v1.4.3Now LiveDownload now →
← Back to Home

Privacy Policy

Last updated: May 6, 2026

1. Introduction

Welcome to YourFit.ai ("we," "our," or "us"), operated by YourFit Inc. We are committed to protecting your privacy and ensuring you have a positive experience using our mobile application and website. This Privacy Policy explains what data we collect, why we collect it, and how we use and protect it.

By using YourFit.ai, you agree to the collection and use of information as described in this policy.

2. Information We Collect

Account Information

When you create an account, we collect:

  • Name and email address (via email/password signup, Google Sign-In, or Apple Sign-In)
  • Profile information: username, profile photo, bio, height, weight, age, fitness goals
  • Account credentials (passwords are hashed and never stored in plaintext)

Health & Fitness Data

YourFit.ai collects health and fitness data to provide its core functionality. This includes:

  • Workout logs: exercises, sets, reps, weight, duration, and calories burned
  • Nutrition logs: food items, meals, calorie and macronutrient intake
  • Sleep data: bedtime, wake time, sleep duration and quality, and sleep stage breakdowns
  • Step counts, active calories, floors climbed, and distance traveled
  • Body measurements and weight history

On iOS, some of this data may be read from or written to Apple HealthKit with your permission. On Android, some of this data may be read from or written to Google Health Connect with your permission. Health platform data is never used for advertising, never shared with third parties for marketing, and is only used to power your personal fitness experience within the app.

Location Data

With your permission, we collect precise location data during outdoor workout tracking (e.g., running, cycling) to calculate distance, route, and pace. Location access is optional and only used while you are actively tracking a workout.

User-Generated Content

If you use our social features, we collect:

  • Posts, captions, and workout shares you create
  • Photos and videos you upload to posts
  • Comments and likes on posts
  • Direct messages sent to other users
  • Follow relationships

Camera & Photo Library

With your permission, we access your camera and photo library for the following features:

  • Food Scanner — your camera is used to photograph meals for AI-powered nutrition analysis
  • Equipment Scanner — your camera is used to identify gym equipment and suggest exercises
  • Profile & Messaging — your photo library is used to upload a profile picture or share images in direct messages

Camera and photo access is always optional and can be revoked at any time in your device Settings.

Push Notifications

If you grant permission, we collect a push notification token to send you reminders, workout alerts, and social activity notifications. You can disable notifications at any time in your device Settings or within the app under Settings → Notifications.

Usage & Diagnostic Data

We automatically collect:

  • App usage patterns and feature interactions (via PostHog analytics)
  • Crash reports and error logs (via Sentry) to help us identify and fix bugs
  • Device type and operating system version

3. How We Use Your Information

  • Providing and personalizing your fitness tracking experience
  • Syncing your data across devices
  • Displaying your activity history, progress charts, and statistics
  • Powering social features (feed, profiles, messaging)
  • Sending account-related notifications (not marketing, unless you opt in)
  • Processing subscription payments through Apple's App Store and Google Play (via RevenueCat)
  • Generating personalized AI coaching responses via the YourFit AI feature (your fitness data is sent to Google Gemini to generate responses)
  • Sending push notifications for workouts, reminders, and social activity (with your permission)
  • Diagnosing and fixing crashes and bugs
  • Improving the app through aggregated, anonymized analytics
  • Complying with legal obligations

4. Third-Party Services

YourFit.ai uses the following third-party services to operate. Each has its own privacy policy governing how they handle data:

  • Supabase — database and authentication infrastructure (data stored on Supabase-hosted PostgreSQL)
  • Google Gemini — powers the YourFit AI Health Coach feature. When you use the AI coach, relevant fitness data (workouts, nutrition, sleep summaries) is sent to Google's Gemini API to generate responses. This data is subject to Google's privacy policy.
  • RevenueCat — manages subscription purchases, entitlements, and billing across iOS and Android. RevenueCat receives your purchase history and subscription status.
  • Apple HealthKit — to read and write health and fitness data on iOS (with your permission)
  • Google Health Connect — to read and write health and fitness data on Android (with your permission)
  • FatSecret API — nutrition database used to look up food items and their nutritional values
  • Google Sign-In / Apple Sign-In — optional authentication providers
  • Expo — push notification delivery infrastructure
  • Sentry — crash reporting and error monitoring
  • PostHog — product analytics to understand how features are used (anonymized usage data; no personal information is shared)
  • Cloudflare — website hosting and content delivery; all web traffic passes through Cloudflare's network
  • Apple App Store — processes iOS subscription payments; we never receive or store your payment card details
  • Google Play Store — processes Android subscription payments; we never receive or store your payment card details

5. Information Sharing and Disclosure

We do not sell your personal information. We do not share it with third parties for advertising purposes. We may share data only in the following limited circumstances:

  • With service providers listed above, solely to operate the app
  • With other users — only content you choose to make public (posts, profile info)
  • To comply with a legal obligation or valid legal process
  • To protect the rights, safety, or security of YourFit Inc. or our users
  • In connection with a merger or acquisition (you will be notified in advance)

6. AI Features & Your Data

The YourFit AI Health Coach uses Google Gemini to generate personalized fitness, nutrition, and wellness responses. When you send a message to the AI coach, a summary of your relevant fitness data (such as recent workouts, nutrition logs, sleep data, and your profile goals) is included in the request sent to Google's servers to generate a contextual response.

