Privacy Policy for EMW: Session Tracker

Effective date: June 01, 2026
Last updated: July 01, 2026

1. Introduction

This Privacy Policy explains how [legal company or operator name] (“EMW,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information when you use EMW: Session Tracker, including our mobile application and any related services collectively referred to as the “Service.”

EMW is a basic workout-session tracking application that allows users to time workout sessions and view previous workout dates and durations.

The Service is operated by:

Legal name: DX Products LLC
Mailing address: 1 Chisholm Trail Road #450 Round Rock TX 78681 USA
Email: support@elitemalewellness.com

By using the Service, you acknowledge the practices described in this Privacy Policy.

2. Scope of this Privacy Policy

This Privacy Policy applies to personal information collected through EMW.

It does not govern the independent privacy practices of Google, Apple, Meta, device manufacturers, mobile network operators, app stores, or other third parties. Those organizations may process information under their own privacy policies.

3. Personal information we collect

We limit our collection to information reasonably necessary to operate the Service, maintain user accounts, and provide workout-session history.

A. Account and contact information

When you create or maintain an EMW account, we may collect:

First name;
Last name;
Email address;
A unique Firebase user identifier;
The authentication method associated with your account; and
Account creation and last-login timestamps.

B. Authentication information

Authentication is managed through Firebase Authentication, a service provided by Google.

If you create an account using an email address and password, Firebase Authentication processes the information required to authenticate the account.

EMW does not receive or store your password in readable form.

Firebase and our authentication providers may also process technical information needed to authenticate users, maintain account security, detect abuse, and troubleshoot login issues. This may include:

IP address;
Browser, device, or application information;
User-agent information;
Login timestamps;
Authentication tokens;
Provider-specific identifiers; and
Security and error logs.

Some of this information may be processed directly by Firebase or the selected login provider and may not be available to EMW in identifiable form.

C. Information from Google, Apple, or Meta login

If you choose to register or sign in using Google, Apple, or Meta/Facebook, we may receive limited information from that provider through Firebase Authentication.

Depending on the provider, your settings, and the permissions you approve, this information may include:

First and last name;
Email address;
A provider-specific user identifier; and
Authentication credentials or tokens required to complete the login.

We request only information reasonably necessary to create and authenticate your EMW account.

We do not request or intentionally collect your:

Google Drive files;
Google contacts;
Apple account password;
Facebook or Meta friends list;
Social-media posts;
Social-media contacts;
Private messages; or
Advertising interests.

We do not intentionally store social-media profile photographs as part of your EMW account.

D. Workout information

When you use the Service, we collect information about workout sessions that you choose to record, including:

Workout date;
Workout start time, where applicable;
Workout end time, where applicable;
Workout duration; and
Previous workout dates and durations.

EMW does not currently collect exercise type, heart rate, calories, weight, medical conditions, diagnoses, symptoms, medication information, or biometric measurements.

E. Communications

If you contact us, we may collect:

Your name;
Email address;
The contents of your message;
Information you choose to provide; and
Information needed to respond to or resolve your request.

F. Information we do not intentionally collect

The current version of EMW does not intentionally collect:

Precise or approximate location;
Contacts or address-book information;
Photos, videos, or audio recordings;
Heart rate or biometric measurements;
Medical records or diagnoses;
Information from Apple HealthKit;
Information from Google Health Connect or Google Fit;
Payment-card or bank-account information;
Advertising identifiers;
Information for behavioral advertising; or
Information about activity across unrelated applications or websites.

This Privacy Policy must be updated before any such information or functionality is introduced.

4. Sources of personal information

We obtain personal information from:

You, when you create an account, record a workout, or contact us;
Your device, when you use the timer or interact with the Service;
Firebase Authentication and other Firebase services;
Google, if you choose Sign in with Google;
Apple, if you choose Sign in with Apple;
Meta, if you choose Login with Facebook or another Meta login method; and
Security and technical systems used to operate the Service.

5. How we use personal information

We may use personal information to:

Create and maintain your EMW account;
Authenticate you and allow you to sign in;
Associate workout sessions with the correct account;
Record and display workout dates and durations;
Synchronize information across supported devices;
Provide password-reset and account-recovery functions;
Link approved authentication methods to one account;
Respond to support, privacy, and account requests;
Detect, investigate, and prevent fraud, misuse, and unauthorized access;
Maintain, troubleshoot, and improve the reliability and security of the Service;
Enforce our Terms of Use;
Comply with applicable legal obligations; and
Establish, exercise, or defend legal claims.

We do not use workout information to diagnose medical conditions, determine insurance eligibility, make employment decisions, or provide medical advice.

6. Firebase and Google cloud services

EMW uses Google Firebase to provide authentication, database storage, and related infrastructure.

