AllFit puts your workouts, food and cardio in one plan. To do that, it needs some personal information, including health information. This page explains what we keep, who else sees it, and how to remove it. We wrote it in plain words. If anything is unclear, write to us at support.allfit@gmail.com.
Who we are: AllFit is operated by Irfanul Majumder. You can contact us at support.allfit@gmail.com. We decide how your information is used (the "controller").
The short version
- Your plan and most logs live on your phone, with a backup in your account on our servers. Your water log and water settings stay on your phone. If you mention water in chat, those words follow the same rules as other messages.
- We don't sell your information. We don't use it for ads, and we don't track you across other apps or websites.
- AI only sees your information if you say yes. You can change your mind any time.
- You can download everything, or delete your account and everything in it, from the app.
What we keep, and why
| What | Why |
|---|---|
| Your answers when you start: goals, strength and cardio experience, strength training preferences and skill starting points, training places, days and time, equipment, everyday activity, age, sex, height, weight, goal weight, and health notes (like pregnancy, a recent baby, medicines, diabetes, or eating being hard) | To build a plan that's safe and right for you |
| Your existing routine, if you enter it: workout days, exercises, sets, reps, rest, cardio activities, duration and effort | To keep your sessions and fit new training around them |
| What you log: food, workouts (including reps, hold times, help used, added weight and control), runs, weigh-ins, waist measurements, sleep | To track progress and adjust your plan |
| Water you log, your glass size and your water goal | To show your water log in Food |
| Workout export files you choose: past sets, weights, times, distances, heart rate and any included route | To bring your history into AllFit, show it and keep it in your account backup |
| Your tracking choices, including whether you want to measure your waist | To respect what you choose to track, without treating the choice as a health concern |
| Messages you send in the app | To answer them and make the changes you ask for |
| Support emails, your email address and our replies, including the app and iOS versions in the draft | To answer your questions and help with problems. These stay in our support mailbox, separate from your AllFit account. |
| From Apple Health, only what you allow: steps, workouts, distances, heart rate, active energy, weight and sleep | So you don't have to type them in twice, and to adjust your plan and food allowance without counting exercise twice |
| To Apple Health, only if you allow it: runs, walks, rides and hikes you record, with distance, energy and route | So they show up in your other fitness apps |
| A random account id | To keep your backup separate from everyone else's. You don't give us an email or phone number. |
| Your first name, if you give it | To greet you in the app |
| Cloud AI request records: action, date, token counts and the rates used to calculate cost | To enforce monthly AI spending limits and keep financial usage records. They do not include prompts, photos or food names. We retain limited accounting records after account deletion to prevent misuse of AI allowances. |
We use your phone's location only while you record a run, walk, ride or hike, and only after you say yes. We also receive route locations when you choose an activity file that includes them. Routes are kept with your workout, shown on an Apple map, and included in your account backup and data download. They are never sent to AI. We don't read your location at other times, your contacts, or which websites you visit.
Who else sees it
Our servers (Supabase). Your backup and our app's server code run on Supabase, in South Korea (Seoul). Food database searches send your search words and phone region to our server, without your plan or health notes and without calling AI. Supabase handles the data only for us.
Help and feedback by email. AllFit opens your email app with your message, chosen topic, app version/build and iOS version. Nothing is sent until you send the email. Your email provider handles sending, and Google (Gmail) hosts our support mailbox. We see your sender address and anything you choose to include. We reply by email. We do not automatically attach your account ID, plan, food, workouts or health notes, and do not send support emails to AI. Support works without Cloud AI. Unsent text stays in the form until you leave it; it is not uploaded to our servers.
Cloud AI, only if you say yes. For meal descriptions, food photos, messages and optional custom exercise instructions, we use AI to read them and reply. We first try to read nutrition labels on your phone using Apple's Vision tools. If a label cannot be read clearly that way, we can send it to AI with your permission. Before the first request to these services, the app asks your permission. The AI services are:
- Anthropic (USA). They deliver replies and read food, photos and labels. Anthropic doesn't train its AI on what we send and deletes it within 30 days, unless the law needs it kept or it's needed to stop misuse.
- TypeSafe (USA). They help us understand what a message asks for and match foods. TypeSafe doesn't train its AI on what we send and keeps it only as long as needed to provide its service.
