Privacy Policy

Effective October 17, 2026

fitG.ai (fitg.ai) is operated by MUDDAM brothers INC. This policy explains how our website and mobile app collect, use, store and share information. Contact info@fitg.ai for privacy questions or requests.

Information we collect and why

• Account information: your email address, name, account identifier and authentication/session records, used to sign you in, protect your account and send verification emails.
• Profile and plans: details you provide such as age, height, weight, goals, dietary preferences, exercise experience, availability and workout setting. We use these to prepare and save your fitness and meal plans.
• Activity and service records: recorded exercises, repetitions, completion history, meal entries, progress check-ins and appointment requests. We use these to show your calendar, progress and requested services. We also record signed-in screen visits, app platform, recent activity times and scan request outcomes to understand feature use and support members. These service analytics do not include the contents of scanned photos, health notes or GPS routes.
• Photos you choose to provide: profile-analysis or food-analysis images may be sent to our AI service to perform the requested analysis. Progress photos you save are stored in private object storage and retrieved through authenticated access.
• Technical data: our hosting and security systems process request information such as IP addresses, timestamps, errors and browser/device information to operate the service, diagnose failures and limit abuse.

Meal Lens history

With your consent, your selected food photo is sent to OpenAI to estimate visible foods, portions and nutrients. We save a reduced thumbnail and the analysis in your private account database so you can reopen your scans. The full image is processed for analysis rather than saved by fitG.ai. Scan history is retained until you delete individual scans or your account; backups follow our retention policy. Photo estimates and coach-assigned calorie comparisons are approximate, not medical advice or allergy checks.

Google account information

Google sign-in uses our website, including the secure system-browser sign-in flow on iPhone. Only when you choose it, we request basic identity scopes (openid, email and profile): your Google account identifier, email address, name and profile picture. We will use these only to authenticate you, create or link your fitG.ai account, and display account information. We will not request access to Gmail messages, Google Drive files, contacts or Google Calendar.

We will not sell Google user data, use it for advertising, or use it to develop, improve or train generalized AI or machine-learning models. fitG.ai’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google profile data will not be sent to our AI providers for fitness recommendations.

Sign in with Apple

If you choose Apple sign-in on the website, Apple supplies an account identifier and may supply your name and email address. If you choose Hide My Email, we receive Apple’s relay address. We use this information to authenticate you and create or link your account, not for advertising or AI model training. You can revoke access through your Apple Account settings; account deletion is managed separately through fitG.ai.

Camera, photos and AI processing

Live exercise pose detection runs on your device. Live camera frames are not uploaded for routine repetition counting. If you enable workout-video recording, recordings are saved locally on that device; they are not automatically uploaded. Camera permission can be revoked in device settings.

When you request AI photo analysis, the selected image is sent through our server to OpenAI. Profile and food estimates can be inaccurate and must be reviewed by you. Our AI requests disable response storage using the provider’s store:false setting; this does not eliminate any security or abuse-monitoring retention required by the provider. Recommendation requests use the profile details needed for the task. Trainer comparison tools store submitted test profiles, generated plans and reviewer feedback to evaluate and improve recommendation rules. Apple Health readings are not sent to OpenAI.

Face data: collection and use

Photos and optional workout recordings may contain your face. fitG.ai does not perform facial recognition, identify people by their face, create biometric identity templates, or access Face ID or TrueDepth face scans. We do not use face images or pose landmarks for advertising, marketing, data brokerage or training our AI models.

During camera exercise tracking, MediaPipe Pose Landmarker processes camera frames on your device, including temporary head/face and body landmark coordinates, to check framing and track movement. These frames and coordinates are not sent to fitG.ai servers or Google for repetition counting, and landmarks are not saved as a biometric record.

Optional profile photo analysis sends the full image, including any visible face, through our Vercel-hosted server to OpenAI only when you choose Scan photo. It checks whether one person is fully visible and offers editable apparent-age, height, weight and visible-build suggestions. These are uncertain visual estimates, not measurements or diagnoses. You can enter your profile manually instead. Food photo analysis also sends the selected image to OpenAI; avoid including people in food photos. Saved progress photos are used to display your own check-in history, not automatically submitted for AI analysis.

Face data: sharing, storage and retention

Live pose frames and landmarks are processed temporarily in device memory during tracking. Optional recorded videos remain in the app's local device storage until you delete them or clear that storage; they are not automatically uploaded. Copies you export are controlled by you.