The Firebase services used by EMW may include:

Firebase Authentication, for account registration, sign-in, password reset, and authentication-provider management; and
[Cloud Firestore or Firebase Realtime Database—select the service actually used], for storing account information and workout history.

Google processes information through Firebase to provide these services, maintain security, prevent abuse, and support the operation of the Firebase platform.

EMW does not use a Laravel backend for authentication or user-data storage.

Before publishing this Privacy Policy, we will verify which Firebase products are enabled. If Firebase Analytics, Crashlytics, Performance Monitoring, Cloud Messaging, App Check, or another Firebase service is enabled, this Privacy Policy will be updated to describe the additional information involved.

7. Third-party login services

EMW may allow you to create or access an account using:

When you select one of these options, the provider authenticates your identity and sends limited account information to Firebase Authentication and EMW.

The provider may know that you used its service to sign in to EMW. Its collection and use of information is governed by its own privacy policy and account settings.

Sign in with Apple

If you use Sign in with Apple, you may be able to choose whether to share your personal email address.

If you choose Apple’s “Hide My Email” option, Apple may provide EMW with a private relay email address. EMW will use that relay address as your account email unless you later update or link another authorized sign-in method.

Apple may provide your name only during the initial authorization. We may store the name supplied during that initial login so that it remains associated with your EMW account.

Google sign-in

If you use Sign in with Google, Google may provide your name, email address, and a unique Google account identifier, subject to your settings and the permissions displayed during login.

EMW does not request access to your Gmail, Google Drive, contacts, calendar, photos, or other Google content merely because you use Google to sign in.

Meta or Facebook login

If you use Meta or Facebook login, Meta may provide your public profile name, email address, and a provider-specific account identifier, subject to your settings and the permissions displayed during login.

EMW does not request access to your friends list, posts, photos, contacts, private messages, or advertising profile merely because you use Meta or Facebook to sign in.

Linking authentication methods

You may be able to link more than one authentication method to the same EMW account.

If two separately created accounts use the same or related email address, we may require additional verification before linking the accounts or combining workout information.

We do not guarantee that two separate accounts can always be merged.

Revoking provider access

You may be able to revoke EMW’s login access through your Google, Apple, or Meta account settings.

Revoking provider access may prevent you from signing in using that provider. It does not automatically delete:

Your EMW account;
Your Firebase Authentication record; or
Workout information stored by EMW.

To delete your EMW account and associated workout information, you must use the deletion process described in Section 13.

Deleting your EMW account does not delete or modify your separate Google, Apple, or Meta account.

8. How we disclose personal information

We may disclose personal information in the following circumstances.

A. Service providers

We may disclose information to service providers that perform services on our behalf, including:

Google Firebase, for authentication, storage, hosting, security, and technical infrastructure;
Google, Apple, or Meta, when you choose the applicable login method;
Email or customer-support providers, if used; and
Professional advisers, such as attorneys or accountants, where reasonably necessary.

Service providers are permitted to process information only for the purposes for which it is provided, subject to their applicable agreements and legal obligations.

B. Legal and safety purposes

We may disclose personal information when we reasonably believe disclosure is necessary to:

Comply with applicable law, legal process, or a valid government request;
Protect the rights, property, or safety of EMW, our users, or others;
Investigate fraud, abuse, security incidents, or violations of our Terms of Use;
Enforce our agreements; or
Establish, exercise, or defend legal claims.

C. Business transactions

If EMW or its assets are involved in a merger, acquisition, financing, restructuring, bankruptcy, or sale, personal information may be disclosed as part of that transaction.

Any recipient would be required to handle personal information consistently with applicable law. We will provide notice where legally required.

D. With your direction or consent

We may disclose information when you direct us to do so or provide consent.

9. Sale, targeted advertising, and profiling

EMW does not sell personal information for money.

EMW does not sell or “share” personal information for cross-context behavioral advertising as those terms are defined under California privacy law.

EMW does not use personal information for targeted advertising based on activity across unrelated applications or websites.

EMW does not use personal information for profiling that produces legal or similarly significant effects concerning a user.

We do not provide workout history to data brokers, advertisers, employers, health insurers, or marketing networks.

If these practices change, we will update this Privacy Policy and provide any legally required notice and opt-out choices before beginning the new practice.

10. California Notice at Collection

This section provides a summary of the categories of personal information EMW may collect.

