A clear record of what we collect and why.
This notice covers the Integrated Mechanical Systems website and Arena, our fitness, nutrition, coaching, and friendly-competition app.
Short version
We use information to respond to service requests, provide Arena features, secure accounts, and improve reliability. We do not sell personal information.
Request deletion or a copy of your data →
Optional connected features are beta-gated and may not be enabled in every Arena build.
Arena account deletion
Delete your Arena account
In Arena, open You → Account → Cloud account, groups & snapshots, choose Review cloud account deletion, and confirm the reviewed action. This removes the signed-in Arena cloud account, profile, snapshots, memberships, contributions, and groups you own.
Local phone records and files exported outside Arena are separate. Reset or clear the app workspace on each device if you want those removed too. If you cannot sign in, email Kevrock02@gmail.com with the subject Arena account deletion request; never send a password or one-time code.
1 | Scope
Who this notice is for.
Integrated Mechanical Systems LLC is the operator of this website and Arena and is responsible for the processing described here. Kevin Linardos is the privacy contact. Arena is a wellness service separate from the company's HVAC business; Arena health records are not used for HVAC marketing or customer operations. The Apple publisher account may display Kevin Linardos while Google Play displays the company; the current Arena operator is the LLC.
This notice describes the September 2026 private beta, including optional connected features in version 0.3.0. Older builds may not offer them. Signing in does not authorize diary uploads, health imports, AI processing or group score sharing. Each has its own choice. See the Arena private-beta terms.
When you contact us
Service, quote, and support forms may ask for your name, phone number, email address, city or service area, and the details you choose to include. We use this information to answer your request and coordinate service-related communication.
When a form is submitted, the information is routed through the form delivery service configured for this website. You can also contact us through a phone call, text message, or email link.
Technical information
Our hosting and security providers may process an IP address, request time, browser or device details, and the page requested to deliver pages, prevent abuse, and troubleshoot outages. The site currently does not use advertising cookies or sell visitor information.
The site may request resources such as fonts from third-party content delivery services. Your browser controls whether those requests are made.
2 | Arena app data
Information you choose to put into Arena.
Arena is designed for fitness and nutrition tracking, coaching support, and friendly challenges. The categories below describe information the app can handle; a particular beta build may keep some information only on your device or may have a feature disabled.
Account and profile
Approved tester email, account identifier, authentication/session metadata, display name or handle, optional social links, goals, schedule, equipment, preferences and limitations. Supabase verifies requested email codes or a provided account password; Resend delivers email codes. A password is not saved in your Arena diary. Profile and progress photos remain in local app storage and are excluded from supported cloud snapshots.
Fitness, nutrition, and wellness
Food entries, serving sizes, calories, macros, sodium and other nutrition values; water; workouts, sets, reps, weight, tempo, rest, substitutions and perceived effort; running/cardio distance and duration; steps, active energy, heart rate and sleep where imported; readiness, soreness, energy, body measurements, goals, plans, coaching history and notes. Optional Christian features include reading progress and private reflections or prayer text, which may reveal religious beliefs and other sensitive information. These remain local unless you choose a supported cloud snapshot containing them.
Friends and challenges
Private group invitations, membership, display name, challenge definitions and explicitly reviewed aggregate score contributions. Score events include pseudonymous event identifiers, timestamps, source labels and values. Group members do not receive your complete diary, private snapshot, faith journal or raw health-store records. Arena does not upload your phone's address book.
Device permissions
Camera capture, local barcode decoding, photo selection and reminders are optional and follow operating-system permission controls. The current health integration is read-only and does not request location, contact-book access, microphone recording, health writes or background health reads. Denying a permission leaves unrelated tracking features available. Revoke permissions in your device settings.
Why we process information
- Provide, personalize, and maintain the website and Arena.
- Calculate nutrition totals, training progress, forecasts, reminders, and challenge scores.
- Provide optional account sync, backup, friend competition, and support.
- Protect accounts, investigate abuse, fix crashes, and improve performance.
- Meet legal, safety, accounting, and dispute-resolution obligations.
Searches and nutrition sources
Food searches send search text or a locally decoded UPC/EAN barcode, filters and result limits to Arena's configured food service and enabled providers. The request does not attach your diary, serving history, profile, photos or raw health records. Nutrition data can be incomplete or inaccurate. Requests for recipe/exercise images disclose the requested content URL and normal network metadata to the content host.
4 | Storage and sharing
Your data stays in the places you choose.
You can use local tracking without an account. Ordinary local records rely on the device's application sandbox and operating-system protection; they are not a separately encrypted Arena vault. Use a device passcode. Each account has a separate local workspace. Browser sign-in is memory-only; optional remembered native login protects a minimal refresh credential in operating-system secure storage for up to 30 days, with online access checks. Anyone using your unlocked phone may be able to continue that login; it is not a separate biometric app lock.
Optional cloud snapshots send supported profile/preferences, food and activity logs, workouts, water/body history, plans/goals, saved foods/recipes/groceries, coaching history, notes and faith information to Arena's Supabase project in the United States (us-west-2). Signing in alone does not upload these records. Photos, credentials, unfinished workouts, raw health-store records/identifiers and health-permission choices are excluded. Derived imported activities can be included if you later choose a snapshot upload. Automatic/background reviewed sync remains disabled in this beta.
