Privacy,clearly.

Overview

VICI is a personalized fitness and strength-training application operated by IndyLabs LLC (“VICI,” “we,” “us,” or “our”). This Privacy Policy applies to the VICI mobile application, vici-app.com, support communications, account-deletion requests, and related services (collectively, the “Services”).

VICI builds and manages workout plans, guides workout execution, records completed training, tracks progress, supports coaching and AI-assisted features, and may adapt future training using information you provide and activity you record in the app.

VICI provides general fitness guidance and informational content. It is not a medical service and is not intended for diagnosis, treatment, or emergency care.

Information VICI handles

Account and authentication information

• Account details: email address, display name, account identifiers, authentication state, and account settings.
• Social sign-in information: when you choose Apple Sign-In or Google sign-in, VICI receives the authentication information and profile fields made available through that sign-in method and your selected permissions.
• Profile photo: if you choose to upload an avatar, the selected image is stored for your VICI profile.

Training profile and onboarding information

• Training goals and preferences: goals, desired app role, experience level, recent training frequency, target training days, preferred weekdays, workout duration, scheduling preferences, plan-refresh preferences, and unit preference.
• Training environment and equipment: gym or home setup, available equipment, and equipment priorities.
• Body and wellness inputs: body weight, hydration entries, recovery check-ins, limitations or injury areas you choose to provide, limitation preferences, and pain-or-concern reports entered during training.

Workout, plan and progress information

• Workout plans: generated plans, manually created plans, active/saved/archived plans, plan settings, scheduling information, exercise prescriptions, alternatives, and accepted or rejected plan changes.
• Completed training: exercises, sets, repetitions, resistance/weight, effort information where entered, rest information, skipped or substituted work, duration, completion state, and related workout history.
• Progress information: strength trends, estimated performance metrics, personal bests, muscle-group volume, weekly targets, body-weight history, streaks, calendar history, and skill-tree progress derived from completed training.
• Adaptive coaching records: recovery signals, training decisions, reason codes, supporting signals, confidence, validation state, and your responses to reviewable changes where applicable.

AI and support content

• AI interactions: prompts, questions, plan-review requests, feedback, and other content you intentionally submit to an AI-enabled feature.
• Support communications: messages, attachments, account identifiers, and contact details you provide when requesting help, reporting an issue, or making a privacy request.

Technical and service information

• Backend and security logs: limited technical information generated when the app communicates with VICI or its providers, which may include IP address, timestamps, authentication events, request/error information, and device or app-version information where made available.
• Notification information: notification preferences and, where remote push notifications are enabled, the device/push identifier needed to deliver those notifications.

How VICI uses information

We use information as reasonably necessary to operate and improve the Services, including to:

• Create, authenticate, maintain, and secure your account.
• Generate workout plans using your goal, experience, schedule, available time, equipment, training environment, and limitation information.
• Save and display active, saved, manual, adaptive, and completed workout information.
• Guide workouts with exercise instructions, set targets, rest timers, substitutions, workout shortening, and related execution features.
• Record workout history and calculate progress views such as strength trends, volume, body-weight trends, streaks, personal bests, and skill-tree evidence.
• Evaluate recovery and completed performance when adaptive coaching features determine whether future training should be reviewed or changed.
• Respond to pain, limitation, or concern information you provide and prioritize safety-related workout behavior.
• Provide AI-enabled features when you choose to use them.
• Deliver coaching and rest-timer notifications when enabled.
• Provide support, process account-deletion and privacy requests, prevent abuse, troubleshoot problems, and protect the Services.
• Comply with applicable law and enforce our agreements.

We do not sell personal information. VICI does not currently use personal information for cross-app behavioral advertising.

AI-powered and adaptive features

VICI includes several AI-assisted surfaces. Depending on the feature you use, VICI may send the content needed to process your request to a third-party AI/model service provider. That content may include text you entered and, for features that require it, relevant workout-plan or structured training context needed to produce the requested response.

Freeform VICI Assistant

The freeform assistant is user-initiated. It can answer training questions based on the content supplied to that conversation, but it is not designed to directly modify your live workout records or silently rewrite your active program.

