Privacy Policy

Last updated: July 2, 2026

This Privacy Policy explains how Load7 collects, uses, stores, and protects personal data when you use our website and app.

1. Data We Collect

Account data: email, login credentials, and profile preferences.
Sign-in provider data: when you sign in with Google or Apple, we receive your email and a provider account identifier.
Workout data: workouts, exercises, plans, progress, and user inputs.
Media you provide: photos or images you attach to the AI coach.
Notification data: a device push token used to deliver notifications when you enable them.
Technical data: IP-derived region, browser/device metadata, and language settings.
Billing data: payment and subscription metadata processed via Stripe (web) or the Apple/Google app stores (mobile).

Contract: to provide requested services.
Legitimate interest: security, fraud prevention, and service improvement.
Consent: optional analytics cookies where required by law, and push notifications.

Stripe (web) and the Apple App Store / Google Play (mobile, via RevenueCat) for payment and subscription processing.
Apple and Google for optional sign-in (Sign in with Apple / Sign in with Google).
Push notification delivery providers (Expo, Apple Push Notification service, and Google Firebase Cloud Messaging).
Hosting/infrastructure providers required to run the app.
Email delivery providers for verification and transactional messages.
We do not sell personal data.

Some service providers may process data outside the European Economic Area (EEA).
Where data is transferred outside the EEA, we use appropriate safeguards required by applicable law, such as Standard Contractual Clauses (SCCs).
You may request additional information about transfer safeguards by contacting [email protected].

While your account is active, we keep account and workout data needed to provide the service.
After confirmed account deletion, account, workout, chat, membership, and authentication records are deleted immediately (typically within minutes).
Minimal deletion-proof metadata (timestamp and hashed email) is retained for 30 days, then automatically deleted.
If payment records are required by law, billing processors may retain them for statutory periods under their own legal obligations.

Depending on your jurisdiction, you may have rights to access, rectify, delete, restrict, or export your data.
You may object to certain processing and withdraw consent where processing is based on consent.

We use reasonable technical and organizational measures to protect data.
The mobile app does not use cookies; it stores your settings and session securely on your device. Opening the Load7 website (including from the app) uses cookies as described in our Cookie Policy at loadseven.com.
No method of transmission or storage is 100% secure.

Step 1: Sign in to your account.
Step 2: Open account settings (mobile app: Profile; web: Dashboard -> Settings).
Step 3: Use the Delete account action and confirm deletion in the dialog.
Step 4: After confirmation, your account and associated data are permanently deleted immediately; minimal deletion-proof metadata is retained for 30 days and then automatically removed.
If you cannot access your account, contact [email protected] and request account deletion from your registered email address.

Load7 uses AI services (powered by Gemini API) to provide features like workout analysis, AI-assisted workout planning, and personalized recommendations.
When using AI features, relevant workout data (exercises, performance metrics, goals) and any images you attach are sent to the Gemini API for processing.
AI-generated insights and recommendations are computed server-side and cached to improve performance.
Data sent to AI services is subject to Google's privacy policies. We recommend reviewing Google Gemini API privacy terms for details.

Load7 is not directed at children under 16, and we do not knowingly collect personal data from children under 16.
If you believe a child under 16 has provided us personal data, contact [email protected] and we will delete it.