OXER Privacy Policy

Effective date: September 2, 2026

Last updated: September 2, 2026

This Privacy Policy describes how Certified Solutions Group LLC (“Certified Solutions,” “OXER,” “we,” “us,” or “our”) collects, uses, stores, retains, shares, and deletes information when you use the OXER mobile application (the “App”) or visit https://www.oxer.app (the “Website”).

OXER is a goal-setting and fitness application. It lets you create an account, plan and track workouts, log goals and progress, upload photos or videos related to your training, participate in community features, and, where offered, receive coaching.

By creating an account or using the App or Website, you agree to this Privacy Policy. If you do not agree, do not use the App or Website.

1. Who we are

The controller of your personal information is:

OXER

Privacy contact: info@oxer.app

Support: https://www.oxer.app/support

Phone: +1 888-963-8071

The developer named on the Google Play listing for OXER is Certified Solutions Group LLC. The same entity operates the App and Website.

2. Information we collect

We collect only the information needed to operate OXER. The categories below cover information you provide, information created when you use fitness and community features, and information collected automatically by the App or Website.

2.1 Account and contact information

When you create an account or contact us, we collect:

• Name or display name

• Email address

• Password or authentication credentials (stored in hashed form; we do not store plaintext passwords)

• Profile details you choose to add (for example bio, training focus, or coach preference)

• Communications you send to support, including the contents of those messages

2.2 Health and fitness information

OXER is a fitness and goal-tracking product. When you use those features we collect health and fitness information you enter or generate in the App, which may include:

• Workout plans, sessions, exercises, sets, reps, duration, and notes

• Goals, streaks, milestones, and progress logs

• Training preferences, experience level, and program selections

• Optional measurements or metrics you choose to record (for example body weight, if you enter it)

This information is used to provide the App’s core fitness features. OXER is a consumer wellness product. It is not a medical device, it does not provide medical advice, and it is not operated as a HIPAA covered entity or business associate.

2.3 Photos and videos

If you choose to upload media, we collect photos and videos you add to your profile, progress log, coaching thread, or community post. We access your device photo library or camera only after you grant permission, and only to let you select or capture the media you choose to upload. We do not scan your camera roll in the background.

2.4 User content and community information

If you use community, social, or coaching features, we collect content you create or share, such as posts, comments, reactions, achievements you choose to publish, and messages you send to other users or coaches. Content you post publicly or to a community feed is visible to other OXER users according to the audience you select.

2.5 Device, usage, and log information

We automatically collect:

• Device type, operating system and version, app version, language, and time zone

• Device identifiers used to operate the App (for example a resettable advertising or app instance identifier, where the platform provides one)

• IP address, browser type, referring URL, and access times when you use the Website

• In-app usage events such as screens viewed, features used, session duration, and crash or diagnostic logs

We collect this information to keep the App secure, diagnose errors, and improve performance.

2.6 Cookies and similar technologies (Website only)

The Website may use cookies, pixels, or local storage to keep you signed in, remember preferences, and understand how the site is used. You can control cookies in your browser settings. Blocking cookies may limit some Website features. The App itself does not rely on browser cookies.

2.7 Information we do not collect

We do not require government ID, payment card numbers, precise GPS location, contacts, SMS, call logs, or microphone audio to use OXER’s core features. If a future feature needs an additional data type or permission, we will update this Policy and request the relevant platform permission before collection.

3. How we collect information

• Directly from you when you create an account, complete a profile, log a workout, upload a photo or video, post in the community, message a coach, or contact support.

• Automatically through the App and Website when you use features, including device, diagnostic, and usage data.

• From the operating system after you grant a permission (for example photo library or camera).

• From you on the Website when you submit a form, including BETA access or support requests.

4. How we use information

We use the information described in Section 2 to:

• Create and authenticate your account and keep you signed in

• Provide workout planning, goal tracking, progress history, and related fitness features

• Store and display photos or videos you upload

• Operate community and coaching features you choose to use

• Send transactional messages such as account verification, security alerts, and responses to support requests

• Send product updates or motivational notifications you opt into; you can turn these off in device or in-app settings

• Maintain security, prevent fraud and abuse, debug crashes, and measure App and Website performance

• Comply with law, enforce our terms, and protect the rights of users and Certified Solutions

We do not use your health and fitness information or your photos to train third-party foundation models. We do not sell your personal information. We do not use your personal information for third-party advertising.

