Privacy Policy

StayFit (the “App”) is a calorie and training tracker published by Taoufik Jabbari (“we”, “us”). StayFit shows your day as a budget: your basal burn funds it, food spends it, steps and workouts earn it back. This policy explains what data the App handles, why, and the choices you have. It names every data type we declare on the App Store product page.

1. An account is required

Signing in uses Sign in with Apple or Google Sign-In, at the end of the setup questions. We never see or store your password. Apple’s Hide My Email is supported and works normally. The account is what makes the App work as described: it backs up and syncs your plan and history across devices, it carries your subscription, and it is what friends, the leaderboard, and the report and block controls are attached to.

Anything you entered before signing in stays on your device and is attached to your account the moment you sign in. Nothing local is erased on the way.

2. Information the App handles

3. Social features, comments and moderation

If you add friends, share a programme or appear on the leaderboard, a limited profile (your display name, handle, avatar initial, country flag and training summary: sessions, tonnage, records, achievements, recent activity) becomes visible to the people you are connected with, and your ranking position becomes visible to other users of the leaderboard. Your food log, your weight, your measurements and your photos are never shared.

To suggest people you may know, the App stores the list of account identifiers of your accepted friends on your profile document. Other signed-in users of the App can read that document, so they can see which accounts you are connected with by identifier; it is used to show “friends in common” and carries no names, food, weight or photos.

You can write free-text comments on the activities of people you are connected with, and react to them. That text is stored in our database and delivered to the other person as a notification. Write nothing you would not want them to read. A word filter runs before a comment is posted.

You can report a post (long-press it in the Community feed) and block an account (the “...” menu on a friend, with the list and Unblock under Profile → Settings → Blocked users). A report records who reported which piece of content and why, so we can act on it; we review reports within 24 hours. Blocked accounts disappear from your feed, friends, requests, shares, reactions and leaderboard. You can also report to contact@stayfit-app.com.

4. Progress photos stay on your device

Progress photos are written to the App’s private storage on your phone. They are not uploaded, not backed up to our servers, and no one else can see them. Deleting the App deletes them. If you export an evolution video, the video is rendered on your device and you choose where it goes.

5. Health data

With your explicit permission, StayFit reads steps, active energy and workouts from Apple Health to credit the calories you burned. This data is used on your device to compute your balance; the resulting totals (calories, steps) sync with your account, and the underlying health records are not sold, shared with third parties, or used for advertising. You can revoke the permission at any time in your system settings. StayFit never writes to Apple Health. Health data is never sent to our analytics or used for advertising.

The AI Coach can use your daily step count, but only if you turn on “Include my health data” on the coach’s consent screen or in Profile → Settings → AI Coach. It is off by default. When it is on, that step count (from Apple Health on iPhone, from Health Connect on Android) is part of the summary sent to Google’s Gemini through our server, see section 6. Switch it off, or withdraw your consent for the coach altogether, in the same place at any time; without it the coach works on the data you entered in StayFit only.

6. AI food logging and the AI Coach

AI food logging is optional and runs only when you start it, and you must be signed in. You can describe a meal in words, or take or choose a photo of a meal. What is sent depends on what you pick: the text you typed (up to 300 characters), or the photo, which the App first shrinks on your device to a small JPEG (about 1,024 pixels on the long side). The request goes to our Cloud Function (Google Firebase, europe-west1), which forwards it to Google’s Gemini API to estimate the foods, calories and macros. The result is returned to the App and the entry you save is plain text and numbers.

We do not store the photo or the text you sent: the App does not save it in our database or file storage, and the Cloud Function does not write it to either. The only thing we keep for this feature is a counter of your requests (your account identifier, a count and a time window) used to enforce an hourly limit, and your AI credit balance (below). We do not use these submissions to train models. Google processes the request under its Gemini API terms (Paid Services): Google does not use prompts or responses to train or improve its products, but may log them for a limited period solely to detect violations of its Prohibited Use Policy, keep the service safe and meet legal disclosure duties. Data may be processed in any country where Google has facilities. The barcode scanner and food search query the public Open Food Facts database, which receives only the barcode or the search words.

