Privacy Policy

1. Introduction

ToneFit ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the ToneFit mobile application and related services (collectively, the "Service").

By using ToneFit, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

• Email address — for account creation and communication
• Name — if you sign in with Apple and choose to share it
• Account credentials — securely managed authentication tokens

2.2 Health & Fitness Data

To personalize your workout experience, we collect:

• Biometric data — age, sex, height, and weight
• Training profile — experience level, fitness goals, preferred training location, and available equipment
• Health limitations — injury regions and movements to avoid
• Activity level — sedentary, mixed, or active lifestyle indicator
• Workout schedule — days per week and minutes per workout you prefer

2.3 Workout & Exercise Data

We collect data about your workouts to track your progress:

• Workout sessions — date, duration, status, and notes
• Exercise performance — sets, reps, weight lifted, and rest times
• Progress metrics — total volume, workout frequency, and streaks
• Exercise preferences — favorites and frequently performed exercises

2.4 AI Coaching Data

When you use our AI Coach feature:

• Messages — your questions and requests to the AI Coach
• Conversation history — previous messages in your current chat session
• Workout context — details about workouts you're modifying or creating

2.5 Usage & Device Data

We automatically collect:

• Device information — device type and operating system
• Session data — app interactions and feature usage
• Subscription status — your current subscription tier and expiration

3. How We Use Your Information

We use the collected information to:

• Provide the Service — create and manage your account, generate personalized workouts
• Power AI features — send relevant health and workout data to our AI systems to generate customized workout plans and coaching responses
• Track progress — calculate performance metrics, streaks, and analytics
• Process payments — manage subscriptions and billing through our payment processor
• Improve the Service — analyze usage patterns to enhance features and user experience
• Communicate with you — send important updates about your account or the Service

4. Third-Party AI Data Sharing

4.1 What We Share with AI Services

When you use AI-powered features, we send the following to our AI processing infrastructure:

• Your health profile summary (age, sex, measurements, goals, injuries, equipment, training preferences)
• Your messages and questions to the AI Coach
• Relevant workout context when modifying or creating workouts

4.2 AI Service Providers

Your data is processed by:

• Supabase — our backend infrastructure provider that hosts our AI Edge Functions
• Google Gemini — the large language model that powers our AI Coach and workout generation

4.3 Your Consent

In accordance with Apple's App Store Guidelines (5.1.2(i)), we obtain your explicit consent before sharing personal data with third-party AI services. You can manage your AI data sharing preferences in the app settings at any time.

If you decline AI data sharing, AI-powered features (AI Coach, AI workout generation) will not be available, but you can still use ToneFit's manual workout tracking features.

4.4 Data Retention by AI Services

• Messages sent to our AI service are processed in real-time and are not stored permanently by Google Gemini
• Our Supabase Edge Functions process requests transiently and do not retain conversation logs

5. Other Data Sharing and Disclosure

We do not sell your personal information. We share data only in the following circumstances:

5.1 Service Providers

• Supabase — authentication, database hosting, and AI processing
• RevenueCat — subscription and payment management
• Apple — Sign in with Apple authentication

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

6. Data Storage and Security

6.1 Local Storage

Most of your data is stored locally on your device:

• Workout history and exercise data
• Performance analytics and progress metrics
• User preferences and settings
• Streak data

6.2 Cloud Storage

The following data is stored on our secure servers:

• Account authentication data (Supabase)
• Subscription status (RevenueCat)

6.3 Security Measures

We implement industry-standard security measures including:

• Encrypted data transmission (TLS/SSL)
• Secure token-based authentication
• Local data encryption via iOS security frameworks

7. Your Rights and Choices

7.1 Access and Export

You can view your health profile, workout history, and analytics directly within the app.

7.2 Deletion

You can delete your account and all associated data through the app settings. Upon deletion:

• Your local data (workouts, exercises, preferences) is permanently erased
• Your authentication data is removed from Supabase
• Your subscription data is disassociated from RevenueCat

7.3 AI Data Sharing

You can enable or disable AI data sharing at any time in the app settings. Disabling this will prevent access to AI-powered features.

7.4 Data Portability

For GDPR and CCPA compliance, you may request a copy of your data by contacting us at the email address below.

8. Data Retention

• Local data — retained until you delete it or uninstall the app
• Account data — retained until you delete your account
• Subscription data — retained by RevenueCat per their retention policy for billing and legal compliance

9. Children's Privacy

ToneFit is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Health Disclaimer

ToneFit provides fitness and workout information for general wellness purposes only. The Service does not provide medical advice, diagnosis, or treatment. Always consult your physician or qualified healthcare provider before starting any new exercise program, especially if you have injuries, medical conditions, or health concerns.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers operate. These countries may have different data protection laws than your jurisdiction.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last Updated" date at the top of this policy. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: