAA9407267G2, domiciled in Zapopan, Jalisco, Mexico, who operates MellowFit. The full address is available on request. For anything related to your privacy, or to exercise your ARCO rights, write to us at contacto@mellowfit.com.mx.

2. Personal data we collect

  • Identification and contact data: name, email address, phone number and, optionally, city and profile photo.
  • Authentication data: sign-in credentials; if you sign in with Apple or Google, we receive an identifier and the email from that account.
  • Activity evidence: the photos you upload as proof of your training, with their date and the challenge they belong to.
  • Community content: reactions, comments, and chat messages you post within your challenges.
  • Waitlist: if you leave your email on the website, we keep it only to let you know when we open spots.
  • Health data (only if you connect it): your workouts and active calories from Apple Health or Health Connect. Details in the next section.
  • Usage and device data: basic technical information about the app and a push-notification identifier so we can send you reminders.

Apart from the health data described below, we do not collect sensitive personal data. Payments are processed by Apple (membership) and Stripe (fines): MellowFit never receives or stores your card details.

Health data: Apple Health and Health Connect

Connecting Apple Health (iPhone) or Health Connect (Android) is optional. The app only reads this data if you grant permission, and you can revoke it at any time in your phone’s Health or Health Connect settings.

  • What we read: your exercise sessions for the day (start time, end time, and duration) and active calories burned. We do not read any other type of health data.
  • Why: to verify and pre-fill your daily evidence with your workout’s minutes and calories, and to remind you if you logged a workout without uploading a photo.
  • What we store: for each workout you use as evidence, only its minutes, its calories, and a workout identifier (so it isn’t counted twice). We do not copy your health history.
  • Who sees it: the minutes and calories may be shown next to your evidence to the people enrolled in your challenge.
  • Who it is shared with: no one. We do not sell your health data, use it for advertising or for credit or insurance decisions, or transfer it to third parties; it is only stored in our database (Supabase, see section 5). Its use is limited to what is described here, in line with Apple Health and Health Connect policies.
  • How to delete it: revoke the permission on your phone so we stop reading it; deleting your account erases what we stored.

3. What we use your data for (purposes)

Primary purposes (necessary for the service):

  • Create and manage your account and enroll you in challenges.
  • Record your daily evidence, track your streaks, and calculate fines/donations.
  • If you connect Apple Health or Health Connect, to verify and pre-fill your evidence with your workouts.
  • Run the community features (feed, chat, teams, ranking).
  • Send you reminders and notices related to your challenges.
  • Provide support, ensure security, and prevent misuse or fraud.

Secondary purposes (not necessary; you may object):

  • Let you know about the launch if you joined the waitlist.
  • Improve the experience based on aggregated usage metrics.

You can object to the secondary purposes at any time by writing to us, without affecting your use of the service. We do not sell your personal data and we do not use it for third-party advertising.

4. Consent

By registering and using MellowFit you give your consent for your data to be processed in accordance with this notice. Where the law requires it for specific data or purposes, we will ask for your express consent.

5. Processors and transfers

We rely on technology providers that process data on our behalf and under our instructions (processors), mainly:

  • Supabase — database and storage for your account, evidence, and content.
  • Vercel — hosting for the website and the waitlist.
  • Apple Push Notification service and Firebase Cloud Messaging (Google) — delivery of notifications.
  • Resend — delivery of transactional email.
  • Apple, RevenueCat, and Stripe — billing for the membership (Apple, with RevenueCat to check whether it is active) and for fines (Stripe).

Some of these providers may process or store data outside Mexico. They only access what is strictly necessary to provide the service and are bound to maintain confidentiality. We do not make other transfers of your data to third parties except where required by a competent authority or by law.

6. Retention

We keep your data while your account is active and for as long as necessary to fulfil the purposes described or applicable legal obligations. If you delete your account, we erase your personal information and your evidence, except what we are required to keep by law.

7. Security

We apply reasonable administrative, technical, and physical security measures to protect your data against loss, misuse, or unauthorised access: encryption in transit, access control, and private storage of your evidence. No system is 100% infallible, but we work to keep your information protected.

8. Your ARCO rights

You have the right to Access your data, Rectify it when inaccurate, Cancel it, and Object to its processing (ARCO rights), as well as to withdraw your consent.

  • From the app you can edit your profile and delete your account, which erases your personal information. The exact steps, and what is kept, are in Delete your account.
  • You can also exercise any of these rights by writing to us at contacto@mellowfit.com.mx; we will respond within the timeframes set by law.

9. Cookies and similar technologies

The website uses only the technical storage necessary to function and to remember your administrator session where applicable. We do not use advertising or third-party tracking cookies.

10. Minors

MellowFit is intended for people over 18. We do not knowingly collect data from minors; if we detect one, we will delete the information.

11. Changes to this notice

We may update this notice to reflect changes in our practices or in the law. We will publish the version in force on this page with its update date; relevant changes will be communicated through the means available.

12. Contact

For questions, requests, or to exercise your rights, write to us at contacto@mellowfit.com.mx. See also our Terms and Conditions.