Privacy policy

AdibFitness operates this website and fitness app from California, United States. This policy covers information handled through our service. For questions or privacy requests, use our Contact us page.

• Account details: your name, email address, sign-in details, session information and invitation or account-access records. If you choose Google sign-in, we receive the account information needed to sign you in.
• Profile and fitness records you provide: birth year, gender, height, preferred units, body goals, weight and other measurements, training plans, exercises, sets, meals, food targets, fasting records and steps.
• Media and AI inputs: progress photos, meal photos, workout selfies, voice recordings and text you submit, together with resulting transcriptions, estimates and insights. Some fitness information and inferences may be sensitive.
• Connected-device data, if you choose an available integration: daily step counts from Fitbit or Pixel Watch through Google Health, weight records from Withings, provider account identifiers, encrypted access credentials, connection status and sync history. These connections are separate from Google sign-in.
• Support messages: the name, email address, topic and message you enter on our contact form, and our replies.
• Technical information: session cookies, saved appearance preferences, and request, device, browser and diagnostic information handled by our hosting and service providers.

Photos, recordings and optional profile fields are provided by you. Device integrations require your authorization and may be limited to eligible accounts.

We use information to run your account, save your logs, show trends, calculate targets and estimates, process the AI features you use, respond to support and privacy requests, prevent abuse, troubleshoot failures and maintain the service. Contact details submitted for support are used to respond to your request.

When you use AI features, relevant text, images, audio and fitness context are sent through OpenRouter to the model providers that process the request. This can include body photos for body-fat estimates, food descriptions or photos for meal estimates, audio for transcription, and recent fitness records for insights. Provider processing and retention depend on the provider and its policies; we do not promise that all AI inputs are immediately deleted or excluded from provider training.

Our providers include Neon for database storage, Cloudflare for media storage and web delivery, Inngest for background processing, Resend for email, Google for optional sign-in and authorized step imports, and Withings for authorized weight imports. Nutrition lookup may send food, restaurant, brand and location details from your request to Firecrawl and retrieve information from public sources. Providers receive information needed for their role.

We may also disclose information when required by law, to address fraud or security issues, to protect legal rights, or as part of a business transfer with appropriate notice and safeguards. We do not operate a marketplace for your personal information or use member fitness records for targeted advertising.

Sign-in uses cookies, and appearance preferences may be saved in your browser. Blocking these can affect sign-in or your preferences. Production uses Cloudflare Web Analytics with EU visitors excluded under the current configuration. Cloudflare describes this analytics product as not using cookies or local storage for analytics and not fingerprinting visitors.

Embedded YouTube videos use the privacy-enhanced youtube-nocookie.com domain. Loading or playing a video still connects to YouTube, which may receive technical information and process information under its own policies. Social links take you to Instagram or TikTok. Product recommendations may link to Amazon using affiliate links; the destination may receive referral and browsing information when you follow them. These third parties may collect information about your activity across services under their own policies.

California Do Not Track disclosures: the app does not change its behavior in response to a browser Do Not Track signal. We do not use member data for cross-context behavioral advertising. Third-party websites and embedded services control their own response to browser privacy signals.

Account and fitness records remain stored to provide your history until removed through available controls or a handled deletion request, subject to legal and operational needs. Support messages remain in our email systems as needed to respond and maintain a record of the request. Technical logs, backups and provider records can have separate retention periods. We do not currently promise a fixed deletion period for every system.

We use authenticated access and time-limited media links to restrict access to member records and photos. No internet service can guarantee absolute security. Information may be processed in the United States and other countries where our providers operate.

Social cards are generated when you request them. Nothing is posted automatically. If you choose to share a card or photo, the recipient or platform controls its subsequent use.

You can review and change profile details in Settings, manage entries using the controls available in the app, and choose whether to submit photos or audio. You can disconnect device integrations through their connection controls. Fitbit disconnect removes imported step history; Withings disconnect offers a choice about keeping or removing imported weights. You can also revoke access with the provider. To request access, a copy, correction or deletion of your information or account, select “Privacy request” on our contact form. There is currently no self-service account deletion button.

Depending on where you live and which laws apply, you may have additional rights, including rights to know, correct, delete or receive personal information, and to object to or limit certain processing. California residents may have rights under the CCPA where it applies, including opt-out and non-discrimination rights. We will assess requests under applicable law, may verify your identity, and will explain any exceptions. An authorized agent can contact us on your behalf with evidence of authorization.

Please do not send passwords, payment details or body photos in a support message. We may request limited information separately to verify ownership of an account.

AdibFitness is intended for people aged 18 and older. If you believe a person under 18 has provided information, contact us so we can investigate and handle removal as appropriate.

We will post policy updates here and change the effective date. For material changes, we will provide additional notice through the service or by email as appropriate and obtain consent where required.