Plan analysis and bounded coaching

AI may also assist with plan review, explanations, or structured coaching. VICI's architecture separates freeform AI text from authoritative training changes. When an AI-assisted output could affect training, VICI uses application logic, typed/structured responses, validation rules, capability checks, and review or receipt flows as applicable before a meaningful plan mutation is accepted.

Important limitations

AI output can be incomplete, inaccurate, or inappropriate for your circumstances. You are responsible for evaluating training guidance in light of your own condition, equipment, experience, and environment. Use VICI's pain/concern controls and seek qualified medical assistance when appropriate.

Service providers and information sharing

We disclose information only as reasonably necessary to operate VICI, provide a feature you request, protect the Services, or comply with law. Categories of recipients may include:

• Supabase: VICI uses Supabase services for authentication, database/storage functions, and backend/Edge Function operations.
• Apple and Google: when you use their sign-in, operating-system, app-distribution, or push-notification services.
• AI/model service providers: when an AI-enabled feature needs third-party model processing to respond to a request or perform a supported coaching/analysis function.
• Infrastructure and operational providers: providers that support hosting, delivery, security, or other technical operation of the Services.
• Professional advisers or authorities: when reasonably necessary to comply with law, protect rights or safety, investigate misuse or fraud, or respond to valid legal process.
• A successor organization: if VICI or relevant business assets are involved in a merger, financing, acquisition, reorganization, or sale, subject to applicable safeguards and notice requirements.

We may also use aggregated or de-identified information that does not reasonably identify you.

Notifications

VICI can provide workout-related notifications, including coaching notifications and rest-timer alerts. You can control notification permissions through your device and, where available, VICI's notification settings.

If remote push delivery is used, VICI or its notification provider must process a push/device identifier and delivery information so the notification can reach your device. Local rest-timer notifications may be generated on the device without requiring the contents of the timer notification to be stored as a separate training record.

Data retention and account deletion

We keep personal information for as long as reasonably necessary to operate the Services, maintain your account and training history, provide requested features, maintain security, resolve disputes, meet legal obligations, and enforce agreements. Different categories of data may have different retention periods.

You may request deletion from within the VICI app or through our account-deletion page. We may need to verify that the request relates to your account before completing deletion.

Following a verified deletion request, we will delete or de-identify personal information from active systems within a reasonable period, except for information we must retain temporarily for legal compliance, security, fraud prevention, dispute resolution, or similar legitimate purposes. Backup copies may remain for a limited period until they are overwritten or deleted through normal backup-retention processes.

Your choices and privacy rights

Your available rights depend on where you live. Subject to applicable law, you may have the right to access, correct, delete, export, restrict, or object to certain processing of personal information, and to withdraw consent where processing depends on consent.

• Update profile, training, equipment, appearance, and related preferences in the app where those controls are available.
• Choose whether to provide optional profile-photo, limitation, pain, recovery, body-weight, and similar information.
• Control notification and photo-library permissions through your operating-system settings.
• Request access, correction, or deletion by contacting admin@vici-app.com.
• Request account deletion through the app or at vici-app.com/delete-account.

We may verify your identity before fulfilling a request when reasonably necessary. We will not discriminate against you for exercising a privacy right protected by applicable law.

Security and international processing

We use administrative, technical, and organizational measures intended to protect information against unauthorized access, loss, misuse, or alteration. VICI's hosted backend uses secure network connections for its web APIs, and authentication is handled through token-based sessions and controlled backend services.

No transmission, storage, or security system is completely secure, so we cannot guarantee absolute security.

VICI and its service providers may process information in the United States and other countries. Those countries may have privacy laws that differ from the laws where you live. Where required, appropriate safeguards are used for cross-border processing.

Children's privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. A person who is below the age of legal majority where they live should use VICI only with the involvement and permission of a parent or legal guardian when required.

If you believe a child provided personal information to VICI in violation of this section, contact us so we can review and, where appropriate, delete the information.

Changes to this policy

We may update this Privacy Policy when VICI's features, providers, or data practices change. The revised policy will be posted on this page with an updated effective date. We will provide additional notice or request consent when required by applicable law.

Material changes to data collection or sharing practices should also be reflected in the privacy disclosures submitted to Apple and Google, where applicable.

Contact us

For privacy questions, rights requests, complaints, or account-deletion assistance, contact: