Legal

Privacy Policy

Last updated: May 2026

1. Information We Collect

We collect the following types of information when you use FitAI Coach:

• Account information — your email address and encrypted password when you register
• Profile information — your name, fitness goal, fitness level, available equipment, and workout frequency
• Workout data — exercises logged, sets, reps, weights, workout duration, and session rating (RPE)
• Health metrics — sleep hours, resting heart rate, HRV, and step count (entered manually or synced from Apple Health / Google Fit)
• Body transformation photos — photos you choose to upload for progress tracking (stored securely, only visible to you)
• Coach conversations — messages you exchange with the AI coach

2. Health Data (Apple Health & Google Fit)

FitAI Coach can read health data from Apple HealthKit (iOS) and Google Fit (Android) to automatically populate your daily health check-in. This includes:

• Step count
• Resting heart rate
• Heart rate variability (HRV)
• Sleep analysis (duration and quality)

3. How We Use Your Information

Your data is used to:

• Generate personalised AI workout plans based on your profile and goals
• Calculate your daily recovery score to guide training intensity
• Provide personalised responses from the AI coach
• Track your workout progress and volume over time
• Send daily readiness notifications and weekly training summaries (if enabled)
• Process your subscription through RevenueCat

4. AI Processing

FitAI Coach uses Claude AI by Anthropic to power workout plan generation and the coach chat feature. When you interact with the AI coach or request a workout plan, relevant parts of your profile and health data are sent to Anthropic's API to generate a response.

Anthropic's data handling is governed by their own Privacy Policy. We do not send more data than necessary to fulfil your request.

5. Data Storage & Security

Your data is stored securely using Supabase, a managed database platform with enterprise-grade security. We implement:

• Row-Level Security (RLS) — you can only access your own data
• Encrypted connections (HTTPS/TLS) for all data transfer
• Encrypted passwords — we never store passwords in plain text
• Secure file storage for transformation photos

6. Third-Party Services

FitAI Coach integrates with the following third-party services:

• Supabase — database, authentication, and file storage
• Anthropic (Claude AI) — AI coaching and plan generation
• RevenueCat — subscription management and payment processing
• Apple HealthKit — health data (iOS only, with your permission)
• Google Fit — health data (Android only, with your permission)
• Vercel — API hosting

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, your personal data, workout history, health metrics, and transformation photos will be permanently deleted within 30 days.

8. Your Rights

You have the right to:

• Access all data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Revoke Apple Health or Google Fit permissions at any time in your device settings
• Opt out of push notifications at any time

To exercise any of these rights, contact us at hello@fitai.my.

9. Children's Privacy

FitAI Coach is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via a notification in the app or by email. Continued use of FitAI Coach after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data: