Privacy
Policy
Effective Date: June 9, 2026 · Last Modified: June 9, 2026
For Parents: Activate Fitness is designed for use by children under parental supervision. We comply with COPPA and do not collect personal information from children under 13 without verifiable parental consent. We do NOT sell data, use tracking, or show ads.
1. Introduction
This Privacy Policy describes how ATA IT Services, LLC, an Indiana limited liability company doing business as Activate Fitness ("Activate Fitness," "we," "us," or "our"), collects, uses, discloses, and protects information when you and your child use the Activate Fitness mobile application (the "App") and the website at activatefitnessapp.com (the "Site") (collectively, the "Service").
Activate Fitness is designed for parents to set up and supervise their children. The App rewards a child's physical activity (steps and exercise) with screen time on the child's Apple device, using Apple's Screen Time and HealthKit frameworks.
Because the App is used by children, we comply with the Children's Online Privacy Protection Act of 1998 ("COPPA"), Apple's Kids Category requirements, and other applicable child-privacy laws. We do NOT sell, rent, share for cross-context behavioral advertising, or otherwise monetize personal information about children or parents.
2. Who We Are
- Legal entity: ATA IT Services, LLC (Indiana)
- Doing business as: Activate Fitness
- Founder: Andrew Armour
- Email: andrew.armour@activatefitnessapp.com
- Phone: +1 (317) 604-9554
- Address: 1869 S Philadelphia Pass, New Palestine, IN 46163
3. Information We Collect
A. From Parents (Account Information)
- Email address and password (or Sign In with Apple/Google identifiers)
- Parental consent records: timestamp, age category, App version, consent method
- Any information you voluntarily send via support email
B. About Children (Provided by the Parent)
- Child first name (or nickname) and date of birth or age
- Optional profile photo, stored in Google Cloud Storage
- Parent-configured settings: step goals, minutes per goal, daily max, schedules, restricted apps/categories, wearable selection
C. Health & Activity Data (Apple HealthKit)
- Daily step count from the device or paired wearable
- Apple Watch exercise minutes (when Apple Watch is selected)
- Source identifiers used to filter trusted sources and prevent manipulation
Important: Raw HealthKit samples are NOT transmitted off the device. We only transmit derived aggregate values (e.g., "today's step total") to our backend so paired devices and the parent dashboard can display the same number. We do not share Health Data with any third party, do not use it for advertising, and do not disclose it to data brokers.
D. Screen Time & App-Usage Data
- FamilyActivitySelection tokens (opaque — cannot be linked to specific apps by us; Apple's framework prevents that)
- DeviceActivity event counts for enforcing restrictions
- Screen-time balance, session times, and pause/resume events
E. Device & Technical Information
- Device identifier for vendor (identifierForVendor) — for pairing only
- Firebase Cloud Messaging push token — for notifications only
- App version, OS version, and approximate time zone
- Anonymous Firebase Authentication UID for child devices
F. What We Do NOT Collect
- NO precise location, GPS, contacts, browsing history, or social-media data
- NO persistent advertising identifiers (IDFA)
- NO third-party analytics SDKs that profile users
- NO advertising SDKs of any kind
4. How We Use Information
We use information only to:
- Provide the Service — accounts, pairing, step tracking, screen time, restrictions
- Maintain verifiable parental consent records (COPPA)
- Send push notifications about progress, earned rewards, and account events
- Protect against fraud, abuse, and step manipulation
- Communicate about service issues, security alerts, and support
- Comply with legal obligations and enforce our Terms of Service
We do NOT use any information for behavioral advertising, profiling, automated decision-making, or sale to third parties.
5. Children's Privacy (COPPA Notice)
In compliance with COPPA:
- Direct notice: We notify parents before collecting any data from children under 13
- Verifiable consent: We obtain consent through authenticated account creation, explicit checkbox, and timestamped consent records
- Minimal collection: We collect only what's necessary for the App to function
- No behavioral advertising: Children's data is never used for advertising
- Persistent identifiers: FCM tokens and device identifiers are used solely for internal operations (notifications and device sync)
Parental Rights Under COPPA
At any time, a parent may:
- Review all personal information collected about the child
- Request deletion of the child's personal information
- Refuse further collection (may require discontinuing the Service)
- Revoke consent at any time
Use the in-App deletion control, unpair the child device, or email andrew.armour@activatefitnessapp.com. We respond within 30 days.
6. Data Sharing
We do NOT sell personal information. We share data only with:
- Google LLC / Firebase: Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging — acts as data processor under Google Cloud DPA
- Apple Inc.: HealthKit, FamilyControls, DeviceActivity, Push Notifications — governed by Apple's published terms
- Legal requirements: If required by law, court order, or to protect rights, property, or safety
- Business transfers: In connection with a merger, acquisition, or sale of assets — with prior notice to you
7. Apple HealthKit Disclosure
We comply with Apple's HealthKit terms:
- We will not use HealthKit data for advertising or use-based data mining
- We will not disclose HealthKit data to third parties without user permission
- We will not sell HealthKit data to advertising platforms, data brokers, or information resellers
Widget & Live Activity
The Home Screen widget and Lock Screen Live Activity read from local device storage only — no network requests are made.
App Deletion Prevention
While parental controls are active, iOS prevents the app from being deleted (Apple's denyAppRemoval). Parents can unpair the device (requires PIN) to allow deletion.
8. California Residents — CCPA / CPRA
If you are a California resident, the CCPA grants you the following rights:
- Right to know what personal information we collected, from what sources, for what purposes
- Right to access and obtain a portable copy of your personal information
- Right to delete your personal information (subject to limited exceptions)
- Right to correct inaccurate personal information
- Right to opt out of sale and sharing — we do not sell or share
- Right to non-discrimination for exercising any of these rights
Email andrew.armour@activatefitnessapp.com with subject "California Privacy Request." We respond within 45 days.
9. Other U.S. State Privacy Rights
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have similar rights. We do not engage in sale, targeted advertising, or profiling. Contact us at the email above.
10. International Users (GDPR)
If you are in the EEA, UK, or Switzerland, our legal bases for processing are: performance of a contract, consent, legal obligation, and legitimate interests. You have the right to withdraw consent, lodge complaints with your supervisory authority, and object to processing.
11. Data Retention & Deletion
- Active accounts: retained while active
- Child profiles: until parent deletes the child or account
- Activity data: rolling 365-day retention
- Consent records: life of account plus 2 years (16 CFR 312.10)
- Backups: up to 30 days
When you delete your account, we delete all child profiles, activity records, consent records, tokens, photos, and auth records.
12. Security
We use TLS 1.2+ encryption in transit, encryption at rest in Firebase, row-level security rules, and restricted backend access. No system is 100% secure. If we become aware of a breach, we notify affected users and authorities as required by law.
13. Cookies & Tracking
The App does not use cookies. The Site uses only essential cookies. We do not use advertising cookies, analytics that profile users, or cross-site tracking.
14. Changes to This Policy
When we make material changes, we will post the updated Policy with a new date, notify you by email, and — for changes expanding children's data collection — obtain new parental consent as required by COPPA.
15. Contact Us
ATA IT Services, LLC dba Activate Fitness
Email: andrew.armour@activatefitnessapp.com
Phone: +1 (317) 604-9554
Address: 1869 S Philadelphia Pass, New Palestine, IN 46163
We respond to all privacy requests within 30 days.