Privacy Policy

Last updated: March 2, 2026

1. Introduction

Welcome to BOLT Zurkhaneh ("BOLT Club," "we," "our," or "us"), a product of Fig.1 AI, Inc. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our training platform, mobile applications, and website (collectively, the "Services").

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address, name, profile photo (when using social sign-in)
  • Payment Information: Billing details processed through Stripe and app store payment systems (we do not store payment card details)
  • Communication Data: Support requests, feedback, contact form submissions
  • Chat Data: Conversations with Coach Kenny AI

2.2 Information Automatically Collected

  • Usage Data: Video watch progress, module completion, exercise tracking, feature usage
  • Technical Data: IP address, browser type, device information, operating system
  • Performance Data: App performance metrics, error logs

2.3 Information from Third Parties

  • OAuth Providers: Profile information when signing in with Google or Apple
  • Payment Processors: Transaction confirmations from Stripe, Apple App Store, and Google Play

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our training platform and Services
  • Track your training progress across devices and sessions
  • Power the Coach Kenny AI assistant with relevant context
  • Process subscriptions and payments
  • Communicate with you about updates, support, and training content
  • Ensure security and prevent fraud
  • Comply with legal obligations

4. Data Sharing

We share your data only with:

  • Service Providers: Firebase (authentication and data storage), Stripe (payments), OpenAI (AI coaching), Vercel (hosting), Apple and Google (app distribution and in-app purchases)
  • Legal Requirements: When required by law or to protect rights
  • Business Transfers: In case of merger, acquisition, or sale
  • With Your Consent: When you explicitly agree

We never sell your personal data.

5. Data Retention

We retain your data for:

  • Active Accounts: As long as your account is active
  • Training Progress: As long as your account is active
  • Chat Conversations: 60 days after last activity
  • Analytics: 90 days
  • After Account Deletion: 30 days for recovery, then permanently deleted

6. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data
  • Portability: Receive your data in a portable format
  • Object: Object to certain processing
  • Restrict: Limit how we use your data

To exercise these rights, contact privacy@fig1.ai

7. Data Security

We implement appropriate security measures including:

  • Encryption in transit (TLS) and at rest
  • Firebase Authentication with secure token management
  • Access controls and role-based permissions
  • Regular security assessments
  • Incident response procedures

8. International Transfers

Your data may be transferred to and processed in countries outside your residence, including the United States. We ensure appropriate safeguards through Standard Contractual Clauses, Data Processing Agreements, and adequacy decisions where applicable.

9. Children's Privacy

Our Services are not directed to individuals under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

10. Cookies and Tracking

We use only essential cookies for authentication and session management. We do not use third-party advertising cookies or tracking pixels on our platform.

11. Third-Party Links

Our Services may contain links to third-party websites, including equipment retailers. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this policy and will notify you of material changes via email or in-app notification. Continued use of the Services after changes constitutes acceptance.

13. Additional Rights for EEA and UK Residents

If you are in the European Economic Area or United Kingdom, you have additional rights under GDPR including the right to lodge complaints with your local supervisory authority.

14. California Privacy Rights

California residents have additional rights under CCPA including the right to know what personal information is collected, the right to delete, and the right to opt-out of the sale of personal information. We do not sell personal data.

15. Contact Us

For privacy questions or concerns: