Privacy Policy

Introduction

This Privacy Policy explains what information the HealFit mobile app and our website ("HealFit", "we", "us") collect, how we use it, who we share it with, and the choices you have. If you have questions, contact us at support@nihwastudio.com. By using HealFit, you agree to this Privacy Policy; if you do not agree, please do not use the app.

Health disclaimer: HealFit provides fitness and nutrition tools for general wellness. It is not a medical device and does not provide medical advice, diagnosis or treatment.

1. Information we collect

Account information

• Sign-in details: your email address and password (handled by Firebase Authentication; we never see your password), or the name and email address provided by Sign in with Apple or Google Sign-In.
• User ID: an internal account identifier created by Firebase Authentication.

Profile and fitness information you provide

• Name, age, sex, height, current weight and target weight.
• Goal, activity level, training level, workout days per week, training location, focus areas, unit preferences (metric/imperial), available equipment, injuries or physical limitations you declare, diet pattern and food allergens.

Activity you log in the app

• Nutrition: meals and foods you log, custom foods and servings, favorite and saved meals, water intake, calorie and macro targets.
• Workouts: workout plans, sessions, sets, reps, weights, duration, difficulty feedback, favorites and custom workouts, streaks.
• Body progress: weight logs and progress photos you choose to take or upload. Progress photos are stored privately in your account and are only accessible to you.
• Feedback you send about AI food results (your message, the meal name, the items and the input method).
• Shareable images you choose to create and share from the app (shared through your device's share sheet).

Photos, camera, microphone and speech

• Camera / photo library: used only when you choose to scan a meal photo, scan a food barcode, or take/select a progress photo. Barcode scanning happens on your device.
• Microphone / speech recognition: used only when you log a meal by voice. Your speech is converted to text by your device's speech recognition service (Apple or Google); only the resulting text is sent to our servers.

Health data (Apple Health / Google Health Connect) — optional

If you turn on Health sync in Settings and grant permission:

• We read: steps, active energy (calories) burned and body weight. This data is used only to display your daily activity in the app. It is read on your device and is not uploaded to our servers or sent to any third party.
• We write: completed workouts (strength training, with duration and active calories) and weight entries you log in HealFit.

You can turn Health sync off at any time in HealFit Settings and revoke access in the Apple Health / Health Connect settings.

Purchases

• Subscription status, purchase history and transaction identifiers, processed by Apple / Google and managed through RevenueCat. We never receive your payment card details. Subscriptions (monthly or annual, with free trials where offered) renew automatically unless cancelled in your App Store / Google Play account settings; you can restore purchases with the same store account. HealFit does not show ads.

Usage, diagnostics and device information

• Analytics: in-app events (for example screens viewed, features used, onboarding steps), app version, device model, operating system, approximate country (derived from IP), and an app-instance identifier — via Firebase Analytics.
• Crash reports: crash logs, stack traces, device state and an installation identifier — via Firebase Crashlytics.
• App integrity: Firebase App Check uses Apple App Attest / DeviceCheck or Google Play Integrity to verify requests come from a genuine copy of the app.
• Install attribution (if enabled): AppsFlyer may receive device and install information (such as app install source and device identifiers) to measure which campaigns lead to installs. HealFit does not show the App Tracking Transparency prompt and does not track you across other companies' apps and websites on iOS; iOS attribution relies on Apple's privacy-preserving SKAdNetwork.

Local device storage

Preferences such as reminder settings, theme, AI usage counters and cached coach content are stored on your device until you clear app data or uninstall the app.

Information we do not collect

We do not collect precise GPS location, contacts, SMS messages or call logs.

Notifications

Reminders and coach notifications are scheduled locally on your device. We do not use a push-notification server.

2. How we use your information

• To provide the app: your account, plans, logs, progress, coach, reminders and sync across devices.
• To calculate personalized calorie and macro targets and adapt your workout plans.
• To provide AI features (see Section 3).
• To respond to your support requests and feedback.
• To process and verify subscriptions and unlock premium features.
• To keep the service secure, prevent abuse and enforce fair-use limits on AI features.
• To understand app usage, fix crashes and improve the app.
• To measure the effectiveness of our marketing (only if attribution is enabled).

We do not sell your personal information. We do not use your data for third-party advertising.

3. AI features (OpenAI)

HealFit uses OpenAI's API, called from our secure servers (Firebase Cloud Functions), to:

• estimate nutrition from meal photos, meal text descriptions and voice transcripts you submit;
• generate workout plans from your profile (goal, level, equipment, injuries, schedule);
• produce your AI coach daily briefing and answer your coach questions, using a summary of your profile (first name, age, sex, weight and target weight, goal, level, injuries, equipment) and recent app activity (workout and nutrition averages, water, streak).

Free users have limited AI quotas; Premium subscribers get higher limits, subject to fair-use limits. AI food results are shown to you for review before they are logged; AI-created food entries and repeatedly used food names may be saved to your personal food library to improve future suggestions.

We ask for your consent before sending this content. Data sent to OpenAI is not used to train OpenAI's models and is not sold. Data from Apple Health / Health Connect is never sent to OpenAI. AI results are estimates and are not medical advice.

4. Who we share data with (service providers)

We may also disclose information if required by law, regulation or legal process, or to protect the rights, safety and security of our users and the service, investigate fraud or enforce our terms. If HealFit is involved in a merger, acquisition or asset sale, your information may be transferred as part of that transaction, subject to this policy's protections.

Third-party services operate under their own privacy policies and terms; we encourage you to review them.

Health data: information read from Apple Health or Health Connect is never used for advertising or marketing, never sold, never shared with third parties, and never used for AI processing.

5. Data retention

We keep your data while your account exists. When you delete your account, your profile, logs, AI usage records and progress photos are deleted from our database and storage, and your login is deleted. Residual copies may persist in backups for a limited time before being overwritten. Analytics and crash data are retained by Google under Firebase's retention settings (typically up to 14 months for analytics events); subscription records are retained by RevenueCat, Apple and Google as required for billing and legal purposes.

6. Your choices and rights

• Delete your account in the app: Profile tab → Account → Delete Account. This permanently deletes your account and associated data as described above.
• Access and correct: you can view and edit your profile and logs in the app at any time.
• Health access: disable Health sync in Settings or revoke it in Apple Health / Health Connect.
• Notifications: turn reminder categories on or off in the app or in your device notification settings.
• Permissions: you can revoke camera, photos, microphone, speech recognition and notification access in your device settings.
• AI consent: you can decline AI analysis; the rest of the app keeps working.
• Depending on where you live (for example the EU/UK under the GDPR, or California), you may have rights to access, correct, delete, restrict or port your data, and to object to processing. Contact support@nihwastudio.com to exercise them.

7. Security

Data is transmitted over encrypted connections (HTTPS/TLS) and stored with Google Firebase; access is limited to the people and systems that need it. Access to your data is restricted to your account by security rules. No method of transmission or storage is 100% secure.

8. Children

HealFit is not intended for children under 13 (or the minimum age required in your country), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

9. International transfers

Our service providers may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

10. Not medical advice

HealFit provides fitness and nutrition information for general wellness. It is not a medical device and does not provide medical advice.

11. Changes

We may update this policy. We will update the effective date above and, for material changes, notify you in the app or by email. Continued use after changes take effect means you accept the updated policy.

12. Contact

support@nihwastudio.com