Category	Examples	Purposes	Categories of recipients
Identifiers and contact information	Name, email address, Firebase user ID, provider-specific user ID	Account creation, authentication, support, security	Firebase and the login provider selected by the user
Account and authentication information	Login method, authentication token, account timestamps	Login, account security, fraud prevention	Firebase and the selected login provider
Internet or electronic activity information	IP address, device or browser information, user agent, login and security logs	Authentication, security, troubleshooting	Firebase and technical service providers
Fitness or activity information	Workout dates, start and end times, workout duration	Workout timing, history, synchronization	Firebase database services
Communications	Support messages and contact information	Responding to users and resolving requests	Support providers and professional advisers, where applicable

We retain these categories as described in Section 12.

We do not currently sell or share these categories for cross-context behavioral advertising.

11. Cookies, analytics, and tracking technologies

The current version of the mobile application does not use advertising cookies or technologies designed to track users across unrelated applications or websites.

EMW does not currently use Firebase Analytics or another behavioral analytics service.

Authentication providers may use cookies or similar technologies on their own login pages to operate their services, maintain security, and remember user settings. Those technologies are controlled by the applicable provider rather than EMW.

If EMW introduces a website, analytics, advertising, or additional tracking technologies, this section will be updated before those technologies are enabled where required.

12. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Account and workout information

We generally retain your account information and workout history while your account remains active.

After you delete your account or we approve a valid deletion request, we will delete or deidentify account and workout information from active systems within [30/45/60] days, unless retention is reasonably necessary to:

Comply with law;
Prevent fraud or abuse;
Resolve disputes;
Enforce agreements;
Maintain security; or
Establish, exercise, or defend legal claims.

Authentication information

The associated Firebase Authentication account will be scheduled for deletion as part of the account-deletion process.

Backups

Information may remain temporarily in encrypted or restricted backup systems until those backups are overwritten through our ordinary backup-retention cycle.

Our backup-retention period is approximately [number] days.

We will not restore deleted personal information to active use unless necessary for disaster recovery, security, or legal compliance.

Support communications

We may retain support and privacy-request communications for [number] years to document our response, comply with legal obligations, and resolve disputes.

13. Account and data deletion

You may request deletion of your EMW account and associated workout information by:

Selecting [Settings → Account → Delete Account] within the application; or
Emailing [privacy email address] from the email address associated with your account.

We may ask you to verify account ownership before completing a deletion request.

Deleting the EMW application from your device does not delete your account or information stored through Firebase.

When an account-deletion request is completed, we will take reasonable steps to delete:

The Firebase Authentication user account;
The user’s account profile stored in the Firebase database; and
Workout records associated with the user’s Firebase user ID.

Some information may be retained where required or permitted by law, including limited information needed for security, fraud prevention, dispute resolution, or legal compliance.

Revoking EMW’s access through Google, Apple, or Meta does not replace the EMW account-deletion process.

14. Your privacy choices

Account information

You may review or update certain account information through the application, where that functionality is available.

You may also contact us at [privacy email address] to request correction of inaccurate information.

Workout information

You may view your previous workout information within the Service.

Where provided, you may delete individual workout records within the application. You may also request deletion of all workout records by deleting your account.

Authentication providers

You may manage or revoke authentication permissions through your Google, Apple, or Meta account settings.

Revoking a provider may affect your ability to access EMW unless another login method is linked to the account.

Communications

We may send transactional messages relating to account security, password resets, privacy requests, or important Service changes.

Transactional messages are necessary to administer your account and may not include an unsubscribe option.

We will obtain any consent required by law before sending promotional marketing communications.

15. U.S. state privacy rights

Depending on your state of residence and whether the applicable law covers EMW, you may have rights concerning your personal information.

These rights may include the right to:

Confirm whether we process your personal information;
Access personal information we maintain about you;
Correct inaccurate personal information;
Delete personal information;
Obtain a portable copy of certain information;
Obtain information about categories of personal information collected and disclosed;
Opt out of the sale of personal information;
Opt out of targeted advertising;
Opt out of certain profiling;
Limit certain uses or disclosures of sensitive personal information;
Withdraw consent where processing is based on consent;
Appeal the denial of a privacy request; and
Receive equal service without unlawful discrimination for exercising a privacy right.

EMW does not currently sell personal information, use it for targeted advertising, or conduct profiling that produces legal or similarly significant effects.

Submitting a request

You may submit a privacy request by:

Using [Settings → Privacy or Account] in the application; or
Emailing [privacy email address] with the subject line “Privacy Request.”

Please describe the right you wish to exercise and identify the email address associated with your EMW account.

Verification

We may need to verify your identity before completing a request. Verification may include asking you to:

Sign in to your EMW account;
Confirm control of the associated email address; or
Provide information reasonably necessary to match you with the relevant account.

We will use verification information only to process the request.

Authorized agents

Where permitted by law, you may use an authorized agent to submit a request on your behalf.

We may require proof that the agent is authorized to act for you and may still ask you to verify your identity directly.

