fitness/resources/views/legal/privacy.blade.php

<x-app-layout>
    <section class="bg-white dark:bg-gray-900 border-b border-gray-100 dark:border-gray-800">
        <div class="mx-auto max-w-3xl px-4 sm:px-6 lg:px-8 py-8">
            <h1 class="text-2xl sm:text-3xl font-extrabold tracking-tight text-gray-900 dark:text-white">Privacy Policy</h1>
            <p class="mt-2 text-sm text-gray-500">Last updated: August 10, 2026</p>
        </div>
    </section>

    <section class="mx-auto max-w-3xl px-4 sm:px-6 lg:px-8 py-8 space-y-8 text-gray-800 dark:text-gray-200 leading-relaxed">
        <p class="rounded-xl bg-amber-50 dark:bg-amber-900/20 text-amber-800 dark:text-amber-200 px-4 py-3 text-sm">
            This policy is a starting point, not a substitute for legal advice. Before launch, replace the bracketed
            placeholders below with your actual operator details and have it reviewed for the jurisdictions you operate in.
        </p>

        <div>
            <h2 class="text-lg font-semibold text-gray-900 dark:text-white">Who this policy covers</h2>
            <p class="mt-2">
                This Privacy Policy explains how {{ config('app.name') }} ("we", "us") collects, uses, and stores
                information when you use this application. {{ config('app.name') }} is operated by
                [Operator Name / Legal Entity]. If you have questions about this policy, contact us at
                <a href="mailto:privacy@example.com" class="text-indigo-600 hover:text-indigo-500">privacy@example.com</a>.
            </p>
        </div>

        <div>
            <h2 class="text-lg font-semibold text-gray-900 dark:text-white">Information we collect</h2>
            <p class="mt-2">When you create an account, we collect:</p>
            <ul class="mt-2 list-disc ms-6 space-y-1">
                <li><strong>Account details:</strong> name, email address, and password (stored as a salted hash, never in plain text).</li>
                <li>
                    <strong>Fitness profile (optional):</strong> age, weight, height, fitness level, goals, health
                    notes, available equipment, and training preferences. You choose whether to provide these when
                    you sign up or from your profile settings.
                </li>
                <li><strong>Activity data:</strong> the workouts you build, the exercises and yoga poses you favorite, and your workout session history (what you completed and when).</li>
            </ul>
            <p class="mt-3">
                Health-related fields such as health notes, weight, and fitness goals can be considered sensitive
                personal data in some jurisdictions. We only collect them if you choose to enter them, and only to
                power features like workout recommendations and progress tracking.
            </p>
        </div>

        <div>
            <h2 class="text-lg font-semibold text-gray-900 dark:text-white">Cookies</h2>
            <p class="mt-2">
                We use strictly necessary cookies to keep you signed in and to protect the site against
                cross-site request forgery. We do not use advertising or third-party tracking cookies.
            </p>
        </div>

        <div>
            <h2 class="text-lg font-semibold text-gray-900 dark:text-white">How we use your information</h2>
            <ul class="mt-2 list-disc ms-6 space-y-1">
                <li>To provide the core features of the app: workout building, session tracking, and your dashboard.</li>
                <li>To personalize the exercise and yoga library based on your stated goals and equipment.</li>
                <li>To send account-related emails, such as email verification and password resets.</li>
            </ul>
            <p class="mt-3">We do not sell your personal information, and we do not use your data for advertising.</p>
        </div>

        <div>
            <h2 class="text-lg font-semibold text-gray-900 dark:text-white">Third parties</h2>
            <p class="mt-2">
                Our exercise and yoga pose libraries are sourced from third-party public data providers. Browsing
                that content does not send your personal data to those providers. We do not share your account or
                fitness data with any third party except as required to operate the service (for example, hosting
                infrastructure) or as required by law.
            </p>
        </div>

        <div>
            <h2 class="text-lg font-semibold text-gray-900 dark:text-white">Data retention and deletion</h2>
            <p class="mt-2">
                You can permanently delete your account and all associated data (workouts, sessions, and favorites)
                at any time from your <a href="{{ route('profile.edit') }}" class="text-indigo-600 hover:text-indigo-500">profile settings</a>.
                Deletion is immediate and cannot be undone.
            </p>
        </div>

        <div>
            <h2 class="text-lg font-semibold text-gray-900 dark:text-white">Your rights</h2>
            <p class="mt-2">
                Depending on where you live, you may have the right to access, correct, export, or delete your
                personal data. You can update most of your information directly from your profile, or contact us
                at <a href="mailto:privacy@example.com" class="text-indigo-600 hover:text-indigo-500">privacy@example.com</a> for anything else.
            </p>
        </div>

        <div>
            <h2 class="text-lg font-semibold text-gray-900 dark:text-white">Changes to this policy</h2>
            <p class="mt-2">
                If we make material changes to this policy, we will update the "Last updated" date above and, where
                appropriate, notify you directly.
            </p>
        </div>
    </section>
</x-app-layout>