DRAFT · BETA — This policy is a working draft for the private beta period. It will be reviewed by counsel before public launch. If anything here is unclear, email info@mour.fit.
1. Who we are
Mour.fit ("we", "us") operates the Mour.fit website and the 30+ Pull-Up Blueprint app at mour.fit. We are a small training-focused product, currently in private beta.
2. What we collect
Account data
Email address
Cell phone number if you choose to provide it
Display name + chosen username
Password (hashed; never stored in plain text)
Training data
Age, sex (optional), height, bodyweight
Max strict pull-ups, dead hang PR, weighted PR
Logged sets: variation, reps, hang seconds, weight, form rating, pain rating
Completed workouts and lessons
Daily feeling check-ins
Training and coaching inquiries
Coaching application and intake answers submitted through Jotform
Scheduling details if you book a coaching call through Cal.com
Training goals, equipment access, schedule, injury notes you choose to share, and coaching-fit notes
Technical data
User-agent string
First-party usage analytics such as page/app opens, signups, log events, and waitlist joins
Payment status, subscription identifiers, access-period records, and billing portal events when paid billing is enabled
3. What we do with it
Operate the app for you — track your sets, your progress, your phases
Sync your profile across devices when you sign in
Calculate your personal stats and reports
Improve the app and understand beta retention using aggregate, non-identifying usage analytics
Administer trials, subscriptions, complimentary access, cancellation status, and support requests
Evaluate coaching fit, prepare coaching plans, and follow up on training inquiries you submit
We do not sell your data. We do not share it with advertisers.
Your complete account training record remains available regardless of plan status. A trial, paid membership, or complimentary access period may control coaching, programming, and advanced analysis, but it does not remove access to your logged history.
Authorized Mour.fit staff may access account and training information only when reasonably necessary to operate the service, provide support or coaching, investigate security issues, administer billing access, or comply with law. Administrative actions are authenticated and recorded.
4. Pull-Up Study (optional)
If you explicitly opt in to "Contribute Anonymous Training Data" in Profile → Pull-Up Study, your training stats may be included in anonymous aggregate analysis (e.g. average improvement curves, volume vs progress patterns). Your name, email, and any free-text notes are never included in study outputs. You can revoke consent anytime from the same setting.
Study consent is off by default. We pin the consent version you agreed to so we know what was opt-ed in to.
5. Where data is stored
Account and cloud-sync data: Neon Postgres, stored as per-user rows protected by database row-level security.
Uploaded form-check videos: a private Vercel Blob store. Videos are delivered only through an authenticated app endpoint.
Cloud sync is optional — the app works without a permanent account by using a temporary anonymous session.
Local-only (no account): training history, custom workouts, daily check-ins, and study setting live in your browser's localStorage. You can export or wipe them anytime via the app's Settings → Reset all my data.
We use trusted third-party services to run the product. Current providers include Neon Postgres for database storage, Vercel and Vercel Blob for hosting and uploaded files, Stripe for payments when billing is enabled, Resend for transactional email, Sentry for error monitoring, Jotform for coaching applications, Cal.com for coaching scheduling, and Google Workspace for business email. These providers process data only as needed to deliver their part of the service.
6. Your rights
Access: Export My Data downloads a full JSON of everything we have about you.
Deletion: In the app, open the account panel (sync pill, top-right) → Delete account & cloud data to erase your beta account and its cloud copy. Settings → Reset all my data wipes this device. Or email info@mour.fit and we'll remove it for you.
Correction: Edit Profile any time.
Withdraw consent: Toggle off study participation any time from Profile.
EU/UK/CA residents: you also have the right to lodge a complaint with your local data protection authority.
7. Children
Mour.fit is not intended for users under 13. Do not register an account if you are under 13.
8. Security
Authentication and sessions are handled by the server. Passwords are salted and hashed, session cookies are HttpOnly and secure in production, and per-user database rows are protected with row-level security. Administrative actions are authenticated and recorded in an audit log.
9. Changes
We will update this page when the policy changes and bump the version above. Material changes will be surfaced inside the app.