5. How we share information

We do not sell, rent, or trade personal information. We do not share personal information with third parties for their own marketing or advertising purposes.

We disclose information only in the following cases:

5.1 Service providers (processors)

We use vendors that process data only on our instructions to host the App and Website, store content, send email, provide customer support tools, and monitor reliability. These providers are not permitted to use OXER user data for their own purposes. They are required to protect the data with safeguards appropriate to the type of information involved.

5.2 Other users and coaches

If you publish content to a community feed, profile, or shared challenge, that content is visible to other OXER users. If you use one-on-one coaching, the assigned coach can see the account, workout, goal, and media information needed to deliver that coaching. You control what you post publicly.

5.3 Legal and safety

We may disclose information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect the safety of a person, to prevent fraud or abuse, or to enforce our rights.

5.4 Business transfers

If Certified Solutions LLC is involved in a merger, acquisition, financing, reorganization, or sale of assets, user information may be transferred as part of that transaction. The successor will be bound to handle the information consistent with this Policy or will obtain any required consent.

5.5 With your direction

We will share information when you ask us to, for example when you export your data or connect a feature that you explicitly enable.

6. Data retention

We retain personal information only as long as needed for the purposes described in this Policy, including to provide the App, maintain your account, keep the service secure, and meet legal obligations. We do not retain user data indefinitely by default.

The following retention periods apply unless a longer or shorter period is required by law or by a valid legal hold.

Data category

Retained while

Deleted or anonymized

Account and profile (name, email, credentials, profile settings)

Your account remains open

Within 30 days after account deletion or a verified deletion request

Health and fitness logs (workouts, goals, progress)

Your account remains open, or until you delete a specific log in the App

With the account, or immediately when you delete the item; residual copies leave backups within 90 days

Photos and videos you upload

You keep the item in the App, or the related post remains

When you delete the item or your account; CDN and backup copies within 90 days

Community posts, comments, and messages

The content remains published or the conversation remains active

When you delete the content or your account. Copies held by other users in their own devices are outside our control

Support correspondence

Needed to resolve the request and keep a service record

24 months after the ticket closes, unless a dispute or legal duty requires longer

Device, usage, diagnostic, and Website log data

Needed for security, reliability, and product improvement

Typically 12 months from collection, then deleted or aggregated

Cookies and similar Website identifiers

The cookie’s stated life or until you clear it

When the cookie expires, you delete it, or we rotate it

Security, fraud-prevention, and abuse records

Needed to protect users and the service

Up to 12 months after the related account is closed, or longer if an investigation remains open

 

If you stop using OXER but do not delete your account, we keep the account and associated content so you can return to your history. Inactive accounts may be removed after 24 months of continuous inactivity. We will attempt to email the address on file before an inactivity deletion.

Encrypted backups that still contain a recently deleted record are overwritten on a rolling 90-day cycle. After that cycle, the deleted record is not reasonably restorable from our systems.

We may retain a limited record after deletion when we must do so for security, fraud prevention, dispute resolution, tax or accounting rules, or another legal obligation. That residual record is restricted to what the obligation requires (for example a hashed email used to honor a deletion request and to prevent immediate re-abuse) and is not used to operate an active OXER profile.

7. Data deletion

You can delete individual workouts, goals, photos, videos, and posts from inside the App where those controls exist. Deleting an item removes it from your live account. Backup copies are purged on the schedule in Section 6.

You can request deletion of your OXER account and the personal information associated with that account. Account deletion is permanent. Deactivation or signing out is not deletion.

When we complete an account deletion we remove or irreversibly anonymize:

• Your account credentials and profile

• Health and fitness logs tied to the account

• Photos and videos you uploaded

• Community posts and messages authored by you, except where a legal duty requires a copy to be kept

• Device and usage records that identify the account, subject to the short backup and security windows in Section 6

We cannot delete information that other users legitimately hold independently (for example a screenshot they took) or that we must keep under law.

8. How to request account or data deletion

You may use any of the following methods. There is no fee.

