Privacy Policy

1. Introduction

Welcome to FitSay ("we," "our," or "us"). FitSay is a social fitness tracking mobile application that uses AI-powered voice recognition to help users track their workouts and calories burned. We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App"). Please read this Privacy Policy carefully. By using FitSay, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

• Email Address: Required for account creation and authentication
• Password: Encrypted and stored securely
• Display Name: Your chosen name displayed in the app
• Username: Unique identifier for your profile

2.2 Profile Information

• Age and Date of Birth: Used for age-appropriate content and calorie calculations
• Gender: Used for accurate calorie and activity calculations
• Height and Weight: Essential for calculating calories burned during activities
• Target Weight: Your fitness goal for personalized recommendations
• Activity Level: Your current activity level (sedentary, lightly active, moderately active, very active, extremely active)
• Fitness Goals: Your fitness objectives (weight loss, muscle gain, endurance, flexibility, overall health)
• Profile Photo: Optional profile picture uploaded by you
• Bio: Optional personal description

2.3 Activity Data

• Voice Recordings: Audio recordings of your activity descriptions (up to 30 seconds per recording)
• Text Input: Activity descriptions entered via text
• Activity Details: Type of activity, duration, calories burned, date and time
• Weekly Calorie Goals: Your set weekly calorie targets
• Activity History: Historical record of all logged activities

2.4 Health Data (Optional)

• Apple Health Integration: If you choose to connect Apple Health/HealthKit, we may access:
• Active energy burned
• Workout data
• Activity information

This data is only accessed with your explicit permission and is used solely to import workouts and activities into FitSay.

2.5 Usage Data

• Subscription Type: Free or Pro subscription status
• Feature Usage: Which features you use and how often
• App Preferences: Theme preferences (light/dark/auto), language settings
• Device Information: Device type, operating system version

2.6 Social Data

• Friends List: Users you have added as friends
• Friend Requests: Sent and received friend requests
• Leaderboard Data: Your weekly calorie totals and rankings
• Social Interactions: Your interactions with other users' profiles

3. How We Use Your Information

3.1 Core Functionality

• Activity Tracking: Process your voice recordings and text inputs to identify activities and calculate calories burned
• AI Analysis: Use OpenAI's GPT-4o and Whisper models to analyze your activity descriptions and provide insights
• Calorie Calculation: Calculate calories burned based on your activities, duration, and personal metrics (age, gender, height, weight)
• Workout Plans: Generate personalized workout plans based on your fitness goals and preferences
• Progress Tracking: Track your weekly goals, activities, and fitness progress

3.2 Social Features

• Friends System: Enable you to add friends, send/receive friend requests, and view friends' profiles
• Leaderboards: Display your weekly calorie totals and rankings compared to your friends
• Profile Display: Show your profile information, stats, and activities to your friends (subject to privacy settings)

3.3 Service Improvement

• Analytics: Analyze usage patterns to improve app functionality and user experience
• Bug Fixes: Identify and resolve technical issues
• Feature Development: Develop new features based on user needs

3.4 Communication

• Account Management: Send password reset emails and account-related notifications
• Service Updates: Notify you about important changes to our services
• Support: Respond to your inquiries and provide customer support

4. Information Sharing and Disclosure

4.1 With Other Users

• Profile Information: Your profile information (name, username, profile photo, bio) may be visible to other users, subject to your privacy settings
• Activity Data: Your activities may be visible to your friends, subject to your privacy settings
• Leaderboard Data: Your weekly calorie totals and rankings are visible to your friends on leaderboards

4.2 With Service Providers

• Firebase (Google): We use Firebase for authentication, database storage, file storage, and cloud functions. Firebase's privacy policy applies: https://firebase.google.com/support/privacy
• OpenAI: We use OpenAI's API services (GPT-4o and Whisper) to process your voice recordings and text inputs. OpenAI's privacy policy applies: https://openai.com/policies/privacy-policy
• Apple Health: If you connect Apple Health, your health data is shared with Apple Health/HealthKit according to Apple's privacy policies

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.5 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Storage and Security

5.1 Data Storage

• Cloud Storage: Your data is stored securely in Firebase Firestore (database) and Firebase Storage (files)
• Local Storage: Some data is cached locally on your device using AsyncStorage and SecureStore for improved performance
• Geographic Location: Data is stored in Firebase's secure data centers

5.2 Security Measures

• Encryption: Passwords are encrypted and stored securely
• Authentication: Secure authentication through Firebase Authentication
• Access Controls: Firestore security rules ensure only authorized users can access their data
• Secure Storage: Sensitive credentials are stored using Expo SecureStore

5.3 Data Retention

• Account Data: Retained while your account is active
• Activity Data: Retained indefinitely unless you delete your account or specific activities
• Voice Recordings: Processed and deleted after analysis; not stored long-term
• Deleted Accounts: Data is deleted within 30 days of account deletion, except where retention is required by law

6. Your Privacy Rights and Choices

6.1 Access and Update

• Profile Information: You can access and update your profile information at any time through the Profile screen
• Activity Data: You can view, edit, or delete your activity history at any time

6.2 Privacy Settings

• Profile Visibility: Control who can see your profile and activities through Privacy Settings
• Friend Requests: Control who can send you friend requests
• Leaderboard Visibility: Control your visibility on leaderboards

6.3 Data Deletion

• Delete Activities: Delete individual activities through the Activities screen
• Delete Account: Request account deletion by contacting support or using the account deletion feature (if available)
• Apple Health: You can revoke Apple Health access at any time through your device settings

6.4 Opt-Out Options

• Notifications: Manage notification preferences in the app settings
• Data Collection: Some features require data collection; you can choose not to use those features

7. Children's Privacy

FitSay is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover that we have collected information from a child under 13, we will delete that information promptly.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using FitSay, you consent to the transfer of your information to these countries.

9. Third-Party Services

9.1 Firebase (Google)

• Purpose: Authentication, database, storage, cloud functions
• Privacy Policy: https://firebase.google.com/support/privacy
• Data Location: Google Cloud data centers worldwide

9.2 OpenAI

• Purpose: AI-powered activity analysis and workout plan generation
• Privacy Policy: https://openai.com/policies/privacy-policy
• Data Processing: Voice recordings and text inputs are sent to OpenAI for processing

9.3 Apple Health/HealthKit

• Purpose: Import workouts and activity data
• Privacy Policy: Apple's HealthKit privacy policy applies
• Data Access: Only accessed with your explicit permission

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the App
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)

Your continued use of FitSay after changes become effective constitutes acceptance of the updated Privacy Policy.

11. Your Consent

By using FitSay, you consent to:

• The collection and use of information as described in this Privacy Policy
• The processing of your voice recordings and text inputs by OpenAI
• The storage of your data in Firebase services
• The sharing of your profile and activity data with friends (subject to privacy settings)

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

Email: officialfitsay@outlook.com

13. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to access your personal information
• Right to request deletion of your personal information
• Right to non-discrimination for exercising your privacy rights

14. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, please contact us using the information provided in Section 12.