  • AI responses are generated by Google Gemini and are not medical advice
  • Your data sent to Gemini is governed by Google's API usage policies
  • We do not use your data to train AI models
  • You can stop using the AI coach at any time — no data is sent when you are not actively using it

8. Health Data, Apple HealthKit & Google Health Connect

Data obtained through Apple HealthKit (iOS) or Google Health Connect (Android) is treated with the highest level of care. We commit that:

  • Health platform data is never used for advertising or marketing
  • Health platform data is never sold or shared with data brokers
  • Health platform data is never shared with third parties except as necessary to operate the app (e.g., storing your own records in our database)
  • You can revoke Apple HealthKit access at any time in iOS Settings → Privacy & Security → Health
  • You can revoke Google Health Connect access at any time in the Health Connect app on Android

9. Data Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), Row Level Security (RLS) policies so users can only access their own data, and hashed passwords. Despite these measures, no system is 100% secure. In the event of a data breach affecting your information, we will notify you as required by applicable law.

10. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., resolving disputes).

11. Your Rights and Choices

Depending on your location, you may have the following rights:

  • Access — request a copy of the data we hold about you
  • Correction — update inaccurate or incomplete data via your profile settings
  • Deletion — delete your account and all associated data via Settings → Account → Delete Account
  • Opt-out — opt out of marketing communications at any time
  • Data portability — request your data in a portable format
  • HealthKit access — revoke at any time in iOS Settings → Privacy & Security → Health
  • Google Health Connect access — revoke at any time in the Health Connect app on Android
  • Location access — revoke at any time in device Settings
  • Camera & photo access — revoke at any time in device Settings
  • Push notifications — disable in device Settings or in-app under Settings → Notifications

To exercise any of these rights, contact us at privacy@yourfit.ai.

12. Children's Privacy

YourFit.ai is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such data, please contact us immediately at privacy@yourfit.ai and we will delete it promptly.

13. Cookies and Tracking

Our mobile app does not use cookies. Our website (yourfit.ai) may use cookies for analytics and functionality. You can control cookie preferences through your browser settings. We use the App Tracking Transparency framework on iOS — you can choose whether to allow tracking when prompted.

14. International Data Transfers

YourFit.ai is a global service. Your data may be stored and processed in the United States or other countries where our service providers operate. We take steps to ensure that transfers of personal data are protected by appropriate safeguards — including Standard Contractual Clauses for transfers from the EEA/UK — in accordance with applicable data protection laws. See Section 15 for specific rights if you are in the EEA, UK, or Switzerland.

15. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and applicable local laws grant you the following rights and protections:

Lawful Basis for Processing

We process your personal data under the following lawful bases:

  • Contract — processing necessary to provide the Service you signed up for
  • Legitimate Interests — analytics, security, and fraud prevention that do not override your rights
  • Consent — for optional features such as marketing communications, camera access, location, and push notifications
  • Legal Obligation — where required by applicable law

Your GDPR Rights

  • Right of Access — request a copy of the personal data we hold about you
  • Right to Rectification — request correction of inaccurate or incomplete data
  • Right to Erasure — request deletion of your personal data ("right to be forgotten")
  • Right to Restriction — request that we restrict processing of your data in certain circumstances
  • Right to Data Portability — receive your data in a structured, machine-readable format
  • Right to Object — object to processing based on legitimate interests or for direct marketing
  • Rights related to automated decision-making — we do not make solely automated decisions that produce significant legal effects on you

International Transfers

Your data may be transferred to and processed in the United States, which may not provide the same level of data protection as your home country. Where required, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or other lawful transfer mechanisms to protect your data during international transfers.

Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your data in accordance with applicable law. To exercise any of your GDPR rights, contact us at privacy@yourfit.ai. We will respond within 30 days.

16. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following additional rights:

  • Right to Know — You may request that we disclose what personal information we collect, use, disclose, and sell about you.
  • Right to Delete — You may request that we delete personal information we have collected from you, subject to certain exceptions.
  • Right to Opt-Out of Sale — We do not sell your personal information to third parties. You do not need to opt out.
  • Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights.
  • Right to Correct — You may request that we correct inaccurate personal information we maintain about you.

To exercise your California privacy rights, contact us at privacy@yourfit.ai. We will respond to verified requests within 45 days as required by law. You may designate an authorized agent to submit a request on your behalf.

In the past 12 months, we have collected the following categories of personal information: identifiers (name, email), health and fitness data, location data, usage data, and device information. We have not sold any personal information.

17. Additional Regional Rights

Australia

If you are located in Australia, the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) apply to our handling of your personal information. You have the right to access and correct the personal information we hold about you, and to complain about a breach of the APPs. Complaints can be directed to us at privacy@yourfit.ai. If you are not satisfied with our response, you may escalate to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Canada

If you are located in Canada, we collect, use, and disclose your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. You have the right to access your personal information, challenge its accuracy, and withdraw consent (subject to legal or contractual restrictions). To exercise these rights, contact us at privacy@yourfit.ai.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify you via in-app notification or email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

19. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Privacy inquiries: privacy@yourfit.ai

General: support@yourfit.ai

Website: https://yourfit.ai