Privacy Policy

This policy applies when you use Brolic, visit brolic.app, join the waitlist, contact support, or use an AI or import feature. Product questions go to support@brolic.app. Privacy requests go to privacy@brolic.app.

Depending on how you use Brolic, we may collect information you provide or create, such as account and profile details, goals and preferences, food, workout, Protocol and progress records, photos or files, AI and import content, support messages, and waitlist information. We may also collect general subscription, app and website usage, device, network, and diagnostic information needed to operate and improve the service.

Apple Health information is accessed only when you separately choose to grant a permission. Information collected can vary based on the features and permissions you use.

We use information to create and secure accounts, provide and sync requested features, manage subscriptions, generate editable AI and import drafts, send requested service messages, respond to support and privacy requests, prevent abuse, diagnose problems, understand general product use, and comply with law. We do not use health or fitness information for targeted advertising or marketing profiles.

Where applicable law requires a legal basis, we process information as needed to provide Brolic and perform our agreement with you; with your consent; for legitimate interests such as operating, securing, supporting, and improving Brolic; or to meet legal obligations. When information is treated as sensitive or health information, we rely on consent or another basis permitted by law. You may withdraw consent, subject to legal or contractual limits, by changing the applicable permission or contacting privacy@brolic.app.

Apple Health access is optional and controlled by Apple permissions. Brolic uses information you authorize only to provide health and fitness features you request, such as setup, trends, or saving selected records back to Apple Health. It is not used for advertising, marketing profiles, or unrelated data mining.

You can change permissions in Apple Health or iOS Settings. Apple Health records are not deleted when you delete your Brolic account.

When you choose an AI or import feature, Brolic may send the prompt, file, photo, media, text, or public URL you selected through Brolic services and an AI provider to create a structured, editable draft. Review, change, save, or discard the draft yourself. Drafts are not medical advice, diagnoses, prescriptions, dosage recommendations, or automatic changes to saved content.

A public-URL import makes a normal server request to the external host. Brolic does not use your credentials or bypass private access, login gates, regional controls, or DRM. Provider handling follows applicable terms and Brolic's production configuration.

We may share information with service providers that help operate Brolic, including providers for account services, hosting and storage, subscriptions and payments, analytics and diagnostics, communications and support, and AI or import processing. These providers may process information only as needed to provide their services. We may also disclose information when required by law, to protect users or the service, or as part of a business transaction subject to appropriate safeguards.

Brolic does not sell personal information. We require service providers to handle information consistently with this policy and applicable law.

We retain personal information for as long as needed to provide Brolic, meet legal and operational requirements, resolve disputes, and protect the service. After account deletion, some information may remain for a limited time in backups, diagnostics, support records, or where required by law.

Brolic uses account-based access controls and private storage for supported synced content. No system can be guaranteed completely secure.

Deleting your account ends access immediately. Permanent deletion begins after 24 hours and may take longer in some cases. Some information may remain temporarily in backups or where required by law. See the Account Deletion page.

Depending on where you live, you may have rights to access, correct, delete, restrict or object to certain processing, obtain a copy of your personal information, withdraw consent, or appeal our response. You may also have the right to complain to a privacy regulator.

To submit a request, email privacy@brolic.app and name the request type. We may verify your identity before completing a request and will respond as required by applicable law. Where permitted, an authorized agent may submit a request for you, and we may verify their authority. You can manage app permissions through Apple controls. Do not send a password, authentication token, or unnecessary sensitive content.

Brolic and its service providers may process information in Canada, the United States, and other locations where they operate. Information processed outside your country may be subject to the laws of that jurisdiction. Where required by applicable law, we take appropriate steps to protect information processed outside your country.

Brolic is intended for adults aged 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided information to Brolic, contact privacy@brolic.app so we can investigate and delete it as appropriate.

We may update this policy as Brolic, its providers, or legal requirements change. Material changes will be communicated when required. For more information, visit Support, read the Terms of Use or Non-Medical Disclaimer, or email privacy@brolic.app.

PSG Labs Inc. is the controller responsible for Brolic. Its business mailing address is 112-970 Burrard St, Office #1374, Vancouver, BC V6Z 2R4, Canada.