HTTPS protects transfers and Supabase manages storage encryption. Cloud snapshots are not end-to-end encrypted or zero-knowledge; authorized operators and providers can technically access their contents. Android disables application backup; the current native iPhone build excludes its local AsyncStorage directory from system backup. Photos, OS photo libraries, older builds and user-exported files may behave differently. Local-only data is not an online disaster-recovery backup.
We share information with service providers that host, secure, deliver, or support the services; with people you intentionally invite to a group or challenge; and when necessary to comply with law or protect users. We do not sell personal information or use health and nutrition logs for advertising.
Supabase processes identity and private database records; Resend delivers requested sign-in emails; Cloudflare and the configured food/content hosts deliver and protect network services. Apple, Google and Expo distribution/update infrastructure process installation, update and diagnostic metadata such as an installation identifier, platform/build details, request times and errors. These are used for delivery, reliability and security, not cross-app advertising tracking. Providers can process IP addresses and logs. User-selected feedback attachments go to the recipient you choose; review them before sharing.
Access, correction, export, and deletion
You can review and edit entries in the app, remove optional sharing, reset local app data, sign out, and request account deletion or a copy of information associated with your account. Use our Arena account deletion page if you cannot sign in. We may need to verify your request, and provider backups or legally required records may take additional time to expire.
Practical safeguards
Local records remain until removed from their workspace or device storage. Cloud account/profile and group records remain while the account or relevant group exists, unless deleted sooner. Snapshot storage retains up to ten recent checkpoints per account; users can remove individual snapshots. Deleting the cloud account removes its application records, snapshots, memberships, contributions and owned groups. Local records, other devices and exported copies are separate. Sign-out and local reset are not cloud-account deletion.
Provider authentication, email-delivery and security logs, residual provider backups and records required for legal obligations may remain after active app records are deleted. Their retention depends on the provider and applicable operational/legal requirements; we do not promise immediate erasure from every system. Contact us for the applicable scope and status of a deletion request. We use access restrictions, session checks and encrypted connections, but no service is risk-free or certified “bulletproof.”
Optional health and watch imports
Your categories. Your choice.
Native version 0.3.0 can request read-only steps, workouts, walking/running distance, active energy, heart rate and sleep from Apple Health, or corresponding records from Android Health Connect. You select categories and review up to seven days of records before importing. Empty results may mean no records or no permission, not zero activity. Apple Watch and compatible Android watch records must first reach the phone's health service through their supported companion software; Arena does not pair with every tracker or provide a standalone watch app.
Importing does not enable cloud backup or friend sharing. Stopping imports does not delete earlier logs or revoke operating-system permissions. Use device settings to revoke categories. Health data is used for the chosen wellness features, not advertising, data brokerage or sale. Imports are estimates, not medical monitoring or independently verified competition results.
Coaching and AI
Know when information leaves your device.
Local coaching works without sending a prompt to a model service. Paid live AI is currently disabled. If enabled in a future release, the app will disclose the provider and request a separate choice before sending a question or selected history; it will not treat account login as AI consent. No promise of model accuracy, medical suitability or zero provider retention is made. New processing requires an updated notice and any applicable consent before activation.
5 | Safety
Arena is not medical care.
Arena provides general wellness tools, not diagnosis, treatment or emergency monitoring. Stop an exercise if it causes pain, and consult a qualified professional about injuries, medical conditions, nutrition needs, pregnancy or significant changes in training. The private beta is for adults 18 and older, is not directed to children, and does not claim HIPAA certification or professional certification of its exercise demonstrations.
Depending on applicable law, you may have rights to access, correct, delete or export information, withdraw consent, restrict sensitive processing or appeal a decision. Contact the privacy address below, including for an appeal; we will verify requests proportionately and respond as applicable law requires. Do not send passwords, login codes or unnecessary health records. A future operator change or business transfer must follow applicable notice, consent, contract and security requirements; it is not blanket permission to transfer or sell health information.
Privacy questions or requests
Email Kevrock02@gmail.com for privacy and Arena requests, or email service@integratedmechanicalsystems.com for website service support.
Kevin Linardos
13253 73rd Street North
West Palm Beach, FL 33412
United States
+1 561 578 0839
When this notice changes
We will update the effective date and publish a revised page when our data practices or Arena capabilities materially change. New permissions or connected features should be reviewed in the app before you enable them.
IMS service accounts
Your service information.
Clerk provides customer authentication and email verification. Cloudflare hosts service records: your verified email, name, phone, service address, contact preferences, equipment, visit history, requests, published field reports, quotes and invoices. These details are used to coordinate HVAC/R service. Customer records are restricted to the linked account; employee access is individually authorized and permission-controlled.
Visit updates are currently shown inside the customer portal; automated service email, SMS and external calendar synchronization are not connected. Stripe payment integration is prepared but remains inactive until business setup and testing are completed. When activated, card entry occurs on Stripe's hosted checkout; IMS does not store card numbers. A payment reference and invoice status are retained.
For corrections or deletion requests, contact Service@IntegratedMechanicalSystems.com. Do not send passwords, gate codes or card details. Arena account controls elsewhere on this page are separate from IMS service accounts.