Along with your message or photo, they get what's needed to answer well: your plan, goals, training choices and skill starting points, food, workouts and saved routines (including sets, reps, weights, rest and recorded cardio time), sleep, weight, age, tracking choices and health notes. We do not include your profile name or email; text you enter can itself contain personal information. Both act only on our instructions, under data processing agreements, and with the EU and UK transfer safeguards. To stop AI use, go to Settings → Privacy → Cloud AI. Without it, you can still search the food database, enter calories manually, scan barcodes, read supported labels locally, reuse foods and follow your plan.
Open Food Facts, when you scan a barcode. We check saved foods and our shared product cache first. Your phone may then ask Open Food Facts (a non-profit food database) about the barcode, with our server as a backup. They see the barcode and the internet address making the request, without your plan or health notes. See their privacy policy. If Cloud AI is on and the product isn't in our shared cache yet, our server also sends the product's name and brand, which are public product details, to Anthropic once to pick its picture, and keeps that picture choice with the product for everyone. Nothing about you is sent with it.
Food stickers. When you log food with a meal photo, your phone makes a small sticker from it. The sticker stays on your phone, and the photo itself isn't kept. Deleting your data deletes your stickers.
Apple. Nutrition-label recognition, workout photo reading, food stickers and voice typing run on your phone. Those steps do not send your photo or voice to Apple or our AI providers. We keep the workout details you choose to save and discard the imported workout photo. We do not save voice recordings. Voice typing may need an internet connection once to get Apple's speech files. After that, it can work offline. The text is handled like anything you type, including asking permission before it goes to our AI services. Apple Health data stays under Apple's rules, and we only read what you allow.
We'll share information if the law requires it, and never otherwise.
Our website
Our website is hosted by Cloudflare. Cloudflare receives your internet address and basic request information to deliver the pages and keep the site secure. The website does not use cookies, advertising or analytics. If you email us from the website, the support email rules above apply.
Health information
Your health notes, weight, sleep and workouts are health information, which the law protects more strictly. We use them only to plan and adjust your workouts and food. We never use them for ads, never sell them, and never share them except as described above. In the UK and EU, we use them because you agree to it when you enter them. For AI, you agree separately in the app.
Consumer health data (Washington, Nevada and similar US state laws). We collect the consumer health data described above to provide the app's features, from you and from Apple Health with your permission. We share it only with the services named above, to provide the app. You can see it, delete it, and withdraw consent as described below.
How long we keep it
- Your account backup: until you delete your account. Deleting it removes your account content. Limited AI accounting records remain as described above.
- Support emails: we keep emails and replies for as long as needed to answer your request and meet any legal duties. They are separate from your app account and are not included in its data download or deleted automatically with it. Email us to request a copy or deletion.
- On your phone: until you delete the app or your account. Your latest chat is kept until you start a new chat or remove it from Recents. Its messages are also included in your account backup; the next backup replaces the old copy.
- AI services: Anthropic deletes within 30 days. TypeSafe keeps data as long as needed to provide its service.
Your choices and rights
- See and download everything: Settings → Download my data
- Delete everything: Settings → Delete my account
- Turn AI off: Settings → Privacy → Cloud AI
- Apple Health: change what we can read in the Health app, under Sharing
Depending on where you live (for example under the UK GDPR, EU GDPR, Australia's Privacy Act, Canada's PIPEDA, or US state laws), you also have the right to:
- ask what we hold;
- correct it, or move it elsewhere;
- object to how we use it;
- complain to your privacy regulator, such as the ICO in the UK, the OAIC in Australia, or the Office of the Privacy Commissioner in Canada.
Write to support.allfit@gmail.com and we'll reply within 30 days.
Children and teens
AllFit is for people aged 13 and older, and the app won't make a plan for anyone younger. We don't knowingly collect information from children under 13, and we follow the US Children's Online Privacy Protection Act (COPPA). If you think a child under 13 has used AllFit, write to us and we'll delete it.
Teens get extra protections: no weight-loss goals and no calorie cuts.
Changes
If we change this policy in a way that matters, we'll tell you in the app before it applies. If AI services change, the app asks your permission again.
Food data credits
Food numbers come from:
- USDA FoodData Central (public domain);
- UK CoFID (contains public sector information licensed under the Open Government Licence v3.0);
- the Australian Food Composition Database (Food Standards Australia New Zealand, CC BY 4.0);
- the Canadian Nutrient File (Health Canada; contains information licensed under the Open Government Licence – Canada);
- Open Food Facts (Open Database License).