1. Introduction
Welcome to FitAI Coach. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services (collectively, the "Service").
By using FitAI Coach, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.
Your Privacy Matters: We are committed to transparency about our data practices. This policy provides detailed information about what data we collect, why we collect it, and how we use it to provide you with the best fitness coaching experience.
2. Information We Collect
2.1 Personal Information
We collect information that you provide directly to us when you:
- Create an account (name, email address, password)
- Complete your fitness profile (age, gender, height, weight)
- Set fitness goals and preferences
- Subscribe to premium services (payment information)
- Contact our support team
- Participate in surveys or promotions
2.2 Fitness and Health Data
To provide personalized fitness coaching, we collect:
- Physical Metrics: Height, weight, body measurements, BMI
- Fitness Level: Current fitness level, exercise history
- Goals: Weight loss, muscle building, endurance, etc.
- Activity Data: Workout completion, exercise preferences
- Progress Data: Weight changes, measurements, workout logs
- Dietary Preferences: Halal, vegetarian, vegan, allergies
- Photos: Progress photos you upload (optional)
2.3 Automatically Collected Information
When you use our Service, we automatically collect:
- Device Information: Device type, operating system, browser type
- Usage Data: Pages visited, features used, time spent
- IP Address: For security and analytics purposes
- Cookies and Tracking: Session data, preferences
- Location Data: General location (country/city level) for localized content
2.4 Information from Third Parties
If you sign up using Google authentication, we receive:
- Your name and email address from your Google account
- Profile picture (if you choose to share it)
- Google account ID for authentication purposes
3. How We Use Your Information
We use the collected information for the following purposes:
| Purpose |
Description |
| Service Delivery |
Generate personalized workout plans, meal suggestions, and AI coaching responses |
| Account Management |
Create and manage your account, authenticate users, process subscriptions |
| Progress Tracking |
Monitor your fitness journey, show progress charts, celebrate milestones |
| Communication |
Send workout reminders, motivational messages, service updates |
| Improvement |
Analyze usage patterns to improve our AI algorithms and features |
| Security |
Detect and prevent fraud, abuse, and security incidents |
| Legal Compliance |
Comply with legal obligations and enforce our Terms and Conditions |
4. Data Storage and Security
4.1 Where We Store Your Data
Your data is stored using Firebase services (Google Cloud Platform), which provides:
- Industry-standard encryption in transit and at rest
- Secure data centers with physical security measures
- Regular security audits and compliance certifications
- Automatic backups and disaster recovery
4.2 Security Measures
We implement multiple layers of security to protect your information:
- Encryption: All data transmitted using HTTPS/TLS encryption
- Authentication: Secure password hashing and Firebase Authentication
- Access Control: Strict database security rules limiting data access
- Monitoring: Continuous monitoring for suspicious activities
- Regular Updates: Security patches and updates applied promptly
4.3 Data Retention
We retain your information for as long as:
- Your account is active
- Needed to provide you with our services
- Required by law or for legitimate business purposes
- You can request deletion at any time (see Section 8)
Data Security Notice: While we implement robust security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but continuously work to protect your data.
5. How We Share Your Information
We do not sell your personal information. We may share your information only in the following circumstances:
5.1 Service Providers
We share data with trusted third-party service providers who help us operate our Service:
- Firebase/Google Cloud: Data storage, authentication, analytics
- Payment Processors: Secure payment processing for subscriptions
- Email Services: Sending notifications and updates
- Analytics Tools: Understanding app usage and improving features
All service providers are contractually obligated to protect your data and use it only for specified purposes.
5.2 Legal Requirements
We may disclose your information if required to:
- Comply with legal obligations, court orders, or government requests
- Enforce our Terms and Conditions
- Protect our rights, property, or safety
- Prevent fraud or security threats
- Protect users' safety and well-being
5.3 Business Transfers
If FitAI Coach is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
5.4 With Your Consent
We may share your information for other purposes with your explicit consent.
6. Cookies and Tracking Technologies
6.1 What We Use
We use cookies and similar tracking technologies to:
- Essential Cookies: Required for authentication and core functionality
- Preference Cookies: Remember your settings (language, theme)
- Analytics Cookies: Understand how you use our Service
- Session Storage: Maintain your login session
6.2 Your Choices
You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our Service.
7. Third-Party Services
Our Service integrates with third-party services:
- Google Sign-In: For convenient authentication
- Firebase Services: Backend infrastructure and analytics
- Payment Processors: Secure payment handling
These third parties have their own privacy policies. We encourage you to review them:
8. Your Privacy Rights
You have the following rights regarding your personal information:
8.1 Access and Portability
- Request a copy of your personal data
- Export your workout and progress data
- Receive your data in a structured, machine-readable format
8.2 Correction and Update
- Update your profile information at any time
- Correct inaccurate or incomplete data
- Modify your fitness goals and preferences
8.3 Deletion
- Request deletion of your account and associated data
- Delete specific workout or progress entries
- Remove uploaded photos
8.4 Opt-Out
- Unsubscribe from marketing emails
- Disable push notifications
- Opt out of analytics tracking (where applicable)
8.5 How to Exercise Your Rights
To exercise any of these rights, you can:
- Use the settings within your account
- Contact us at: privacyfitaicoach@hotmail.com
- We will respond to your request within 30 days
Malaysian Users: Under the Personal Data Protection Act 2010 (PDPA), you have additional rights. Contact us to learn more about your rights under Malaysian law.
9. Children's Privacy
FitAI Coach is designed for users aged 13 and above. We do not knowingly collect personal information from children under 13.
- Users aged 13-17 must have parental or guardian consent
- If we discover we have collected data from a child under 13, we will delete it promptly
- Parents can contact us to review or delete their child's information
If you believe we have collected information from a child under 13, please contact us immediately at: privacyfitaicoach@hotmail.com
10. International Data Transfers
Your information may be transferred to and processed in countries other than Malaysia, including:
- United States (Firebase/Google Cloud servers)
- European Union (backup servers)
- Singapore (regional data centers)
We ensure that such transfers comply with applicable data protection laws and that your data receives adequate protection through:
- Standard contractual clauses
- Privacy Shield frameworks (where applicable)
- Adequate security measures
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes in our practices
- New features or services
- Legal or regulatory requirements
- User feedback and improvements
When we make changes:
- We will update the "Last Updated" date at the top
- Significant changes will be notified via email or in-app notification
- Continued use of the Service after changes constitutes acceptance
- You can review the current policy at any time on this page
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: privacyfitaicoach@hotmail.com
- Support Email: privacyfitaicoach@hotmail.com
- Website: https://fitai-coach-delta.vercel.app
- Address: Kuala Lumpur, Malaysia
We aim to respond to all inquiries within 48 hours during business days.
13. Compliance and Certifications
FitAI Coach is committed to compliance with:
- PDPA (Malaysia): Personal Data Protection Act 2010
- GDPR (EU): General Data Protection Regulation (for EU users)
- Firebase Security: Google Cloud Platform security standards
- Industry Best Practices: OWASP security guidelines
Your Trust is Important: We are committed to protecting your privacy and being transparent about our data practices. If you have any concerns or questions, please don't hesitate to contact us.
By using FitAI Coach, you acknowledge that you have read and understood this Privacy Policy and agree to our data practices as described herein.