Privacy Policy — Lion's Comeback / Operation Enough

This Privacy Policy applies to the Lion's Comeback app, also known as Operation Enough (together, the "app"), built and operated by Angry Lion Brand ("we", "our", "us"). Your trust is core to the comeback we're helping you build. This policy explains what information we collect, why we collect it, and the choices you have.

Effective date: September 20, 2026.

1. Information you provide

When you create an account and use the app, we collect the information you give us:

Account information — your email address and a hashed password. You may optionally provide your name, profile photo, age, height, weight, and unit preferences (U.S. or metric).
Profile and assessment content — answers you provide during onboarding, such as your fitness level, activity preferences, goals, medical or physical limitations you choose to share, your motivation ("my why"), and your Future Me letter.
Content you submit — journal entries, notes, favorite quotes, messages you send to the in-app AI coach, and any other text or content you type into the app.

2. Health and fitness information

The app is built around health and fitness tracking. We store the health and fitness information you choose to enter or connect, including:

Workouts and activity you log — completed workouts, exercises, sets, reps, weights, duration, distance, and manual activity entries.
Daily wellness check-ins — nutrition habits, water intake, and journal responses.
Connected device data (if supported) — if you connect a supported watch, fitness tracker, or platform, we may import activity and wellness data such as steps, active calories, exercise minutes, duration, and completed workouts. Connection is always your choice and requires your explicit consent, and you can disconnect at any time from the Health & Wearables settings.
Progress information — streaks, completion percentages, achievements, and progress photos if you choose to add them.

We do not require you to share health information to use the app, and we do not use your health information for advertising.

3. Device and technical information

To operate, secure, and improve the app, we collect limited technical information automatically, such as:

Sign-in timestamps and session information.
Device and platform type (for example, web browser, iOS, or Android) and app version.
Error and crash logs.
Basic feature usage needed to keep the service running and to understand which features are used.

We use this information to run the app, debug problems, prevent abuse, and make improvements. We do not use it to build advertising profiles, and we do not sell it.

4. Photos and other media

If you choose to upload photos or other media — such as progress photos, food photos, or exercise media you add — we store those files on your account so the feature can work. Media you upload is visible to you (and only to people you explicitly choose to share with, if such a feature is available). We do not use your personal photos for advertising or share them with other members unless you explicitly direct us to. You can delete media you have uploaded at any time.

5. How we use your information

To create and update your personalized plan and coach messages.
To calculate streaks, completion %, achievements, and progress charts.
To sync your data across your devices so your progress is never lost.
To deliver reminders and notifications you opt into.
To process memberships and credit purchases.
To protect the app from abuse, debug crashes, and improve features.

6. Third-party service providers

We rely on a small number of trusted service providers to operate the app. These include providers in the following categories:

Hosting and data storage — to run the app and securely store your account and app data.
Authentication services — to sign you in securely.
Payment processing — to handle memberships, credit packs, and refunds. Payment card details are handled by the payment processor and are not stored on our servers.
AI services — to generate your personalized plan and coach responses. When the AI generates content, only the relevant inputs needed for your request are sent. We do not send your password or payment details to AI providers, and we use providers that do not train their models on your data.
Email delivery — to send account, sign-in, and support emails.
Error monitoring — to detect and fix technical problems.

These providers process information only on our behalf and only as needed to provide the service.

7. Data sharing

We do not sell your personal data. We have never sold personal data, and we do not share it with third parties for their own advertising or marketing.

We share information only in these limited situations:

Service operation — with the service providers described in Section 6, as needed to run the app.
User-directed features — when you explicitly choose to share with another person, such as a Comeback Partner or Crew. Sharing is limited to the summary fields the feature is designed to share, and sensitive information such as heart rate, weight, photos, nutrition details, medical information, exact location, and private notes is never shared through these features.
Legal obligations — when required by law, legal process, or to protect the rights, property, or safety of our users or others.
Business transfers — if Angry Lion Brand is ever merged, acquired, or sold, user information may be transferred as part of that transaction, subject to this policy.

8. Data retention

We keep your information for as long as your account is active, or as long as needed to provide the service to you. When you delete your account (Section 9), we delete your profile, assessment, plan, journals, letters, progress records, uploaded media, and connected-device data. We may retain minimal records where required by law — for example, payment and transaction records that tax and accounting rules require us to keep.

9. Account and data deletion

You can delete your account and your data at any time:

In the app — go to Settings → Account and use the Delete Account option. This permanently removes your profile, assessment, plan, journals, letters, progress records, uploaded media, and connected-device data.
By request — email privacy@operationenough.app from the email address on your account and we will delete it for you.

10. Security

We use industry-standard safeguards to protect your information, including encrypted connections (HTTPS/TLS), hashed passwords, and database-level access controls (Row Level Security) so that your personal records are readable only by you. Access to production data by our staff is limited to what is necessary to operate and support the service. No method of transmission or storage is perfectly secure, but we work hard to protect your data and review our safeguards regularly.

11. Children's privacy

The app is intended for adults 18 years and older. We do not knowingly collect personal information from children under 18. If we learn that a child under 18 has created an account, we will delete the account and its data. If you believe a minor has provided us personal information, please contact privacy@operationenough.app.

12. Your privacy rights

Depending on where you live — including under U.S. state privacy laws such as the California Consumer Privacy Act (CCPA) and similar laws — you may have rights regarding your personal information, which can include the right to:

Know what personal information we collect and how it is used.
Access and request a copy of your personal information.
Correct inaccurate personal information.
Delete your personal information.
Not be discriminated against for exercising your rights.

We do not sell or share personal information for cross-context behavioral advertising, so "opt out of sale/sharing" rights are not applicable to the app. To exercise any right, use the in-app settings described above or email privacy@operationenough.app. We will not discriminate against you for exercising your rights. If you live outside the United States, you may have additional rights under your local laws (such as the EU/UK General Data Protection Regulation); contact us and we will honor applicable rights.

13. Changes to this policy

We may update this Privacy Policy as the app evolves or as laws change. When we make material changes, we will update the effective date above and surface a notice inside the app. Your continued use of the app after an update means you accept the revised policy.

14. Contact us

Questions about this policy or how your data is handled?

Privacy and data requests: privacy@operationenough.app
General support: support@operationenough.app

Angry Lion Brand — makers of Lion's Comeback / Operation Enough.