Refueler Privacy Policy

1. Introduction

Welcome to Refueler. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and disclose your information when you use our service to receive SMS nutrition guidance based on your training schedule.

2. Information We Collect

• Google Account Data: When you connect your Google Calendar, we access your calendar events to identify upcoming workout data (such as run duration, intensity, and timing).
• Contact Information: We collect your mobile phone number to deliver personalized nutrition recommendations via SMS.
• User Preferences: We store information regarding your training goals and preferred notification times.

3. How We Use Your Information

We use the information gathered from your Google Calendar to:

• Analyze your upcoming physical activity.
• Generate personalized nutrition and fueling recommendations tailored to your specific workouts.
• Send these recommendations to you via SMS at your requested time.

4. Data Sharing, AI Integration, and Security

Refueler does not sell your personal data. To generate your personalized nutrition plans, we share your workout event data (e.g. run title and distance) with Google Gemini, Google's generative AI service. Google Gemini is prohibited from using your data to train its models or for any purpose beyond generating your plan.

We take the following measures to protect your Google user data beyond Google's own secure environment:

• Encryption at rest: Your Google OAuth tokens are encrypted before being stored in our database using AES-256 symmetric encryption.
• Encryption in transit: All data transmitted between your device, our servers, and third-party services is protected using TLS (HTTPS).
• Minimal retention: Google Calendar data is only retained for as long as necessary to deliver your daily nutrition guidance and is never used for any other purpose.
• Access controls: Access to stored credentials is restricted to authenticated server-side processes only; your tokens are never exposed to the client or third parties beyond those described in this policy.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

5. Google OAuth2 Limited Use Disclosure

Refueler's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only access the calendar data necessary to provide training-related nutrition insights.

6. Data Retention and Deletion

We only retain your workout data for as long as necessary to provide the daily service. You may disconnect your Google Calendar or request data deletion at any time by contacting ca.ulanet@gmail.com.