Privacy Policy

1. Introduction

FitCoach AI ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights with respect to that data when you use our AI-powered fitness and nutrition coaching service. This policy is intended to comply with applicable United States privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Children's Online Privacy Protection Act (COPPA).

2. Data We Collect

When you create an account and use FitCoach AI, we collect the following categories of personal data:

• Account information: Your name and email address.
• Fitness profile: Your fitness goals, activity level, workout frequency, and equipment access.
• Dietary information: Dietary preferences, food allergies, and cooking preferences.
• AI chat messages: The content of your conversations with the AI coaching assistant.
• Generated plans: AI-generated workout and nutrition plans created for your account.
• Progress logs: Weight entries, workout completion records, and notes you log.

We do not collect sensitive personal information such as Social Security numbers, financial account information, precise geolocation, or health information regulated under HIPAA. Fitness and wellness data you voluntarily enter is general wellness information and is not Protected Health Information (PHI) as defined under 45 CFR § 160.103.

3. How We Use Your Data

We use your personal data for the following purposes:

• Personalizing AI coaching responses and generated workout and nutrition plans based on your profile and goals.
• Providing, maintaining, and improving the FitCoach AI service.
• Authenticating your account and keeping your data secure.
• Tracking your fitness progress over time, as you log it.

We do not use your personal data to make automated decisions that produce legal or similarly significant effects on you.

4. Third-Party Services

We use the following third-party services to operate FitCoach AI:

• DeepSeek AI: When you send messages to the AI coach or generate plans, the relevant content (your message and relevant profile context) is sent to DeepSeek's API to generate a response. This data is processed by DeepSeek in accordance with their API Terms of Service and Privacy Policy. DeepSeek is an AI service provider; we do not share your full personal profile beyond what is necessary to generate a fitness or nutrition response.
• Neon (database hosting): Your account data, profile, messages, plans, and progress logs are stored in a PostgreSQL database hosted by Neon. Data is encrypted at rest and in transit.

We do not sell your personal data to any third parties, and we do not use your data for advertising purposes.

5. AI-Generated Content Disclosure

In compliance with Federal Trade Commission (FTC) guidelines on AI transparency, we disclose that all coaching responses, workout plans, and nutrition plans provided through this service are generated by artificial intelligence (DeepSeek AI). AI-generated content may contain inaccuracies or errors and is not a substitute for professional advice from a qualified fitness trainer, registered dietitian, or healthcare provider. You should independently verify any recommendations before acting on them.

6. Your Privacy Rights

You have the following rights with respect to your personal data:

• Access: You can view your profile information and fitness data within the app at any time.
• Correction: You can update your profile information and fitness goals at any time via the Profile page.
• Deletion: You can permanently delete your account and all associated data (profile, messages, plans, progress logs) by visiting Settings > Account Management and selecting "Delete Account". Deletion is immediate and irreversible.
• Data portability: You may contact us to request a copy of your personal data in a portable format.

7. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you, the sources from which we collected it, the purposes for which we use it, and the third parties with whom we share it.
• Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: We do not sell or share your personal information with third parties for cross-context behavioral advertising. You have the right to opt out of any future sale or sharing of your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise your California privacy rights, please contact us. We will respond to verified requests within 45 days as required by law.

8. Do Not Sell or Share My Personal Information

FitCoach AI does not sell, rent, or share your personal information with third parties for monetary consideration or for cross-context behavioral advertising purposes. Your data is used solely to provide and improve the FitCoach AI service.

9. Data Retention

We retain your personal data for as long as your account is active. When you delete your account, all personal data associated with your account — including your profile, chat messages, generated plans, and progress logs — is permanently and immediately deleted from our systems. We do not retain personal data after account deletion, except as required by applicable law.

10. Data Security

We implement reasonable technical and organizational security measures to protect your personal data, including encryption in transit (HTTPS/TLS), encrypted database storage, hashed passwords (bcrypt), and HTTP-only secure session cookies. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy (COPPA)

FitCoach AI is intended for users who are 13 years of age or older, in compliance with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506. We do not knowingly collect personal data from children under the age of 13. If you believe we have inadvertently collected data from a child under 13, please contact us immediately so we can delete it promptly.

Users between the ages of 13 and 17 should use this service under parental or guardian supervision. We strongly recommend that parents and guardians review AI-generated fitness and nutrition plans with their minor child and consult a pediatrician or qualified healthcare professional before beginning any new exercise or dietary program for a minor.

12. Medical Disclaimer

FitCoach AI is not a medical service, healthcare provider, or medical device as defined by the U.S. Food and Drug Administration (FDA). The information and plans provided through this service, including AI-generated workout and nutrition content, are for general wellness and informational purposes only and do not constitute medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional before beginning any new exercise or dietary program, especially if you have any pre-existing health conditions or injuries.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of FitCoach AI after any changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a data-related concern, please contact us. We will respond to data requests within 30 days (or 45 days for verified CCPA requests).