This privacy policy applies to the FitFlow app for mobile devices, developed by Hisham Kherbouch as a freemium service. This service is provided "AS IS".
What information does the Application collect?
When you create an account, the Application collects your email address and optionally your display name. You may also sign in using your Apple ID (Sign in with Apple), which provides your name and email address. The Application also stores data you actively enter, including:
- Workout templates and session logs
- Physique Compass direction and intake responses
- Progress photos (stored on-device only by default)
- Body weight measurements
- Consistency data (commitment history, recovery events)
- Messages sent to and received from the AI Coach
- Referral source (how you heard about FitFlow, collected during onboarding)
What information is collected automatically?
The Application may collect certain technical information automatically, including your mobile operating system version, device type, and general usage patterns within the Application. The Application does not collect your precise location or hardware device identifiers.
Website waitlist
If you join the waitlist on our website, we collect the email address you submit — and your name, if you choose to provide one — so we can notify you when FitFlow launches and offer early access. This is separate from creating an app account. Waitlist entries are stored in our Supabase database, and the confirmation email is sent via Resend (see the third parties below). You can ask us to remove your email from the waitlist at any time by contacting support@hfoster-labs.dev.
Does the Application collect location data?
No. The Application does not request or collect precise location information from your device.
Does the Application use Artificial Intelligence?
Yes. The AI Coach feature is powered by Google Gemini (Google LLC). Messages you send to the Coach — along with relevant context such as recent workout history — are transmitted to Google's API to generate responses. Google's Privacy Policy applies to that processing: policies.google.com/privacy.
AI Coach responses are clearly labelled as AI-generated within the Application. We do not use your data to train AI models.
Do third parties have access to your information?
The Application shares data with the following third-party services solely to operate the Application:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Supabase | Database and user authentication. All account data, workout logs, and weight records are stored on Supabase servers. | supabase.com/privacy |
| Google Gemini | AI Coach responses. Messages you send to the Coach are transmitted to Google's API. | policies.google.com/privacy |
| RevenueCat | Subscription management. Validates purchase receipts and manages entitlement state across devices. Receives your in-app purchase transaction identifier — no personal information beyond what Apple provides for purchase validation. | revenuecat.com/privacy |
| Apple Inc. | Processes all in-app purchase and subscription payments via StoreKit. | apple.com/privacy |
| Resend | Sends the confirmation email when you join the waitlist on our website. Receives the email address you submit. | resend.com/legal/privacy-policy |
We do not sell your personal data. We do not share your data with third parties for advertising or marketing purposes. We may disclose information if required by law or to protect the rights and safety of users.
Health and fitness data
Fitness data you enter (workout logs, body weight, consistency data) is used solely to provide the Application's features to you. It is not used for advertising, shared with third parties for marketing, or used for data mining unrelated to the Application's core function.
Subscriptions and payments
FitFlow offers a free tier and optional paid subscriptions (monthly and annual). All payment processing is handled by Apple via StoreKit. We do not store your payment card details. Subscription management is available in Settings → Apple ID → Subscriptions on your device.
Data retention and deletion
Your data is retained for as long as your account is active. You can permanently delete your account and all associated data at any time directly within the Application via Profile → Delete Account. Deletion is immediate and irreversible. You may also request deletion by contacting us at support@hfoster-labs.dev.
Opt-out
You can stop all data collection by uninstalling the Application using the standard uninstall process available on your device or via the App Store.
Children's privacy
The Application is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through the Application, please contact us at support@hfoster-labs.dev so we can take appropriate action.
You must be at least 16 years of age to consent to the processing of your personal information (or your parent or guardian may consent on your behalf in applicable countries).
Security
We implement appropriate technical and organisational safeguards to protect your information. Access to user data is restricted to authorised personnel required to operate and improve the Application. No security system can guarantee complete protection against all potential breaches.
Changes to this policy
This Privacy Policy may be updated from time to time. We will update the effective date at the top of this page when changes are made. Continued use of the Application after changes constitutes acceptance of the updated policy.
Your consent
By using the Application, you consent to the collection and use of your information as described in this Privacy Policy.
Contact us
If you have questions about this Privacy Policy or your data, please contact us at support@hfoster-labs.dev.