Privacy
Policy
Effective Date: June 9, 2026 · Last Modified: July 15, 2026
For Parents: Activate Fitness is designed for use by children under parental supervision. We comply with COPPA and do not collect personal information from children under 13 without verifiable parental consent. We do NOT sell data, use tracking, or show ads. Adults using Active Mode for themselves: see Section 1 ("Use by adults for themselves") and Section 5A.
1. Introduction
This Privacy Policy describes how ATA IT Services, LLC, an Indiana limited liability company doing business as Activate Fitness ("Activate Fitness," "we," "us," or "our"), collects, uses, discloses, and protects information when you and your child use the Activate Fitness mobile application (the "App") and the website at activatefitnessapp.com (the "Site") (collectively, the "Service").
Activate Fitness is designed for parents to set up and supervise their children. The App rewards a child's physical activity (steps and exercise) with screen time on the child's Apple device, using Apple's Screen Time and HealthKit frameworks.
Because the App is used by children, we comply with the Children's Online Privacy Protection Act of 1998 ("COPPA"), Apple's Kids Category requirements, and other applicable child-privacy laws. We do NOT sell, rent, share for cross-context behavioral advertising, or otherwise monetize personal information about children or parents.
Use by adults for themselves ("Active Mode"). Activate Fitness may also be used by an adult account holder to earn their own screen time through physical activity, without managing a child. Every account is an Admin account; an adult account holder may create a single self profile and switch their device into Active Mode, in which the App tracks the account holder's own activity and enforces the account holder's own screen-time rules. When you use the App for yourself, you are both the account holder and the data subject: the profile, activity, screen-time, and device information described in Section 3 is collected about you rather than about a child, and we process it under the same minimal-collection, no-sale, no-advertising practices described in this Policy. The children's provisions in Section 5 apply only to child profiles you create; Section 5A explains how Active Mode is limited to adults.
2. Who We Are
- Legal entity: ATA IT Services, LLC (Indiana)
- Doing business as: Activate Fitness
- Founder: Andrew Armour
- Email: andrew.armour@activatefitnessapp.com
- Phone: +1 (317) 604-9554
- Address: 1869 S Philadelphia Pass, New Palestine, IN 46163
3. Information We Collect
A. From Parents (Account Information)
- Email address and password (or Sign In with Apple identifiers)
- Parental consent records: timestamp, age category, App version, consent method
- Any information you voluntarily send via support email
B. About Profiles You Create (Children, or Yourself)
- Profile first name (or nickname) and date of birth or age — the child's for a child profile, or your own for a self profile
- Optional profile photo, stored in Google Cloud Storage
- A self-profile designation (a flag marking a profile as belonging to the adult account holder rather than to a child)
- Admin-configured settings: step goals, minutes per goal, daily max, schedules, restricted apps/categories, wearable selection
C. Health & Activity Data (Apple HealthKit)
- Daily step count from the device or paired wearable
- Apple Watch exercise minutes (when Apple Watch is selected)
- Source identifiers used to filter trusted sources and prevent manipulation
Important: Raw HealthKit samples are NOT transmitted off the device. We only transmit derived aggregate values (e.g., "today's step total") to our backend so paired devices and the Admin dashboard can display the same number. For a self profile, this data is about you, the account holder. We do not share Health Data with any third party, do not use it for advertising, and do not disclose it to data brokers.
D. Screen Time & App-Usage Data
- FamilyActivitySelection tokens (opaque — cannot be linked to specific apps by us; Apple's framework prevents that)
- DeviceActivity event counts for enforcing restrictions
- Screen-time balance, session times, and pause/resume events
- Wearable exception requests submitted by your child, including an optional short message (e.g., "charging my watch"), shown to you for approval (child profiles only)
E. Device & Technical Information
- Device identifier for vendor (identifierForVendor) — for pairing only
- Firebase Cloud Messaging push token — for notifications only
- App version, OS version, and approximate time zone
- Paired device name (e.g., "Emma's iPhone") and last-active timestamp — shown in your dashboard so you can manage paired devices
- Anonymous Firebase Authentication UID for paired child devices; a self profile operates under your own authenticated account
- Crash reports via Firebase Crashlytics — enabled only after you grant consent during setup; includes device model, OS version, and technical crash details. Used solely to diagnose and fix bugs, never for advertising or profiling
F. What We Do NOT Collect
- NO precise location, GPS, contacts, browsing history, or social-media data
- NO persistent advertising identifiers (IDFA)
- NO third-party analytics SDKs that profile users
- NO advertising SDKs of any kind
4. How We Use Information
We use information only to:
- Provide the Service — accounts, pairing, step tracking, screen time, restrictions
- Maintain verifiable parental consent records (COPPA)
- Send push notifications about progress, earned rewards, and account events
- Protect against fraud, abuse, and step manipulation
- Communicate about service issues, security alerts, and support
- Comply with legal obligations and enforce our Terms of Service
We do NOT use any information for behavioral advertising, profiling, automated decision-making, or sale to third parties.
5. Children's Privacy (COPPA Notice)
In compliance with COPPA:
- Direct notice: We notify parents before collecting any data from children under 13
- Verifiable consent: We obtain consent through authenticated account creation, explicit checkbox, and timestamped consent records
- Minimal collection: We collect only what's necessary for the App to function
- No behavioral advertising: Children's data is never used for advertising
- Persistent identifiers: FCM tokens and device identifiers are used solely for internal operations (notifications and device sync)
Parental Rights Under COPPA
At any time, a parent may:
- Review all personal information collected about the child
- Request deletion of the child's personal information
- Refuse further collection (may require discontinuing the Service)
- Revoke consent at any time
Use the in-App deletion control, unpair the child device, or email andrew.armour@activatefitnessapp.com. We respond within 30 days.
5A. Active Mode Is Adults-Only
Self profiles and Active Mode are available only to adult account holders. The "For Myself" option is age-gated and is not offered to accounts that indicated a non-adult age during setup. A child cannot be enrolled in Active Mode, and a self profile is never treated as a child profile. Creating a self profile does not reduce or alter any COPPA protection that applies to the child profiles on your account, and your self profile's data is not combined with any child's data.
6. Data Sharing
We do NOT sell personal information. We share data only with:
- Google LLC / Firebase: Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, and Crashlytics (crash reporting, enabled only with your consent) — acts as data processor under Google Cloud DPA
- Apple Inc.: HealthKit, FamilyControls, DeviceActivity, Push Notifications — governed by Apple's published terms
- Legal requirements: If required by law, court order, or to protect rights, property, or safety
- Business transfers: In connection with a merger, acquisition, or sale of assets — with prior notice to you
7. Apple HealthKit Disclosure
We comply with Apple's HealthKit terms:
- We will not use HealthKit data for advertising or use-based data mining
- We will not disclose HealthKit data to third parties without user permission
- We will not sell HealthKit data to advertising platforms, data brokers, or information resellers
Widget & Live Activity
The Home Screen widget and Lock Screen Live Activity read from local device storage only — no network requests are made.
App Deletion Prevention
While parental controls are active, iOS prevents the app from being deleted (Apple's denyAppRemoval). Parents can unpair the device (requires PIN) to allow deletion.
8. California Residents — CCPA / CPRA
If you are a California resident, the CCPA grants you the following rights:
- Right to know what personal information we collected, from what sources, for what purposes
- Right to access and obtain a portable copy of your personal information
- Right to delete your personal information (subject to limited exceptions)
- Right to correct inaccurate personal information
- Right to opt out of sale and sharing — we do not sell or share
- Right to non-discrimination for exercising any of these rights
Email andrew.armour@activatefitnessapp.com with subject "California Privacy Request." We respond within 45 days.
9. Other U.S. State Privacy Rights
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have similar rights. We do not engage in sale, targeted advertising, or profiling. Contact us at the email above.
10. International Users (GDPR)
If you are in the EEA, UK, or Switzerland, our legal bases for processing are: performance of a contract, consent, legal obligation, and legitimate interests. You have the right to withdraw consent, lodge complaints with your supervisory authority, and object to processing.
11. Data Retention & Deletion
- Active accounts: retained while active
- Child and self profiles: until the account holder deletes the profile or the account
- Activity data: rolling 365-day retention
- Consent records: retained while your account is active; deleted when you delete your account
- Backups: up to 30 days
We retain each category of information only as long as reasonably necessary for the purposes described in Section 4, and never indefinitely. When you delete your account, we delete all child profiles, activity records, consent records, tokens, photos, and auth records.
12. Security
We use TLS 1.2+ encryption in transit, encryption at rest in Firebase, row-level security rules, and restricted backend access. No system is 100% secure. If we become aware of a breach, we notify affected users and authorities as required by law.
13. Cookies & Tracking
The App does not use cookies. The Site uses only essential cookies. We do not use advertising cookies, analytics that profile users, or cross-site tracking.
14. Changes to This Policy
When we make material changes, we will post the updated Policy with a new date, notify you by email, and — for changes expanding children's data collection — obtain new parental consent as required by COPPA.
15. Contact Us
ATA IT Services, LLC dba Activate Fitness
Email: andrew.armour@activatefitnessapp.com
Phone: +1 (317) 604-9554
Address: 1869 S Philadelphia Pass, New Palestine, IN 46163
We respond to all privacy requests within 30 days.