DRAFT · BETA — This policy is a working draft for the private beta period. It will be reviewed by counsel before public launch. If anything here is unclear, email info@mour.fit.
1. Who we are
Mour.fit ("we", "us") operates the Mour.fit website and the 30+ Pull-Up Blueprint app at mour.fit. We are a small training-focused product, currently in private beta.
2. What we collect
Account data
Email address
Display name + chosen username
Password (hashed; never stored in plain text)
Training data
Age, sex (optional), height, bodyweight
Max strict pull-ups, dead hang PR, weighted PR
Logged sets: variation, reps, hang seconds, weight, form rating, pain rating
Completed workouts and lessons
Daily feeling check-ins
Technical data
User-agent string
First-party usage analytics such as page/app opens, signups, log events, and waitlist joins
Payment status, subscription identifiers, access-period records, and billing portal events when paid billing is enabled
3. What we do with it
Operate the app for you — track your sets, your progress, your phases
Sync your profile across devices when you sign in
Calculate your personal stats and reports
Improve the app and understand beta retention using aggregate, non-identifying usage analytics
Administer trials, subscriptions, complimentary access, cancellation status, and support requests
We do not sell your data. We do not share it with advertisers.
Your complete account training record may remain securely stored even when some historical statistics are not available under your current plan. Access to history and analytics is determined by trial, paid membership, or complimentary access periods.
Authorized Mour.fit staff may access account and training information only when reasonably necessary to operate the service, provide support or coaching, investigate security issues, administer billing access, or comply with law. Administrative actions are authenticated and recorded.
4. Pull-Up Study (optional)
If you explicitly opt in to "Contribute Anonymous Training Data" in Profile → Pull-Up Study, your training stats may be included in anonymous aggregate analysis (e.g. average improvement curves, volume vs progress patterns). Your name, email, and any free-text notes are never included in study outputs. You can revoke consent anytime from the same setting.
Study consent is off by default. We pin the consent version you agreed to so we know what was opt-ed in to.
5. Where data is stored
Account and cloud-sync data: Neon Postgres, stored as per-user rows protected by database row-level security.
Uploaded form-check videos: a private Vercel Blob store. Videos are delivered only through an authenticated app endpoint.
Cloud sync is optional — the app works without a permanent account by using a temporary anonymous session.
Local-only (no account): training history, custom workouts, daily check-ins, and study setting live in your browser's localStorage. You can export or wipe them anytime via the app's Settings → Reset all my data.
6. Your rights
Access: Export My Data downloads a full JSON of everything we have about you.
Deletion: In the app, open the account panel (sync pill, top-right) → Delete account & cloud data to erase your beta account and its cloud copy. Settings → Reset all my data wipes this device. Or email info@mour.fit and we'll remove it for you.
Correction: Edit Profile any time.
Withdraw consent: Toggle off study participation any time from Profile.
EU/UK/CA residents: you also have the right to lodge a complaint with your local data protection authority.
7. Children
Mour.fit is not intended for users under 13. Do not register an account if you are under 13.
8. Security
Authentication and sessions are handled by the server. Passwords are salted and hashed, session cookies are HttpOnly and secure in production, and per-user database rows are protected with row-level security. Administrative actions are authenticated and recorded in an audit log.
9. Changes
We will update this page when the policy changes and bump the version above. Material changes will be surfaced inside the app.