AI Coach. The AI Coach is optional. The first time you open it, a screen tells you what is sent, to whom, that it is not kept, and that you can withdraw at any time in Profile → Settings → AI Coach; nothing is sent until you agree. When you ask a question, the App sends it, with the last few messages of the conversation and a summary of your StayFit data (your plan, the meals of the last week, recent workouts, your weight and measurements, and daily totals for the charts), to our Cloud Function, which forwards it to Google’s Gemini API and returns the answer. The summary contains no name, email, account identifier or photo. Your daily steps from Apple Health or Health Connect are added only if you switched on “Include my health data”. We do not store your questions, the summaries or the answers, we do not use them to train models, and the coach only reads your data: it never changes it. The same Google terms as above apply to the coach: Google may keep your question and the answer for a limited period for abuse and legal purposes only, never to train models. StayFit keeps only the request counter and your credit balance. The free plan includes 10 AI credits a month.

AI credits. AI food logging and the AI Coach draw on one balance of AI credits per account, kept on our servers and tied to your account identifier: a monthly allowance that depends on your plan, plus the credit packs you bought, which do not expire. A description or a coach message costs one credit and a photo three; a request that fails is refunded. To know your plan and to add a credit pack you bought, our server checks your purchase with Apple or Google. We also keep a monthly total of what these AI requests cost, which is not tied to you, and we may pause the AI features for the rest of the month if a spending limit is reached.

7. Notifications

Notifications are optional and nothing in the App is locked behind them. If you allow them, StayFit sends training reminders, meal reminders and (if you use the social features) alerts when a friend interacts with you. These are delivered through Apple Push Notification service and Firebase Cloud Messaging, which requires a device push token. That token, your notification preferences and your push language are stored on your user document, so they are linked to your account. Turn notifications off any time in the App or in your system settings.

8. Analytics, crash and performance data

StayFit uses Firebase Analytics to count aggregated usage events (screens opened, features used) so we can see what is worth improving, and Firebase Crashlytics to collect crash, performance and diagnostic reports (device model, OS version, and the state of the App at the moment of a crash) so we can fix bugs. Both are operated by Google. Because these requests reach Google over the internet, Google derives an approximate, city-level location from the IP address; we never receive or store a precise location, and the App never asks for location permission. None of this is used for advertising.

9. What we do NOT do

• No ads: the App contains no advertising SDK, no IDFA, and no App Tracking Transparency prompt.
• No tracking of you across other apps or websites, and no data brokers.
• We do not sell or rent your data to anyone.
• We never receive your card number: purchases are handled entirely by Apple or Google.
• We never ask for your precise location, your contacts, your calendar or your microphone.

10. Purchases

StayFit Premium and FOOD AI are optional auto-renewing subscriptions (monthly or yearly, with a free trial), billed by Apple through the App Store or by Google Play. Individual programmes are one-time purchases and AI credit packs are consumables, billed the same way. Payment, renewal and cancellation are handled by the store; manage or cancel a subscription in your Apple Account settings. We only store what you are entitled to: your plan, and which programmes and credit packs you own. For AI credits our server verifies your subscription or credit pack purchase with Apple or Google and keeps your credit balance.

11. Data retention and deletion

Your data is kept while your account exists. Profile → Settings → Delete account erases your account and the data attached to it (profile, logs, social profile, comments, friendships, blocks) from our database; local data goes when you delete the App. Reports you filed are kept, without your logs, for as long as we need them to act on the reported content and to show a pattern of abuse. You can also write to contact@stayfit-app.com and we will delete your data for you.

12. Your rights

If you are in the EU/EEA or the UK, you may request access, correction, export or erasure of your personal data, and you may object to processing. The legal basis is your consent (health data, notifications, AI features including the AI Coach) and the performance of our agreement with you (running the App). Write to contact@stayfit-app.com; we answer within 30 days.

13. Children’s privacy

StayFit is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has provided personal information, email contact@stayfit-app.com and we will remove it.

14. Service providers

We rely on Google Firebase (Authentication, Cloud Firestore, Cloud Functions hosted in europe-west1 which handle the AI estimate and the AI Coach, friend requests, reactions and programme shares, Cloud Messaging, Analytics and Crashlytics), on Google Gemini for the AI food estimates and the AI Coach, on Open Food Facts for the public food database, and on Apple for payments. Each processes data only to provide those functions. Firebase, Gemini and Apple are operated by companies in the United States, so data sent to them may be stored or processed there.

15. Changes to this policy

We may update this Policy. The “Effective” date above changes when we do, and material changes are announced in the App.

16. Contact

Questions or requests: contact@stayfit-app.com.