The profile-analysis endpoint processes the selected image in server memory for the request and does not save it to our database or photo storage. Your image preview may remain in app memory until cleared or the app session ends. Profile values you confirm and save are retained in our account database until edited or your account is deleted.

OpenAI receives images for requested analysis. We set store:false, but this is not a zero-retention guarantee. OpenAI may retain API content in abuse-monitoring logs for up to 30 days by default, or longer when legally required or necessary for safety. Images flagged for possible child sexual abuse material may be retained for manual review. See OpenAI data controls.

Photos you explicitly save as progress check-ins, including any visible face, are stored in private Vercel Blob storage. Our database stores their account association, date and storage identifier. Only authenticated requests for the owning account retrieve these photos. They remain until you delete the photo or your account. Vercel and OpenAI process the relevant images to provide hosting, storage or your requested analysis; images are not sold or shared with advertisers. Processing may occur in the United States or other provider locations.

Face data: deletion and choices

Deleting a saved progress photo removes its object from our active photo storage and its database record. Account deletion removes saved progress photo objects and associated live account records. Delete local workout recordings separately in Recorded videos or clear the app's local storage. Deleting your fitG.ai account does not delete copies in your own photo library, exports or provider safety logs. Provider backups and legally required records follow the provider's retention requirements; we do not promise immediate erasure of those copies. Contact info@fitg.ai for deletion assistance. You may skip photo analysis and revoke camera access in your device settings.

Walking routes and location

When you enable GPS and start a walk or run, fitG.ai records location points while the tracker is active. Saving an activity stores its route, distance and duration in your private account history until you delete your account or request deletion at info@fitg.ai. Tracking pauses when the app goes into the background. Route maps request map tiles from OpenStreetMap, which receives your IP address and the map area requested. Manual distance entries do not contain a GPS route.

Apple Health and AgeShift

Only after your permission, the iOS app reads available Apple Health data, including steps, walking/running distance, active energy, heart rate, resting heart rate, heart-rate variability, sleep, cardio fitness (VO₂ max) and workouts. We use these readings to display your activity, trends and AgeShift data coverage. The app may read up to six months of available history.

Health readings are currently processed in app memory and are not uploaded to our servers, sold, used for advertising or used to train AI models. The app stores your connection preference locally. AgeShift uses your existing profile age. Optional self-reported sleep times, sleep duration, strength routine and its enable preference are saved on your device. Disconnecting stops app syncing and clears the current readings; you can revoke permissions in Apple Health or iOS settings. AgeShift demo values are sample data, not a medical or biological-age assessment.

Storage, security and service providers

We use HTTPS for data in transit, authenticated account access, private photo storage and hashed verification codes/session tokens where implemented. Our providers include Vercel for hosting and private object storage, our managed PostgreSQL database provider for account and plan records, Resend for verification email delivery, and OpenAI for requested AI processing. Providers receive the information needed to deliver their service. Processing may occur outside your country, including in the United States, under the relevant provider’s safeguards and terms. No system can guarantee absolute security.

We do not sell personal information. Information may also be disclosed where required by law, to address security incidents or to protect users’ rights. Access for support and administration is limited to authorized personnel for service-related purposes.

Cookies and local storage

We use authentication cookies/tokens and local device storage to keep you signed in and remember choices such as onboarding, camera and health settings. The trainer portal uses a separate session cookie. These are service functions, not advertising trackers. Clearing app/browser storage may remove locally saved preferences and workout recordings.

Retention and deletion

Account, plan and progress records are retained while your account is active so the service can provide your history. You can delete saved progress photos and use the account deletion control to remove your account and associated live account records. Local videos and settings must also be removed from the device or through app controls. Service-provider backups, security logs or records required by law may persist under their retention requirements; they are not intended for continued personalization after deletion.

You can request access, correction, export or deletion by emailing info@fitg.ai from your account email. We may verify your identity before acting. Privacy rights vary by location, and you may contact your local privacy regulator. Once Google sign-in is enabled, you may also revoke access in your Google Account’s third-party connections settings; revoking access does not by itself delete your fitG.ai account.

Children and policy changes

fitG.ai is intended for adults aged 18 or older. We do not knowingly collect children’s account data. Contact us if you believe a child has supplied information. We will update this page and its effective date when our practices change, and provide additional notice or consent where required.