In the App (Google Play and Apple requirement)

Open OXER → Settings → Account → Delete account. Follow the confirmation steps. This path deletes the account record and associated personal data, not merely disables login.

On the web (Google Play requirement)

Submit a deletion request through https://www.oxer.app/support or email info@oxer.app with the subject line “OXER account deletion.” Include the email address on the account. We will verify that you control the account before deletion proceeds.

What happens next

• We acknowledge a valid request within 7 days.

• We complete deletion of live account data within 30 days of verification, unless a lawful exception applies.

• Backup remnants are removed within 90 days.

• We will tell you if a narrow legal exception requires us to keep a specific record and for how long.

If you signed in with a third-party identity provider (for example Sign in with Apple or Google), deleting your OXER account does not delete that third-party account. Where the platform requires it, we will also revoke the OXER token associated with that provider.

9. Your choices and rights

9.1 Controls in the App

• Update name, email, and profile details in account settings.

• Delete workouts, goals, media, or posts you created.

• Adjust notification preferences.

• Revoke device permissions (camera, photos) in the operating system settings. The related feature will stop working until permission is granted again.

• Delete your account as described in Section 8.

9.2 Marketing communications

Transactional messages about security and your account will still be sent. You can opt out of promotional or motivational emails by using the unsubscribe link or by emailing info@oxer.app.

9.3 Rights depending on where you live

Depending on applicable law (including the California Consumer Privacy Act as amended by the CPRA, and the EU/UK GDPR if those laws apply to your use of OXER), you may have the right to:

• Access the personal information we hold about you

• Correct inaccurate personal information

• Delete personal information

• Receive a copy of personal information you provided, in a portable format

• Opt out of the “sale” or “sharing” of personal information. OXER does not sell personal information and does not share it for cross-context behavioral advertising

• Limit use of sensitive personal information. Health and fitness data and photos are used only to provide the features you request

• Withdraw consent where processing is based on consent

• Object to or restrict certain processing

• Lodge a complaint with a supervisory authority

To exercise these rights, email info@oxer.app. We will verify your request before completing it. You may use an authorized agent where the law allows it. We will not discriminate against you for exercising a privacy right.

10. Children’s privacy

OXER is not directed to children under 13, and we do not knowingly collect personal information from children under 13. You must be at least 13 years old to create an account. If you are between 13 and the age of majority in your jurisdiction, you may use OXER only with the consent of a parent or guardian where required.

If we learn that we have collected personal information from a child under 13, we will delete it and close the account. Parents or guardians who believe a child under 13 has provided information should email info@oxer.app.

11. Data security

We use administrative, technical, and physical safeguards appropriate to the nature of the data, including:

• Encryption in transit using TLS

• Encryption at rest for stored account, fitness, and media records where our hosting environment provides it

• Hashed passwords

• Access controls that limit employee and contractor access to personal information on a need-to-know basis

• Monitoring for unauthorized access and abusive use

No method of transmission or storage is completely secure. We cannot guarantee absolute security. If we become aware of a breach that requires notice under applicable law, we will notify affected users and regulators as required.

12. International transfers

Certified Solutions LLC is based in the United States. If you use OXER from outside the United States, your information is processed in the United States and in any other country where our service providers operate. Those countries may have privacy laws that differ from the laws in your country. Where required, we use appropriate transfer safeguards, such as contractual clauses with our processors.

13. Third-party links and services

The App or Website may link to third-party sites or services that we do not control. This Policy does not apply to those services. Review their privacy policies before providing information to them.

14. Do Not Track

Some browsers send a Do Not Track signal. There is no common industry standard for responding to that signal. The Website does not alter its collection practices solely because it receives a Do Not Track signal. You can control cookies as described in Section 2.6.

15. Changes to this Privacy Policy

We may update this Privacy Policy when our practices, the App, or the law changes. The “Last updated” date at the top will change when we publish a revision. For material changes, we will provide additional notice, such as an in-app message or an email to the address on your account. The updated Policy applies from the effective date stated in the notice.

16. Contact us

Questions about this Privacy Policy, our retention practices, or a request to access or delete your information should be sent to:

OXER

Attn: Privacy

Email: info@oxer.app

Support page: https://www.oxer.app/support

Phone: +1 888-963-8071