1. Who We Are
FitVault AI ("we," "us," or "our") operates the FitVault AI mobile application (the "App") available on iOS and Android. For any privacy-related questions, contact us at support@fitvaultai.app.
2. Information We Collect
We collect only the minimum information necessary to provide our services.
2.1 Information You Provide
- Profile data: Height, weight, age, gender, and fitness goals that you enter when setting up the app. This data is stored locally on your device only.
- Food diary entries: Meals, nutritional data, and calorie logs you manually enter or scan. Stored locally on your device.
- Workout data: Routine names, exercises, sets, reps, and weights you log. Stored locally on your device.
- AI Coach messages: Text messages you send to the AI fitness coach. These are processed by our AI provider to generate a response and are not permanently stored.
2.2 Health Data (Apple Health & Google Health Connect)
With your explicit permission, FitVault AI can read the following data from Apple Health (iOS) or Google Health Connect (Android):
- Step count — displayed on the home dashboard to track daily movement goals.
- Active energy burned (calories) — shown alongside nutrition data to help users understand their caloric balance.
- Exercise sessions — read to display workout history and activity trends within the app.
- Body weight — read to display weight history and progress charts within the app.
FitVault AI also uses the Activity Recognition permission to automatically detect physical activity for accurate step counting and calorie tracking, without requiring manual input.
This health data is read directly from your device and is never transmitted to or stored on our servers. It is used exclusively within the app to display your activity, fitness progress, and diary. You can disconnect health data access at any time from the app settings or your device health settings.
2.3 Automatically Collected Data
- Anonymous user identifier: A randomly generated anonymous ID created by RevenueCat (our subscription provider) to manage your subscription. This ID is not linked to any personal information.
- Purchase and subscription data: Transaction information processed by Apple App Store or Google Play Store. We do not receive your payment card details. RevenueCat handles subscription verification.
- Crash reports: If the app crashes, anonymized crash diagnostic data may be collected by Apple / Google platform services to help us fix bugs.
2.4 Data We Do NOT Collect
- We do not collect your name, email address, or phone number (no account required).
- We do not collect location data.
- We do not collect contacts or camera roll photos beyond real-time food scanning.
- We do not sell your data to third parties.
- We do not use your data for advertising purposes.
3. How We Use Your Information
- To provide the service: Displaying your nutrition diary, workout routines, step count, and AI coach responses within the app.
- To process subscriptions: Verifying your subscription status through RevenueCat and the app stores.
- To improve the app: Using anonymized crash data to identify and fix technical issues.
- To respond to support requests: If you contact us via email, we use the information you provide to answer your question.
4. Third-Party Services
FitVault AI uses the following third-party services. Each has its own privacy policy:
-
RevenueCat — Subscription management. Processes subscription status verification using an anonymous user ID.
RevenueCat Privacy Policy - Apple App Store / Google Play Store — Distribution and payment processing for subscriptions. Governed by Apple's and Google's own privacy policies.
- AI Service (via Cloudflare Workers proxy) — Food photo analysis and AI coach responses are processed through our secure Cloudflare Workers proxy which forwards requests to a large language model API. Messages are not permanently stored by the AI provider after generating a response.
- Apple Health / Google Health Connect — Optional integration to read step and calorie data. Access is granted only with your explicit permission and can be revoked at any time.
5. Data Storage and Security
Most of your personal data (diary entries, workout routines, profile) is stored exclusively on your device using a local SQLite database. This data is included in your device's standard backup (iCloud on iOS, Google Drive on Android) if you have backups enabled.
We implement industry-standard security measures to protect any data that does pass through our servers (such as AI coach message processing). Our backend uses HTTPS encryption for all communications.
However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention
- Local data (diary, workouts, profile): Retained on your device until you delete the app or use the "Delete All Data" function in settings.
- Subscription data: Retained by RevenueCat as required to manage your subscription and comply with legal obligations.
- AI messages: Not retained after the response is generated.
- Support emails: Retained for up to 2 years to track issue resolution.
7. Your Rights
Depending on your location, you may have the following rights regarding your data:
- Access: Request a copy of the personal data we hold about you.
- Deletion: Request deletion of your data. You can delete all local data at any time via Settings → Delete All Data in the app. For subscription records, contact us.
- Correction: Update your profile data directly within the app.
- Portability: Request your data in a portable format.
- Opt-out: Disable health data integration at any time in app settings.
To exercise any of these rights, contact us at support@fitvaultai.app. We will respond within 30 days.
8. GDPR (European Users)
If you are located in the European Economic Area (EEA), our legal basis for processing your data is:
- Contractual necessity: To provide the subscription service you purchased.
- Legitimate interest: To improve app stability using anonymized crash data.
- Consent: For health data access (Apple Health / Google Fit), which you explicitly grant through your device's permission system.
9. CCPA (California Users)
California residents have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell your personal information. To exercise your CCPA rights, contact us at support@fitvaultai.app.
10. Children's Privacy
FitVault AI is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child has provided us information, please contact us.
11. Camera Permission
FitVault AI requests access to your device camera solely for the food scanning feature (photo scanning and barcode scanning). Camera access is only active when you are actively using the scanner. No images are stored on our servers — photos are analyzed in real-time and then discarded.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. For major changes, we may also display a notice within the app. Your continued use of FitVault AI after any changes constitutes your acceptance of the updated policy.
13. Contact Us
For any privacy-related questions, requests, or concerns, please contact us:
- Email: support@fitvaultai.app
- Support page: fitvaultai.app/support.html