Appeals

If we deny a request and your state provides a right to appeal, you may appeal by emailing [privacy email address] with the subject line “Privacy Appeal.”

Your appeal should explain why you believe the decision was incorrect.

Nondiscrimination

We will not unlawfully discriminate against you because you exercised an applicable privacy right.

16. Consumer health data privacy notice

This section applies to the extent workout information collected by EMW is considered “consumer health data” or similar information under an applicable state law.

Categories of consumer health data collected

EMW collects only the following health- or fitness-related information:

Dates on which you record a workout;
Workout start and end times, where applicable; and
Workout duration.

EMW does not use this information to infer a medical diagnosis, health condition, disability, reproductive status, medication use, or treatment history.

Sources of consumer health data

We collect this information:

Directly from you when you start, stop, or save a workout; and
From the application timer as you use the requested workout-tracking functionality.

Purposes for collecting and using consumer health data

We use workout information to:

Provide the workout timer requested by you;
Save your workout history;
Display previous workout dates and durations;
Synchronize information with your account;
Respond to support requests;
Maintain Service security; and
Comply with applicable law.

We will obtain any consent required by law before using workout information for a materially different purpose.

Consumer health data disclosed or shared

Workout information may be disclosed to Google Firebase solely as necessary to host, store, secure, and retrieve the information for the Service.

We do not provide workout history to Google, Apple, or Meta merely because you use one of those companies to authenticate your account.

We do not disclose workout history to:

Advertisers;
Data brokers;
Employers;
Health insurers;
Social networks; or
Unrelated third parties.

Categories of third parties and affiliates

The categories of third parties that may receive consumer health data are:

Cloud database, hosting, and security providers, currently Google Firebase;
Professional advisers where disclosure is reasonably necessary for legal compliance or the defense of claims; and
Government or legal authorities where disclosure is legally required.

EMW currently has no affiliates that receive workout information.

Sale of consumer health data

EMW does not sell consumer health data.

Consumer health data rights

Subject to applicable law, you may have the right to:

Confirm whether we collect or share consumer health data;
Access consumer health data;
Obtain a list of third parties or affiliates with whom such information has been shared;
Withdraw consent for collection or sharing;
Delete consumer health data; and
Appeal a refusal to act on a request.

You may exercise these rights through the methods described in Section 15.

Withdrawing permission for EMW to store workout information may prevent us from providing workout-history functionality. You may still be able to use features that do not require the information, where available.

Deletion from backups

If consumer health data is stored in archived or backup systems, deletion may be delayed until the applicable backup is overwritten or restored, subject to the maximum period permitted by applicable law.

17. Children’s privacy

EMW is intended for a general audience and is not directed to children under 13.

You must be at least 13 years old to create an EMW account.

We do not knowingly collect personal information online from a child under 13. If we learn that we have collected such information, we will take reasonable steps to delete the child’s account and information.

A parent or legal guardian who believes that a child under 13 has provided personal information may contact us at [privacy email address].

If EMW is later directed to children under 13 or knowingly permits their registration, we will update our practices and notices and obtain verifiable parental consent where required before collecting personal information.

18. Data security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

These measures may include:

Firebase Authentication;
Encryption in transit;
Encryption provided by Firebase storage services;
Firebase database security rules;
User-based access controls;
Restrictions on administrative access;
Secure account-recovery procedures;
Monitoring for suspicious authentication activity; and
Data minimization.

Access rules should be configured so that each authenticated user can access only the workout records associated with that user’s Firebase user ID.

No application or storage system can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for using a strong, unique password where password login is enabled.

Contact us promptly at [security email address] if you believe your account or personal information has been compromised.

19. Data processing locations

EMW and its service providers may process personal information in the United States and other countries where they maintain facilities or personnel.

Data-protection and government-access laws may differ between countries.

Where required, we will use reasonable contractual, technical, and organizational safeguards for cross-border processing.

20. Third-party services and links

The Service may contain links to or integrations with third-party services.

We are not responsible for the privacy or security practices of third parties acting independently from EMW.

You should review the privacy policies of Google, Apple, Meta, and any other third-party service you choose to use.

21. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to:

The Service;
The information we collect;
Our service providers;
Authentication methods;
Applicable laws; or
Our privacy and security practices.

The updated policy will show a revised “Last updated” date.

If a change materially affects how we use personal information, we will provide additional notice through the Service, by email, or by another appropriate method where required by law.

We will obtain consent where legally required before applying a materially different practice to information already collected.

22. Contact us

Questions, privacy requests, account-deletion requests, or complaints may be directed to:

DX Products LLC
1 Chisholm Trail Road #450 Round Rock TX 78681 USA
support@elitemalewellness.com
(888) 408 3248

For account-specific requests, please contact us using the email address associated with your EMW account.